Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa
File:                     3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa (raw, json)
Hash identifier:          jtEsP0pHGWxmQ+aeIkhswJz11is3zGC6n+mrY0NM8sQ=
Subject key identifier:   55:5A:9E:47:74:BA:82:55:15:AD:B5:87:0D:25:7D:F4:30:76:F6:40
Certificate issuer:       /CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5
Certificate serial:       2E555E3EB8A6A0AAFBBC17E86D62AAEEE1BACE31
Authority key identifier: 49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa
Signing time:             Tue 02 Jun 2026 15:54:13 +0000
ROA not before:           Tue 02 Jun 2026 15:49:13 +0000
ROA not after:            Tue 01 Jun 2027 15:54:13 +0000
asID:                     264503
IP address blocks:        131.255.148.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.crl
                          rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 23:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:55:5e:3e:b8:a6:a0:aa:fb:bc:17:e8:6d:62:aa:ee:e1:ba:ce:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5
        Validity
            Not Before: Jun  2 15:49:13 2026 GMT
            Not After : Jun  1 15:54:13 2027 GMT
        Subject: CN=555A9E4774BA825515ADB5870D257DF43076F640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:e2:05:c7:16:cb:ee:03:2c:fd:ae:00:49:
                    a0:b7:15:24:f8:b9:ac:b3:76:1e:f6:12:09:24:3e:
                    42:06:87:d8:19:8d:3f:68:04:62:cb:8f:53:7c:41:
                    22:b6:de:b0:53:71:6c:e5:3a:66:ac:b8:e5:b7:31:
                    74:b8:d1:34:d2:bf:59:2e:23:07:75:ed:0f:33:f4:
                    bf:4a:dd:69:19:03:04:42:e3:b7:08:85:bf:93:d9:
                    14:82:da:ba:8b:76:6b:41:79:73:82:2f:43:b0:f3:
                    3f:d1:68:38:50:6f:ec:86:05:74:fe:75:08:64:9e:
                    c9:83:5d:4e:79:b5:fd:3d:cd:f5:90:1c:8e:c3:7d:
                    92:7a:94:2a:1d:9c:60:a0:09:fe:35:13:cb:2e:94:
                    ac:2c:57:b5:17:9b:34:ea:07:6d:2a:e2:03:6a:26:
                    c6:ea:a7:c4:94:97:8b:2d:90:46:7d:a4:26:cb:f5:
                    82:d3:c9:8b:c8:51:7a:62:df:1a:d2:80:75:5b:2e:
                    fb:e4:63:9f:e6:b4:8a:1b:77:28:07:ad:bb:e3:d4:
                    70:4b:02:50:d1:91:92:07:e4:fb:98:2a:9b:2a:0b:
                    3c:a5:3f:5e:84:74:52:57:99:3f:cb:5e:61:2a:6e:
                    94:2e:9e:db:33:db:03:49:b8:bb:40:8d:f2:da:7f:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5A:9E:47:74:BA:82:55:15:AD:B5:87:0D:25:7D:F4:30:76:F6:40
            X509v3 Authority Key Identifier:
                keyid:49:CA:BC:F4:EF:0B:4D:D6:95:18:9C:F0:FD:93:D1:9C:2F:27:2D:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49CABCF4EF0B4DD695189CF0FD93D19C2F272DB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzzX3to8ri9dvuyxPJAKEWYWy47cUhC7CxtopmnzLzi5/0/3133312e3235352e3134382e302f32322d3332203d3e20323634353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:18:e2:17:78:79:91:d8:d2:48:e0:c7:e0:22:ae:e7:95:c1:
