Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa
File:                     3133312e37322e3139362e302f32322d3234203d3e203532393734.roa (raw, json)
Hash identifier:          Yv75gPWgIb/c6WN1WbzZpuz2tvwM+pRy96OEzzEND1Q=
Subject key identifier:   F2:13:8B:D1:B2:25:D4:80:CF:62:A1:FB:D0:E5:CE:C3:E7:04:43:84
Certificate issuer:       /CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
Certificate serial:       55A9C7791F6C4A70A859629C1EDAB48862E51919
Authority key identifier: 9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa
Signing time:             Mon 13 Apr 2026 13:47:17 +0000
ROA not before:           Mon 13 Apr 2026 13:42:17 +0000
ROA not after:            Mon 12 Apr 2027 13:47:17 +0000
asID:                     52974
IP address blocks:        131.72.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl
                          rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 15:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a9:c7:79:1f:6c:4a:70:a8:59:62:9c:1e:da:b4:88:62:e5:19:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DFADCEDBD6F72121FB42196F61E059A1B3D2F45
        Validity
            Not Before: Apr 13 13:42:17 2026 GMT
            Not After : Apr 12 13:47:17 2027 GMT
        Subject: CN=F2138BD1B225D480CF62A1FBD0E5CEC3E7044384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5c:ce:e3:1d:eb:a8:48:c6:ba:5f:d6:9c:74:
                    3a:94:9b:4d:21:6f:c3:d0:e0:e7:78:b8:08:cb:2e:
                    c2:0d:d6:85:72:26:d6:76:a8:f3:b2:db:54:02:11:
                    09:28:8a:9b:64:72:cb:a2:1c:00:99:97:1a:3c:92:
                    55:f6:70:25:a2:f7:46:01:0b:9c:cb:66:e6:6a:80:
                    6c:1c:8f:7c:77:37:48:eb:e5:de:6d:e3:e2:9d:c1:
                    85:51:b6:51:36:77:a1:ba:e7:c2:45:70:7c:90:b3:
                    6a:66:bc:f5:1a:e3:41:1c:57:c4:bf:a7:23:3b:7a:
                    0e:7e:0d:7f:1e:dd:56:31:ec:b1:cf:16:a6:47:ba:
                    f5:a7:e0:23:ff:1c:a3:4c:32:3d:45:29:07:97:6e:
                    bf:4b:c5:e1:27:22:c6:da:aa:a2:90:0a:e0:98:65:
                    c9:38:5a:68:37:87:41:6f:4a:99:20:28:21:89:be:
                    66:f7:96:cc:7d:8d:f8:61:a3:14:a8:89:46:6f:d6:
                    88:d6:7b:a2:d8:18:ba:05:65:a5:2b:c0:b6:60:c9:
                    5d:8f:dc:21:eb:9b:99:42:ca:91:1f:a0:43:7f:c2:
                    2d:4b:23:c6:79:57:fe:24:f9:f4:fb:db:45:f0:ee:
                    7f:98:63:b8:b5:93:9d:96:c7:f4:53:46:26:ce:81:
                    32:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:13:8B:D1:B2:25:D4:80:CF:62:A1:FB:D0:E5:CE:C3:E7:04:43:84
            X509v3 Authority Key Identifier:
                keyid:9D:FA:DC:ED:BD:6F:72:12:1F:B4:21:96:F6:1E:05:9A:1B:3D:2F:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DFADCEDBD6F72121FB42196F61E059A1B3D2F45.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Du9zTgyAyDMfAkiePdQLC3TJevrgMJKUzPLicW1PthzL/0/3133312e37322e3139362e302f32322d3234203d3e203532393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:52:f9:85:fe:42:f5:5b:2c:c1:d9:2b:d8:0d:89:f1:2a:cc:
