Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38302e302f32322d3332203d3e20323634343634.roa
File:                     3133322e3235352e38302e302f32322d3332203d3e20323634343634.roa (raw, json)
Hash identifier:          jbaKXIziTjy4G50XuvkbH/yLQB5zmUkwdOy2A6hVpvU=
Subject key identifier:   65:71:6E:33:A6:46:F4:E5:0C:75:ED:8B:A2:1D:3F:2B:17:20:71:1B
Certificate issuer:       /CN=78E233612DB5FD2E08E68BFDD9E998C3938F6EF4
Certificate serial:       6931A4BF54FF02060D2F126B8135F90F5B56829E
Authority key identifier: 78:E2:33:61:2D:B5:FD:2E:08:E6:8B:FD:D9:E9:98:C3:93:8F:6E:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E233612DB5FD2E08E68BFDD9E998C3938F6EF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38302e302f32322d3332203d3e20323634343634.roa
Signing time:             Sun 13 Sep 2026 14:08:34 +0000
ROA not before:           Sun 13 Sep 2026 14:03:34 +0000
ROA not after:            Sun 12 Sep 2027 14:08:34 +0000
asID:                     264464
IP address blocks:        132.255.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/78E233612DB5FD2E08E68BFDD9E998C3938F6EF4.crl
                          rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/78E233612DB5FD2E08E68BFDD9E998C3938F6EF4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E233612DB5FD2E08E68BFDD9E998C3938F6EF4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 07:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:31:a4:bf:54:ff:02:06:0d:2f:12:6b:81:35:f9:0f:5b:56:82:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78E233612DB5FD2E08E68BFDD9E998C3938F6EF4
        Validity
            Not Before: Sep 13 14:03:34 2026 GMT
            Not After : Sep 12 14:08:34 2027 GMT
        Subject: CN=65716E33A646F4E50C75ED8BA21D3F2B1720711B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:39:cb:62:0b:74:15:4a:36:e8:2b:f8:42:eb:
                    6b:44:2a:a3:43:78:94:0b:08:de:c5:93:3a:c7:d0:
                    ad:0e:9e:df:ee:64:37:7f:6c:99:e8:a2:f0:5c:6d:
                    74:c1:1c:b4:0a:fe:fb:fb:5d:09:e1:e9:66:e5:04:
                    c8:69:09:81:be:3f:71:3b:17:b2:16:20:5d:a5:d6:
                    df:2c:6a:0a:f8:18:cf:e5:12:ad:7b:fb:65:2a:01:
                    1e:71:86:59:4a:e2:c4:c3:c0:0d:54:75:ef:c6:c9:
                    ee:26:d2:3c:94:66:f0:e7:2b:77:72:0d:64:02:c4:
                    e2:8b:5a:da:66:00:fe:0b:ca:9f:1f:24:65:8b:b4:
                    60:f0:c8:a3:6b:cb:a2:78:6b:be:9e:d7:d3:c9:e5:
                    f2:37:35:d2:af:ef:bb:b8:e1:33:02:91:50:13:57:
                    67:1c:69:b1:6e:cb:f3:bb:0b:7f:71:46:cf:b2:41:
                    f0:ca:73:02:7a:26:58:76:64:fe:cb:c2:47:10:13:
                    29:1d:77:9e:c5:2e:5f:c8:f2:06:59:b0:c9:b8:82:
                    6e:8a:ed:77:0e:7d:5c:e7:be:aa:08:40:e6:e6:ab:
                    fd:1a:bb:74:22:2d:2e:5b:01:f8:cf:cc:1a:4f:30:
                    cc:cf:8f:38:c2:f8:16:4a:82:97:17:18:ea:ed:0a:
                    69:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:71:6E:33:A6:46:F4:E5:0C:75:ED:8B:A2:1D:3F:2B:17:20:71:1B
            X509v3 Authority Key Identifier:
                keyid:78:E2:33:61:2D:B5:FD:2E:08:E6:8B:FD:D9:E9:98:C3:93:8F:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/78E233612DB5FD2E08E68BFDD9E998C3938F6EF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/78E233612DB5FD2E08E68BFDD9E998C3938F6EF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmBYtGF8KhDKrJwv99qzEHcwUy9Tq6iyCkDbbt1Zh4Lm/0/3133322e3235352e38302e302f32322d3332203d3e20323634343634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:22:23:3b:80:c2:3c:f4:c3:c0:7a:e3:64:58:7d:ed:ee:39:
         0c:20:6f:7f:e1:8b:26:8e:3e:64:0f:da:da:67:c0:61:9a:d8:
         91:34:44:42:c3:61:99:e9:8b:83:2b:da:3f:bd:cf:1a:0b:d7:
         57:d7:3e:cc:10:1e:dd:51:01:84:6a:8b:37:11:d8:52:f9:24:
         4a:7f:94:4d:3e:39:45:47:d5:33:28:35:94:6a:c5:77:c2:a7:
         b8:bc:1e:e6:4a:b0:ad:1a:8a:73:fd:ee:b9:31:e7:a2:14:cb:
         04:d3:3b:eb:69:c2:c5:d2:48:c4:5d:87:b1:37:c8:6e:5f:95:
         2a:a3:37:78:f7:5d:bc:2c:33:49:28:39:43:23:c5:18:23:4c:
         12:45:67:bb:24:00:4a:9c:59:8c:60:c9:dc:6b:0f:86:8d:01:
         aa:b5:ad:c8:73:2e:d3:4a:62:16:7a:67:f4:aa:4c:3d:a7:01:
         df:73:58:7e:4b:15:d4:cb:a3:51:ed:00:e8:cb:7e:e6:4f:b6:
         a2:58:d9:c5:5c:4f:ee:16:f6:ff:0a:10:91:ec:c9:6d:aa:e3:
         f6:0a:09:15:0a:44:0a:b4:8a:4f:29:a2:85:98:ff:bb:06:86:
         22:aa:dd:e4:67:be:98:38:54:e2:9b:0f:27:24:69:e7:6d:99:
         47:a9:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:24:30 2026 by rpki-client