Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/3133312e3232312e3132302e302f32322d3332203d3e20323634343136.roa
File:                     3133312e3232312e3132302e302f32322d3332203d3e20323634343136.roa (raw, json)
Hash identifier:          k9fFU88DbXBVuE6wuwZEJOt71e5Y4qpyBcnX9Y7GccQ=
Subject key identifier:   EF:61:C5:BE:EF:12:73:F7:08:BA:F8:7A:87:D0:33:4A:E5:44:B3:58
Certificate issuer:       /CN=317D8B3789BE9C11B1A05D85547B70E51F2948CF
Certificate serial:       428E9BFA6F30FED9A03B28C679A868DBDD5DA88E
Authority key identifier: 31:7D:8B:37:89:BE:9C:11:B1:A0:5D:85:54:7B:70:E5:1F:29:48:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317D8B3789BE9C11B1A05D85547B70E51F2948CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/3133312e3232312e3132302e302f32322d3332203d3e20323634343136.roa
Signing time:             Fri 29 May 2026 00:29:46 +0000
ROA not before:           Fri 29 May 2026 00:24:46 +0000
ROA not after:            Fri 28 May 2027 00:29:46 +0000
asID:                     264416
IP address blocks:        131.221.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/317D8B3789BE9C11B1A05D85547B70E51F2948CF.crl
                          rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/317D8B3789BE9C11B1A05D85547B70E51F2948CF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317D8B3789BE9C11B1A05D85547B70E51F2948CF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 05:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:8e:9b:fa:6f:30:fe:d9:a0:3b:28:c6:79:a8:68:db:dd:5d:a8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317D8B3789BE9C11B1A05D85547B70E51F2948CF
        Validity
            Not Before: May 29 00:24:46 2026 GMT
            Not After : May 28 00:29:46 2027 GMT
        Subject: CN=EF61C5BEEF1273F708BAF87A87D0334AE544B358
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:4a:6f:1c:3d:7f:e0:d8:a2:8c:46:ad:93:
                    d0:59:d9:dd:1b:b4:0a:cc:8e:2f:97:54:d7:ad:a4:
                    33:c9:51:f7:ee:1e:db:89:1e:ba:aa:27:54:dd:c2:
                    bf:d0:a9:ed:e2:02:ed:3c:f7:d4:63:b0:7e:4a:29:
                    f7:80:9a:9c:e0:af:ff:99:c5:fe:f4:f2:7d:3e:74:
                    c5:7a:fc:e9:8c:d5:1e:00:3f:2d:14:5a:5a:91:03:
                    ce:de:39:bb:2d:06:7f:b4:c7:a1:bb:62:42:29:62:
                    dc:e5:ba:7e:d8:02:85:5f:53:6e:f5:64:08:22:47:
                    79:63:6d:f0:87:5d:82:f1:10:2e:c0:c4:ae:b6:b5:
                    3f:23:f2:db:5e:69:8a:80:d7:1a:e5:b8:a8:46:1a:
                    ae:cd:f5:e9:41:58:b1:68:8e:7f:01:21:23:e4:02:
                    b8:71:ca:ba:88:4a:a1:69:e2:27:d0:b7:14:f3:5f:
                    59:ba:4f:e0:0c:9c:cc:24:b4:b5:cb:8f:94:f6:e5:
                    3f:09:ad:5b:52:50:61:4d:f7:50:41:f8:60:a8:b0:
                    44:32:af:08:6e:17:ad:62:4f:44:a0:8e:d1:09:c5:
                    8a:99:01:3c:c4:e4:0c:3c:31:23:6b:56:b0:34:4c:
                    fb:eb:a9:52:59:e4:1c:22:0b:36:72:e6:d8:19:ec:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:61:C5:BE:EF:12:73:F7:08:BA:F8:7A:87:D0:33:4A:E5:44:B3:58
            X509v3 Authority Key Identifier:
                keyid:31:7D:8B:37:89:BE:9C:11:B1:A0:5D:85:54:7B:70:E5:1F:29:48:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/317D8B3789BE9C11B1A05D85547B70E51F2948CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/317D8B3789BE9C11B1A05D85547B70E51F2948CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJeU5R1MNjAHLCxJ2n7iUXop5c6Ape6ZUGtU84nHzpeg/0/3133312e3232312e3132302e302f32322d3332203d3e20323634343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:b5:24:5a:c9:d3:53:ae:eb:72:3a:fc:0f:e8:76:5c:7b:58:
         70:68:09:d9:9d:5a:74:98:cd:77:1c:7a:02:5a:26:6a:4f:88:
         2c:ac:92:ca:a3:fd:0f:10:5d:65:30:10:da:fd:97:6e:74:68:
         4b:38:17:97:fb:4a:74:61:9d:d9:57:17:8d:e7:59:9f:88:19:
         c2:97:a0:10:1d:5c:14:a2:d6:0f:f3:8d:d9:a8:fd:1a:ef:f0:
         ab:db:de:77:91:09:d8:ca:74:59:bd:8d:67:d0:24:4e:db:99:
         93:71:0c:7b:d3:bf:83:c4:d9:2e:d0:54:dc:b6:89:ad:6f:f8:
         3d:87:5e:83:c5:c9:ed:12:f7:81:ad:e9:63:cb:2a:7f:32:8a:
         6d:db:39:68:af:1c:5d:f5:03:c6:ff:13:7b:23:1f:3c:26:2b:
         87:cf:42:d3:e5:d5:c2:88:f5:1a:b7:21:a8:b5:28:68:90:0d:
         ab:1c:56:1f:b3:67:29:86:9f:49:41:00:bc:43:91:58:7c:09:
         ea:20:95:e3:76:d8:74:d8:df:9b:8e:05:12:b3:af:b9:52:40:
         16:cb:48:4f:db:37:dc:d7:81:9b:be:ca:75:a5:be:07:96:b1:
         a0:4f:12:7a:bc:dd:b0:7a:5d:c1:bb:87:7c:47:dc:56:9d:70:
         48:74:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:03:18 2026 by rpki-client