         51:53:58:26:c4:ab:c7:c6:f9:57:ff:91:e9:39:dc:7f:76:25:
         8b:73:ad:18:40:f2:80:60:e5:36:4c:aa:00:dd:15:21:6b:e2:
         0f:85:5d:ba:1b:60:9d:a3:a8:a9:ed:1d:e1:7f:cf:12:8f:f7:
         f2:33:be:13:0f:73:04:72:00:d1:da:05:7e:cb:a9:fe:e6:76:
         46:f5:fa:b1:f5:da:7e:3f:87:12:63:34:71:f6:b9:5b:22:23:
         f7:32:41:d6:ff:16:c5:5c:6f:53:97:4f:93:e7:1c:9b:55:bc:
         df:5a:5d:19:46:9e:4c:02:95:b3:81:4c:70:cc:bf:bf:89:4f:
         c1:3b:ab:d1:45:91:14:45:ff:5b:ec:a1:6f:93:0f:14:27:06:
         60:b4:2d:91:99:2f:42:e2:6e:1c:67:59:5d:77:f1:60:d0:d1:
         04:b8:f1:83:b7:57:ff:64:5c:a8:eb:db:18:d9:7f:84:a0:0c:
         18:4e:61:ab:cb:1f:b9:6f:92:f1:ba:2c:03:b3:13:33:6e:b0:
         d9:ba:f7:56:0b:40:5f:4b:a8:55:a7:80:c0:ea:af:44:0b:ce:
         b7:10:3a:34:31:a2:35:cd:c3:41:6c:6f:3f:16:85:1e:23:1c:
         b4:d4:a8:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVanHeR9sSnCoWWKcHtq0iGLlGRkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOURGQURDRURCRDZGNzIxMjFGQjQyMTk2RjYxRTA1OUEx
QjNEMkY0NTAeFw0yNjA0MTMxMzQyMTdaFw0yNzA0MTIxMzQ3MTdaMDMxMTAvBgNV
BAMTKEYyMTM4QkQxQjIyNUQ0ODBDRjYyQTFGQkQwRTVDRUMzRTcwNDQzODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfXM7jHeuoSMa6X9acdDqUm00h
b8PQ4Od4uAjLLsIN1oVyJtZ2qPOy21QCEQkoiptkcsuiHACZlxo8klX2cCWi90YB
C5zLZuZqgGwcj3x3N0jr5d5t4+KdwYVRtlE2d6G658JFcHyQs2pmvPUa40EcV8S/
pyM7eg5+DX8e3VYx7LHPFqZHuvWn4CP/HKNMMj1FKQeXbr9LxeEnIsbaqqKQCuCY
Zck4Wmg3h0FvSpkgKCGJvmb3lsx9jfhhoxSoiUZv1ojWe6LYGLoFZaUrwLZgyV2P
3CHrm5lCypEfoEN/wi1LI8Z5V/4k+fT720Xw7n+YY7i1k52Wx/RTRibOgTJbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU8hOL0bIl1IDPYqH70OXOw+cEQ4QwHwYDVR0j
BBgwFoAUnfrc7b1vchIftCGW9h4Fmhs9L0UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHU5elRneUF5RE1mQWtpZVBkUUxDM1RKZXZyZ01KS1V6UExpY1cxUHRo
ekwvMC85REZBRENFREJENkY3MjEyMUZCNDIxOTZGNjFFMDU5QTFCM0QyRjQ1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlERkFEQ0VEQkQ2RjcyMTIx
RkI0MjE5NkY2MUUwNTlBMUIzRDJGNDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R1OXpUZ3lBeURNZkFraWVQZFFMQzNUSmV2cmdNSktVelBMaWNXMVB0aHpMLzAv
MzEzMzMxMmUzNzMyMmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMy
MzkzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCg0jEMA0GCSqGSIb3DQEBCwUAA4IBAQBYUvmF/kL1
WyzB2SvYDYnxKsxRU1gmxKvHxvlX/5HpOdx/diWLc60YQPKAYOU2TKoA3RUha+IP
hV26G2Cdo6ip7R3hf88Sj/fyM74TD3MEcgDR2gV+y6n+5nZG9fqx9dp+P4cSYzRx
9rlbIiP3MkHW/xbFXG9Tl0+T5xybVbzfWl0ZRp5MApWzgUxwzL+/iU/BO6vRRZEU
Rf9b7KFvkw8UJwZgtC2RmS9C4m4cZ1ldd/Fg0NEEuPGDt1f/ZFyo69sY2X+EoAwY
TmGryx+5b5LxuiwDsxMzbrDZuvdWC0BfS6hVp4DA6q9EC863EDo0MaI1zcNBbG8/
FoUeIxy01KhH
-----END CERTIFICATE-----
Generated at Sat Apr 18 05:03:33 2026 by rpki-client