         c7:bb:6a:39:02:b8:51:24:b6:eb:67:0d:2e:5f:1f:11:87:ad:
         a3:b1:71:f3:06:44:a2:b5:4e:79:c7:15:79:b2:d9:8a:c4:02:
         a8:66:ab:dd:00:97:53:53:c8:8e:a0:72:51:11:bd:42:55:3c:
         ae:88:3d:41:53:7d:62:b6:b3:4d:1a:38:3a:a5:59:20:0f:aa:
         34:c3:d9:e0:e2:e1:2f:a8:12:2e:72:29:15:2b:f2:70:74:b1:
         bf:44:fc:28:40:64:da:eb:0c:7c:95:4b:79:76:29:f4:58:c9:
         92:5e:bc:a9:fc:80:6a:8e:7c:dc:64:b1:d9:8f:d5:fa:d5:37:
         fc:2e:fc:a3:ba:11:b3:0c:22:b8:5d:e9:9f:25:a1:28:17:ee:
         2b:96:93:48:9f:0c:3b:71:55:63:85:42:0e:86:04:38:fc:cd:
         a7:b6:85:12:af:53:fb:0f:05:78:20:12:10:bc:f3:88:9d:ba:
         08:e6:c5:34:ab:8d:79:45:ac:ab:6f:34:6d:5a:00:71:a0:bf:
         c5:48:e6:9c:4e:28:c3:db:36:4c:f3:b7:9c:75:b8:2e:8e:d0:
         66:44:2a:7a:27:eb:02:82:be:04:24:76:fe:c0:0f:15:81:b3:
         25:ed:44:26
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULlVePrimoKr7vBfobWKq7uG6zjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDQUJDRjRFRjBCNERENjk1MTg5Q0YwRkQ5M0QxOUMy
RjI3MkRCNTAeFw0yNjA2MDIxNTQ5MTNaFw0yNzA2MDExNTU0MTNaMDMxMTAvBgNV
BAMTKDU1NUE5RTQ3NzRCQTgyNTUxNUFEQjU4NzBEMjU3REY0MzA3NkY2NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0QeIFxxbL7gMs/a4ASaC3FST4
uayzdh72EgkkPkIGh9gZjT9oBGLLj1N8QSK23rBTcWzlOmasuOW3MXS40TTSv1ku
Iwd17Q8z9L9K3WkZAwRC47cIhb+T2RSC2rqLdmtBeXOCL0Ow8z/RaDhQb+yGBXT+
dQhknsmDXU55tf09zfWQHI7DfZJ6lCodnGCgCf41E8sulKwsV7UXmzTqB20q4gNq
Jsbqp8SUl4stkEZ9pCbL9YLTyYvIUXpi3xrSgHVbLvvkY5/mtIobdygHrbvj1HBL
AlDRkZIH5PuYKpsqCzylP16EdFJXmT/LXmEqbpQuntsz2wNJuLtAjfLaf2SDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUVVqeR3S6glUVrbWHDSV99DB29kAwHwYDVR0j
BBgwFoAUScq89O8LTdaVGJzw/ZPRnC8nLbUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnp6WDN0bzhyaTlkdnV5eFBKQUtFV1lXeTQ3Y1VoQzdDeHRvcG1uekx6
aTUvMC80OUNBQkNGNEVGMEI0REQ2OTUxODlDRjBGRDkzRDE5QzJGMjcyREI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ5Q0FCQ0Y0RUYwQjRERDY5
NTE4OUNGMEZEOTNEMTlDMkYyNzJEQjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Z6elgzdG84cmk5ZHZ1eXhQSkFLRVdZV3k0N2NVaEM3Q3h0b3BtbnpMemk1LzAv
MzEzMzMxMmUzMjM1MzUyZTMxMzQzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMy
MzYzNDM1MzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAoP/lDANBgkqhkiG9w0BAQsFAAOCAQEAdhji
F3h5kdjSSODH4CKu55XBx7tqOQK4USS262cNLl8fEYeto7Fx8wZEorVOeccVebLZ
isQCqGar3QCXU1PIjqByURG9QlU8rog9QVN9YrazTRo4OqVZIA+qNMPZ4OLhL6gS
LnIpFSvycHSxv0T8KEBk2usMfJVLeXYp9FjJkl68qfyAao583GSx2Y/V+tU3/C78
o7oRswwiuF3pnyWhKBfuK5aTSJ8MO3FVY4VCDoYEOPzNp7aFEq9T+w8FeCASELzz
iJ26CObFNKuNeUWsq280bVoAcaC/xUjmnE4ow9s2TPO3nHW4Lo7QZkQqeifrAoK+
BCR2/sAPFYGzJe1EJg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:57:46 2026 by rpki-client