Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa
File:                     3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa (raw, json)
Hash identifier:          8EAavkhVs7LBy49PVZjeHyFwJstXiUfWVIJI0RYXrQE=
Subject key identifier:   F1:78:07:E4:8C:A9:D1:39:60:CC:C8:9D:B9:B8:C0:5C:22:EC:1B:33
Certificate issuer:       /CN=51C3861EB5DE6985DCA79CB6A24D19032DC727E2
Certificate serial:       19266D8A447AF444E0260B1021CDA16817AC7052
Authority key identifier: 51:C3:86:1E:B5:DE:69:85:DC:A7:9C:B6:A2:4D:19:03:2D:C7:27:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa
Signing time:             Tue 09 Jun 2026 12:40:33 +0000
ROA not before:           Tue 09 Jun 2026 12:35:33 +0000
ROA not after:            Tue 08 Jun 2027 12:40:33 +0000
asID:                     264446
IP address blocks:        131.221.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.crl
                          rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 02:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:26:6d:8a:44:7a:f4:44:e0:26:0b:10:21:cd:a1:68:17:ac:70:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51C3861EB5DE6985DCA79CB6A24D19032DC727E2
        Validity
            Not Before: Jun  9 12:35:33 2026 GMT
            Not After : Jun  8 12:40:33 2027 GMT
        Subject: CN=F17807E48CA9D13960CCC89DB9B8C05C22EC1B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:4d:bc:65:bd:20:54:fe:d6:08:e9:fc:a9:
                    f0:cb:0e:2f:95:f2:78:a6:e8:30:61:ab:d7:51:14:
                    ed:ad:26:5b:a2:87:b9:e9:b8:a4:2c:61:b2:51:4a:
                    4a:25:d4:0a:81:b7:3e:82:95:ac:ce:ff:f4:c2:bc:
                    67:2a:e4:dc:f0:1f:e2:6d:ef:2f:03:fc:66:9a:f9:
                    19:72:3b:29:51:46:0b:20:9c:15:28:f7:e0:17:8e:
                    db:ee:4c:3a:f9:a7:98:4e:9c:87:9a:17:77:51:29:
                    5a:c3:13:1f:35:e0:a7:8f:23:62:90:09:ff:75:bd:
                    ba:5c:5a:df:3a:84:0e:ee:95:94:63:39:91:a3:47:
                    e9:7a:a2:ff:dc:ae:32:8f:bc:03:87:2a:af:f8:24:
                    0d:1e:e6:b9:8f:00:e0:d4:d9:fb:27:4d:2b:2e:ab:
                    42:e3:ae:44:ce:4d:0b:4d:44:d5:a4:ea:23:36:14:
                    5d:36:ce:2e:93:6a:5c:51:84:69:ca:f7:6f:d4:a6:
                    a7:f2:d5:3c:b1:a3:04:c8:64:a5:fc:2f:be:6c:1d:
                    ee:9b:fc:a3:6d:0d:b9:4d:8e:a8:6c:61:41:56:04:
                    3b:cf:90:29:30:f1:4a:a9:47:ae:41:ae:a0:69:42:
                    b3:a7:fe:34:ac:6a:37:b7:01:60:a6:28:bf:ed:f5:
                    2e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:78:07:E4:8C:A9:D1:39:60:CC:C8:9D:B9:B8:C0:5C:22:EC:1B:33
            X509v3 Authority Key Identifier:
                keyid:51:C3:86:1E:B5:DE:69:85:DC:A7:9C:B6:A2:4D:19:03:2D:C7:27:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51C3861EB5DE6985DCA79CB6A24D19032DC727E2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AvsMDFLKiXVciDCivm2nooEniEMSwP6sShh5X6mzhe6/0/3133312e3232312e3233302e302f32342d3234203d3e20323634343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:3a:f1:02:e8:f8:f3:f8:a0:ee:98:38:e9:e3:10:de:e5:62:
