Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234342e302f32322d3232203d3e20323632393632.roa
File:                     3133312e3235352e3234342e302f32322d3232203d3e20323632393632.roa (raw, json)
Hash identifier:          zyyTnFpcBYB90AiPmAYUaVBT3c8PwmbVYKEXsBsU8QI=
Subject key identifier:   AF:C5:5F:C1:A5:F7:F7:66:31:2B:0E:4C:AB:07:F7:C5:54:DE:85:2F
Certificate issuer:       /CN=DBAFA98C9D202127B4FDB477BEE918DADA4CF157
Certificate serial:       6B440A153C194DD001C1D7011B41DF08F2E94F7F
Authority key identifier: DB:AF:A9:8C:9D:20:21:27:B4:FD:B4:77:BE:E9:18:DA:DA:4C:F1:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234342e302f32322d3232203d3e20323632393632.roa
Signing time:             Fri 17 Apr 2026 17:02:43 +0000
ROA not before:           Fri 17 Apr 2026 16:57:43 +0000
ROA not after:            Fri 16 Apr 2027 17:02:43 +0000
asID:                     262962
IP address blocks:        131.255.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.crl
                          rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 Apr 2026 20:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:44:0a:15:3c:19:4d:d0:01:c1:d7:01:1b:41:df:08:f2:e9:4f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBAFA98C9D202127B4FDB477BEE918DADA4CF157
        Validity
            Not Before: Apr 17 16:57:43 2026 GMT
            Not After : Apr 16 17:02:43 2027 GMT
        Subject: CN=AFC55FC1A5F7F766312B0E4CAB07F7C554DE852F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:01:85:b6:61:2d:52:a3:d8:22:9d:0e:c2:
                    ea:df:02:03:a3:4e:e9:fe:01:f7:a9:fe:06:3e:f6:
                    e1:b3:7a:3f:24:38:e5:2b:ad:89:d5:f5:94:d9:6a:
                    78:ab:5d:c1:20:cf:03:7f:f9:8c:6c:c6:1d:47:11:
                    e5:80:4d:0f:ce:1c:ff:e5:8c:0b:69:92:fe:df:58:
                    f6:37:7f:61:ea:6f:76:17:73:44:6d:dc:5b:f5:a9:
                    f4:90:68:eb:42:94:6e:00:89:c4:7e:60:82:49:c8:
                    e8:d4:7e:c0:4a:1e:e9:c9:d6:0d:5b:2d:c5:ab:19:
                    96:63:a1:50:9f:a2:65:0b:1a:1a:f6:61:ce:b4:82:
                    e1:54:9b:b4:2f:dc:87:5f:72:9d:94:98:71:42:5f:
                    13:cc:7e:41:6d:ad:8c:45:e0:2c:6a:e8:87:47:38:
                    88:8b:f0:b7:59:ba:a5:4f:07:6c:d1:30:1c:f1:8d:
                    3f:05:7a:cb:2f:ef:da:5f:47:49:43:32:42:24:0a:
                    67:cb:f8:9a:f2:93:e1:ec:df:dd:5a:0b:78:ca:80:
                    88:28:22:29:12:40:ee:5c:ba:13:4e:ff:0e:a8:cf:
                    d5:12:bd:08:0b:e0:7d:2c:dc:d8:ff:e7:f0:52:52:
                    44:3c:f6:be:7d:40:ff:d3:6a:0a:0a:db:74:61:1f:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:5F:C1:A5:F7:F7:66:31:2B:0E:4C:AB:07:F7:C5:54:DE:85:2F
            X509v3 Authority Key Identifier:
                keyid:DB:AF:A9:8C:9D:20:21:27:B4:FD:B4:77:BE:E9:18:DA:DA:4C:F1:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBAFA98C9D202127B4FDB477BEE918DADA4CF157.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F1yJLJWe52bZusLR9GujnqxTBcoRULqDJ8yvb85CfucX/0/3133312e3235352e3234342e302f32322d3232203d3e20323632393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:68:4f:49:13:fe:71:40:59:a5:de:24:e3:79:3f:b2:b4:
         ef:22:03:32:28:de:32:44:ea:71:d0:5c:d1:8b:17:7a:bf:b1:
         3b:a7:aa:24:43:1f:9c:39:e9:19:9d:2f:1d:1f:3e:97:b2:c7:
         ee:2e:f7:58:70:ba:c4:8d:75:68:e2:a1:21:e9:0b:aa:bc:f7:
         11:bd:cc:e6:4e:47:f0:98:e2:12:aa:43:af:96:b8:e4:95:c3:
         95:d5:b7:ab:69:db:e3:fa:5f:89:85:b2:40:52:dc:b6:f1:b2:
         3e:5b:2a:fa:68:ce:bd:aa:57:3e:d3:7a:f9:a5:17:71:82:c4:
         5f:fc:9a:55:7b:1a:a6:4b:fd:d6:37:d7:3f:30:e2:97:56:3d:
         20:43:ff:1c:27:98:88:be:f9:9f:56:a3:a2:1c:f0:07:a9:4e:
         9e:0b:18:73:19:03:70:73:0a:49:77:9b:b0:7f:57:e1:cd:27:
         83:de:6b:8d:08:38:24:f4:ad:4c:2c:20:46:f9:ec:fc:ef:82:
         e2:52:db:02:05:cc:a1:39:1d:30:bf:79:4c:62:a5:f9:d3:36:
         c2:b2:93:23:4d:80:55:b1:f6:09:7b:b1:a5:4a:28:48:87:26:
         3b:e0:c7:42:ee:a4:e0:14:37:78:87:4f:43:64:e4:77:27:69:
         15:d0:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:45:39 2026 by rpki-client