Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa
File:                     3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa (raw, json)
Hash identifier:          Z+6usJQdDj4d3KLiqAC3wqiK/2AM4SXOlNTpC65BvCA=
Subject key identifier:   40:3C:8B:AC:4D:F7:98:2F:22:39:01:B4:11:96:FD:3F:C9:74:C0:30
Certificate issuer:       /CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
Certificate serial:       105716F688BA0B9157C3FFA6FCB1015FC66A54F6
Authority key identifier: 49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa
Signing time:             Wed 21 Oct 2026 18:06:02 +0000
ROA not before:           Wed 21 Oct 2026 18:01:02 +0000
ROA not after:            Wed 20 Oct 2027 18:06:02 +0000
asID:                     61657
IP address blocks:        131.100.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl
                          rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 04:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:57:16:f6:88:ba:0b:91:57:c3:ff:a6:fc:b1:01:5f:c6:6a:54:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB
        Validity
            Not Before: Oct 21 18:01:02 2026 GMT
            Not After : Oct 20 18:06:02 2027 GMT
        Subject: CN=403C8BAC4DF7982F223901B41196FD3FC974C030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:78:35:62:de:9b:32:e8:f3:1b:64:32:af:
                    ec:a4:db:c8:f7:5a:c5:20:7f:b5:87:03:1c:17:5a:
                    91:38:67:01:31:a0:62:68:d6:74:12:9b:90:c8:72:
                    6e:c8:47:cc:77:36:b4:1f:a1:6b:4e:62:fb:d8:e9:
                    64:31:88:af:28:ac:45:25:1f:16:0a:26:c0:2f:0a:
                    b0:47:29:7f:91:d9:e2:f5:84:f3:72:e5:ed:90:f2:
                    f0:ef:03:89:c4:90:b6:91:64:97:42:f9:41:31:73:
                    2a:f4:6a:2f:ab:cc:59:38:1e:a2:0b:4a:a5:fc:8b:
                    71:b9:7a:ef:9d:fb:dc:cc:b4:56:e3:f7:0e:e1:34:
                    97:c1:e7:87:a3:59:56:31:df:46:4b:5c:fe:e8:dd:
                    d5:15:7e:91:77:dc:0f:40:2b:7a:65:a6:1c:e8:e3:
                    b1:05:e6:37:b7:07:bb:c8:22:c4:35:a7:76:9e:a9:
                    93:c2:a8:4f:3d:5c:bf:a7:a1:7b:34:98:20:ea:26:
                    92:35:9e:6d:1d:97:59:9c:7a:13:f5:f1:38:78:d5:
                    35:9a:c8:f1:f2:64:69:11:3c:3d:0a:62:bb:db:f7:
                    82:b0:ed:7e:e5:7d:87:5f:c1:5d:00:9d:25:6d:a9:
                    68:09:4f:5b:0a:aa:88:90:c9:65:d3:c4:c6:05:69:
                    e7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3C:8B:AC:4D:F7:98:2F:22:39:01:B4:11:96:FD:3F:C9:74:C0:30
            X509v3 Authority Key Identifier:
                keyid:49:BF:C5:F0:22:E6:2E:C9:09:AC:DF:C2:D2:BB:CA:D6:E9:0F:6A:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49BFC5F022E62EC909ACDFC2D2BBCAD6E90F6ADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fp11jiDeEUGpNfePgxv6fmWHvnUJ8ioXkBzK7P7NJVC2/0/3133312e3130302e3235322e302f32322d3234203d3e203631363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:a6:f8:e5:74:70:72:fa:75:02:0e:38:48:af:c5:fd:9a:9a:
         4a:2f:a8:e7:d2:38:ca:f9:4e:34:b8:11:f3:70:7d:dc:be:15:
         09:08:87:d7:6f:1e:d2:fb:4b:e4:3f:dc:dd:bd:92:f3:21:16:
         0b:d3:02:57:f9:42:68:a8:7f:31:13:29:22:cf:5e:ae:7c:ed:
         af:b0:26:35:35:4a:f9:2b:48:24:74:cc:8b:90:36:7f:dc:85:
         84:1f:9e:83:1f:6a:c6:e5:6d:43:7c:d3:6c:cc:cf:6a:a6:65:
         d4:46:91:2f:53:64:38:68:5e:27:ba:6c:7e:04:37:90:97:d7:
         c8:4d:42:60:43:3e:b7:0a:8d:b1:3f:85:5d:d3:a9:e5:6a:f6:
         2b:12:56:ed:d4:c6:e5:b7:f3:c7:75:42:ac:90:b8:f3:1e:c7:
         c8:63:94:36:1e:d6:3a:26:9e:1d:2e:1e:02:51:f6:2c:d0:98:
         6a:45:c1:f8:e2:7c:a2:42:83:df:f3:90:ac:d3:69:eb:5e:dc:
         02:04:4a:72:8e:e2:10:e9:c1:27:d2:9a:69:cc:7d:32:b1:ad:
         68:65:a8:8d:43:4f:f7:4e:e0:10:4d:65:08:44:7d:fb:d7:7b:
         1c:e0:80:a2:70:7d:5e:fa:b0:86:da:a0:b2:54:87:43:e7:5c:
         3b:42:e1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 16:34:55 2026 by rpki-client