Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32342d3234203d3e20323635383934.roa
File:                     3133312e3139362e34382e302f32342d3234203d3e20323635383934.roa (raw, json)
Hash identifier:          p13ZMhOYP1nVc6nZrSS7G4weqg8S9Dsa6DQ0RG565HM=
Subject key identifier:   60:49:E3:12:1D:8E:F5:58:23:29:39:9D:FE:8E:F8:BD:8A:54:41:09
Certificate issuer:       /CN=284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957
Certificate serial:       0D0AED54031B69E4BB0D43D6C6BC9D1DF7E0697B
Authority key identifier: 28:4F:A0:BD:05:5C:B8:B9:7A:3D:58:D1:1C:2F:F1:0C:AF:DF:39:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32342d3234203d3e20323635383934.roa
Signing time:             Wed 14 Oct 2026 18:06:36 +0000
ROA not before:           Wed 14 Oct 2026 18:01:36 +0000
ROA not after:            Wed 13 Oct 2027 18:06:36 +0000
asID:                     265894
IP address blocks:        131.196.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.crl
                          rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:0a:ed:54:03:1b:69:e4:bb:0d:43:d6:c6:bc:9d:1d:f7:e0:69:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957
        Validity
            Not Before: Oct 14 18:01:36 2026 GMT
            Not After : Oct 13 18:06:36 2027 GMT
        Subject: CN=6049E3121D8EF5582329399DFE8EF8BD8A544109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:69:06:f8:52:87:c4:fa:92:9e:d8:40:73:
                    a8:bb:20:d1:57:5d:47:43:5f:09:38:be:a4:9c:3a:
                    9e:d2:a9:da:cd:3e:85:60:ce:c2:04:5f:97:39:75:
                    0a:66:7d:c6:26:15:5b:03:c8:c2:11:a7:6e:92:04:
                    ff:49:9f:24:e2:4b:9a:40:de:66:36:ea:05:c8:6e:
                    5e:fa:8c:18:84:42:88:7c:71:a6:02:59:a0:87:59:
                    00:f5:ae:8a:a2:37:8a:e1:0b:3f:7f:84:b5:2c:43:
                    69:de:d3:dd:3b:a1:42:5a:dc:a5:26:f2:52:9d:53:
                    ac:eb:f4:5a:b2:50:8c:fd:23:b7:84:8e:12:28:ba:
                    3c:9c:84:5e:6d:3d:6d:b6:8f:9d:91:26:16:a1:a0:
                    d6:e5:f1:2a:76:4c:60:4f:38:9e:3d:e5:e6:df:63:
                    d0:32:d5:35:8f:e0:c0:20:b5:73:d5:7c:50:58:db:
                    39:18:8c:08:c0:f5:5e:49:b0:11:47:a9:b6:20:aa:
                    bd:a9:5f:0b:ff:25:21:bd:10:6f:b6:19:c6:4c:75:
                    97:c3:10:95:cb:43:c3:84:26:f0:39:a2:55:bb:af:
                    3a:fb:77:60:f2:21:ac:14:9a:2f:3c:ea:ff:9a:d3:
                    1b:83:0a:73:ec:fc:68:a0:20:02:b1:b0:23:ab:41:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:49:E3:12:1D:8E:F5:58:23:29:39:9D:FE:8E:F8:BD:8A:54:41:09
            X509v3 Authority Key Identifier:
                keyid:28:4F:A0:BD:05:5C:B8:B9:7A:3D:58:D1:1C:2F:F1:0C:AF:DF:39:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284FA0BD055CB8B97A3D58D11C2FF10CAFDF3957.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/3133312e3139362e34382e302f32342d3234203d3e20323635383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:3e:72:9c:9a:78:15:39:6e:b6:90:61:44:1e:f1:68:27:99:
         65:b3:8a:6d:e3:a7:34:78:9b:d3:e4:cc:bb:08:a1:0b:c7:60:
         06:85:a1:84:e6:7f:33:92:e2:33:a3:3d:84:07:40:fa:c3:f1:
         80:94:64:a8:27:49:cc:7c:ee:98:31:c6:4e:ec:ed:e7:1f:b6:
         f3:cb:34:46:da:c9:ce:51:2a:06:dc:df:76:44:24:eb:12:6e:
         57:33:64:e2:cc:aa:27:13:4a:ec:c4:8d:50:f6:ef:ed:b9:c2:
         4b:85:b6:e1:e7:3f:06:21:26:05:ce:95:b9:34:41:39:c3:fc:
         20:e2:2d:6d:f5:d2:02:65:6e:f4:31:1a:14:7c:fc:5f:31:31:
         12:1f:5d:87:7d:bf:bc:be:87:09:8c:4c:b5:29:e1:c1:b3:05:
         11:be:c3:e9:fd:7e:48:04:f3:3f:69:8f:5d:31:0a:f6:eb:25:
         23:a8:d5:56:cd:48:cc:70:2b:2e:a2:88:11:15:56:2b:1c:62:
         c3:35:a8:29:0d:ac:eb:8c:cb:be:e8:e9:8d:a9:1c:7f:e3:f2:
         70:cb:7a:86:7d:3d:98:60:7f:07:92:5c:43:68:59:27:88:d8:
         2f:0d:41:41:05:f3:b0:b5:76:c8:5c:94:12:b5:59:c1:4b:1e:
         6b:67:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:53:58 2026 by rpki-client