Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e2033333536.roa
File:                     3133312e3235352e35362e302f32322d3234203d3e2033333536.roa (raw, json)
Hash identifier:          CLseZsvgIX6zw0DwmP4JzfZx0CyAihpNjeLrtJe5ZRA=
Subject key identifier:   60:96:BC:3F:BE:3D:84:3F:5A:26:D7:63:F1:9B:BE:5C:A5:91:2E:A0
Certificate issuer:       /CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
Certificate serial:       423EFC1294DC416F0A05FCE95350D5E3B85A4CD6
Authority key identifier: CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e2033333536.roa
Signing time:             Fri 11 Sep 2026 13:53:48 +0000
ROA not before:           Fri 11 Sep 2026 13:48:48 +0000
ROA not after:            Fri 10 Sep 2027 13:53:48 +0000
asID:                     3356
IP address blocks:        131.255.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl
                          rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Sep 2026 17:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3e:fc:12:94:dc:41:6f:0a:05:fc:e9:53:50:d5:e3:b8:5a:4c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD8F95B9B42EF35274A249E09F9AF98392325D71
        Validity
            Not Before: Sep 11 13:48:48 2026 GMT
            Not After : Sep 10 13:53:48 2027 GMT
        Subject: CN=6096BC3FBE3D843F5A26D763F19BBE5CA5912EA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:ba:d3:b1:29:b0:48:45:1e:d2:fa:8b:de:
                    96:dd:24:a8:bb:10:5a:c0:9c:ff:94:0d:37:01:56:
                    59:6f:92:ff:cf:3d:4c:a2:71:8c:fd:e8:e0:36:2a:
                    4c:3a:ce:7f:84:d4:71:d8:74:04:4b:6a:6b:a5:62:
                    95:2d:0a:8b:0d:cc:90:7e:06:b6:b0:61:a3:b2:38:
                    fd:e7:ee:8d:64:68:a0:c7:4f:45:8a:ca:c7:74:c2:
                    82:eb:ec:08:27:8c:80:bb:c6:cf:58:ce:5b:dc:3f:
                    4e:af:06:9f:e7:6d:eb:3b:14:c5:6c:76:5b:45:f5:
                    b3:54:08:43:d7:3e:b2:e5:0f:a4:e9:f2:5c:4d:8c:
                    a8:f6:cf:9e:96:99:19:d1:87:e7:f5:08:57:dc:68:
                    e5:a8:fa:f1:b0:e6:ef:fb:fe:80:b5:aa:65:dd:ac:
                    1d:02:5c:f6:50:14:57:14:d5:b2:35:10:ff:34:f2:
                    cc:69:80:12:d4:cd:b7:e8:d6:2c:9a:b5:58:cb:ed:
                    d3:bb:5f:cc:fe:05:35:34:73:96:60:b5:12:46:da:
                    ec:45:c0:40:18:73:9e:d8:a7:d9:b5:73:37:2e:30:
                    a9:f7:cc:fe:71:1a:36:d3:af:1c:a4:aa:81:00:1b:
                    77:36:c6:3f:db:1e:e5:1c:5f:08:ff:f5:04:87:ff:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:96:BC:3F:BE:3D:84:3F:5A:26:D7:63:F1:9B:BE:5C:A5:91:2E:A0
            X509v3 Authority Key Identifier:
                keyid:CD:8F:95:B9:B4:2E:F3:52:74:A2:49:E0:9F:9A:F9:83:92:32:5D:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD8F95B9B42EF35274A249E09F9AF98392325D71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EehsCmAMDgw637KyfALkmsRoeQxCSGUQBY48hLqDhhPM/1/3133312e3235352e35362e302f32322d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:d7:cb:04:1d:c7:25:de:2a:a8:69:dc:62:64:b4:ad:33:5e:
         7d:2b:de:2b:c4:f0:d7:ab:ac:5f:14:be:74:60:ea:72:9b:43:
         df:0e:1a:a8:23:53:b2:24:b8:09:b0:20:13:58:cb:ef:1d:84:
         74:2b:3a:8a:30:98:b3:43:b1:62:27:b7:b7:eb:8d:22:fe:5b:
         ab:e7:61:6a:ef:87:c6:bf:ba:ff:3d:ae:62:89:ea:fa:0b:1d:
         54:b7:ef:dd:a5:cc:7b:aa:30:7a:fa:9a:4e:ff:b7:5b:1d:46:
         f9:50:b8:1b:12:82:1c:21:e8:39:c4:9c:0a:34:d8:91:7e:f2:
         89:a5:d7:e7:32:09:6d:cc:eb:98:d0:e4:cd:22:d1:d0:a6:71:
         9c:75:65:9d:50:1f:07:80:b7:be:4b:ec:50:98:d9:28:e4:55:
         e1:f9:03:d8:4c:e1:b9:38:d0:29:fc:70:81:c7:0f:d8:f8:7e:
         1c:cd:29:81:18:a8:8b:71:59:86:3a:cb:40:f9:c5:61:e8:eb:
         9a:49:2c:0e:ea:1f:f1:65:17:e4:9a:0e:45:39:e7:43:75:2f:
         06:2e:a1:91:01:5c:6c:c7:2c:92:8e:1b:bb:b8:f5:6b:47:6f:
         10:c8:da:12:95:e7:06:ba:2d:a4:92:78:54:ad:3a:1f:5d:8d:
         b4:d4:a3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:19:26 2026 by rpki-client