         6a:49:28:6a:e9:de:ef:a5:ff:15:db:75:14:fc:9c:8b:80:4d:
         0b:3a:49:39:0d:c4:55:34:e2:f2:54:7c:4f:c0:b4:f6:be:66:
         a0:99:fd:95:33:b7:58:a2:66:54:0b:0e:ee:25:49:50:1f:32:
         62:bd:cf:cf:92:e9:1c:10:43:49:18:ca:04:a8:25:86:b4:97:
         07:75:2a:ae:20:9b:95:99:08:e7:6b:b6:47:e5:2b:75:d1:7e:
         63:29:01:d1:85:7c:c9:f0:2c:76:9e:01:aa:5b:17:c1:57:f9:
         34:5d:ab:27:14:ab:81:b2:ea:b8:06:0b:b6:86:70:10:e6:5a:
         81:01:77:c3:12:c8:bd:61:26:3e:68:7f:bf:6d:4d:c7:eb:dc:
         6c:61:5f:c6:2b:25:fd:41:39:38:e6:11:a2:61:34:dd:11:d7:
         6c:8b:1e:fa:37:6d:f7:74:ea:a6:79:4a:57:da:bc:45:eb:ef:
         f7:12:ed:cf:2f:40:3e:7d:75:bb:02:eb:8b:98:ab:3d:ec:0e:
         90:83:db:a2:7a:d3:c6:e7:e2:33:19:c6:35:b4:ec:22:8a:15:
         79:ff:ee:c9:6e:94:36:50:d7:5b:e6:3f:e0:1a:d2:3b:ea:8a:
         36:05:4c:8b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUGSZtikR69ETgJgsQIc2haBescFIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTFDMzg2MUVCNURFNjk4NURDQTc5Q0I2QTI0RDE5MDMy
REM3MjdFMjAeFw0yNjA2MDkxMjM1MzNaFw0yNzA2MDgxMjQwMzNaMDMxMTAvBgNV
BAMTKEYxNzgwN0U0OENBOUQxMzk2MENDQzg5REI5QjhDMDVDMjJFQzFCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3k28Zb0gVP7WCOn8qfDLDi+V
8nim6DBhq9dRFO2tJluih7npuKQsYbJRSkol1AqBtz6ClazO//TCvGcq5NzwH+Jt
7y8D/Gaa+RlyOylRRgsgnBUo9+AXjtvuTDr5p5hOnIeaF3dRKVrDEx814KePI2KQ
Cf91vbpcWt86hA7ulZRjOZGjR+l6ov/crjKPvAOHKq/4JA0e5rmPAODU2fsnTSsu
q0LjrkTOTQtNRNWk6iM2FF02zi6TalxRhGnK92/Upqfy1TyxowTIZKX8L75sHe6b
/KNtDblNjqhsYUFWBDvPkCkw8UqpR65BrqBpQrOn/jSsaje3AWCmKL/t9S51AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU8XgH5Iyp0TlgzMidubjAXCLsGzMwHwYDVR0j
BBgwFoAUUcOGHrXeaYXcp5y2ok0ZAy3HJ+IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUF2c01ERkxLaVhWY2lEQ2l2bTJub29FbmlFTVN3UDZzU2hoNVg2bXpo
ZTYvMC81MUMzODYxRUI1REU2OTg1RENBNzlDQjZBMjREMTkwMzJEQzcyN0UyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUxQzM4NjFFQjVERTY5ODVE
Q0E3OUNCNkEyNEQxOTAzMkRDNzI3RTIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlBdnNNREZMS2lYVmNpRENpdm0ybm9vRW5pRU1Td1A2c1NoaDVYNm16aGU2LzAv
MzEzMzMxMmUzMjMyMzEyZTMyMzMzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDM0MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIPd5jANBgkqhkiG9w0BAQsFAAOCAQEAuzrx
Auj48/ig7pg46eMQ3uViakkoaune76X/Fdt1FPyci4BNCzpJOQ3EVTTi8lR8T8C0
9r5moJn9lTO3WKJmVAsO7iVJUB8yYr3Pz5LpHBBDSRjKBKglhrSXB3UqriCblZkI
52u2R+UrddF+YykB0YV8yfAsdp4BqlsXwVf5NF2rJxSrgbLquAYLtoZwEOZagQF3
wxLIvWEmPmh/v21Nx+vcbGFfxisl/UE5OOYRomE03RHXbIse+jdt93TqpnlKV9q8
Revv9xLtzy9APn11uwLri5irPewOkIPbonrTxufiMxnGNbTsIooVef/uyW6UNlDX
W+Y/4BrSO+qKNgVMiw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:53:17 2026 by rpki-client