Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          HCkVDb0WFWMNdudDlLrFJV9lxOjcYJl49XR2mVIy8IE=
Subject key identifier:   C5:D1:C7:A3:B8:7A:B2:7A:40:0D:2C:1E:9B:3B:45:20:9F:36:35:69
Certificate issuer:       /CN=D4C1800777B6B27702B6747E148FA0063550B046
Certificate serial:       2DCA1624769C477B9DB03B1BF0C784D62B5B553F
Authority key identifier: D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa
Signing time:             Thu 17 Sep 2026 13:50:50 +0000
ROA not before:           Thu 17 Sep 2026 13:45:50 +0000
ROA not after:            Thu 16 Sep 2027 13:50:50 +0000
asID:                     265919
IP address blocks:        131.196.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl
                          rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 14:25:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ca:16:24:76:9c:47:7b:9d:b0:3b:1b:f0:c7:84:d6:2b:5b:55:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C1800777B6B27702B6747E148FA0063550B046
        Validity
            Not Before: Sep 17 13:45:50 2026 GMT
            Not After : Sep 16 13:50:50 2027 GMT
        Subject: CN=C5D1C7A3B87AB27A400D2C1E9B3B45209F363569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:78:fa:df:72:b0:7f:be:71:62:c0:7c:b6:76:
                    63:59:18:e3:c3:ed:58:ee:24:03:75:91:f5:96:f8:
                    ab:96:8b:52:9f:45:67:8e:7f:1d:8c:bb:26:46:db:
                    d0:d5:b5:40:31:2e:4d:c1:e5:17:08:f3:a4:a3:d6:
                    75:bf:3a:f9:a0:1a:ca:70:b3:bc:1e:87:20:49:38:
                    fe:7d:93:e1:23:da:76:0a:e7:f2:8c:fe:d0:a0:da:
                    b5:0e:ba:eb:a4:8c:0e:a6:07:83:0f:53:44:d1:d7:
                    f4:c9:9e:65:3a:ba:d3:00:3d:4b:e0:33:76:fe:f4:
                    cf:6c:ad:c4:fc:5e:96:b9:f3:ad:f4:b7:57:cb:9a:
                    7f:72:04:3d:6b:7d:1f:b4:b1:3b:29:fa:11:5d:31:
                    5b:5f:e6:22:42:04:40:90:80:96:d2:ce:50:b4:31:
                    d5:67:2e:f0:8c:af:59:5d:a6:ed:a2:7f:91:17:f2:
                    6c:c3:f1:7b:14:87:23:4d:7d:13:73:fa:41:66:14:
                    09:92:33:f6:28:bd:cd:ca:1c:11:68:dd:8a:4a:51:
                    92:28:38:28:54:5b:24:c0:33:3d:79:13:e3:09:b1:
                    9b:05:07:8d:51:c8:6d:27:96:17:fe:94:48:32:36:
                    ae:e7:0e:16:c7:89:df:a8:0a:5b:68:1a:3b:22:fe:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D1:C7:A3:B8:7A:B2:7A:40:0D:2C:1E:9B:3B:45:20:9F:36:35:69
            X509v3 Authority Key Identifier:
                keyid:D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139382e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:da:99:73:1e:a3:6d:7b:5a:e5:5a:3e:a7:64:7b:b0:c1:48:
         44:3f:08:ce:b5:6a:91:d5:8a:6c:93:e2:f7:6e:09:c7:ce:19:
         79:23:70:a9:e8:61:b4:ce:88:e3:e5:0d:63:38:a9:d1:16:fd:
         9e:0e:38:44:41:8e:0d:e3:25:c1:fa:0e:f3:15:4a:68:23:b1:
         bc:43:ff:05:1b:81:06:6e:f3:50:c2:9c:6a:0c:01:a1:22:30:
         c2:7f:6c:4f:a9:c6:4a:1d:2d:6b:ef:20:46:25:ab:d9:79:c6:
         51:30:9c:bb:bf:0e:87:36:c1:02:ac:11:23:ee:8b:9c:75:43:
         82:12:a8:60:f9:6d:34:5c:d7:35:fb:fc:d7:eb:e8:66:a3:de:
         73:2d:e3:3e:df:5b:d6:e2:65:91:89:05:74:9e:48:64:45:4f:
         1c:c9:6e:a4:56:74:a4:fb:dd:78:aa:45:89:d1:04:d0:03:63:
         ce:90:c0:35:d5:c9:d9:5a:e9:29:cc:e1:7f:4d:25:a2:47:4d:
         bf:fa:ba:ee:6b:c3:3e:8d:9b:fa:06:2d:a9:8a:72:f2:2e:b5:
         c8:a1:94:08:d9:0b:b2:d7:0d:b7:86:6b:c4:f4:56:f8:16:de:
         1e:0e:81:71:83:34:a9:6f:d6:d0:90:29:f2:a9:cd:a3:0f:33:
         9d:3f:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:02 2026 by rpki-client