Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232362e302f32332d3233203d3e20323634343936.roa
File:                     3133312e3235352e3232362e302f32332d3233203d3e20323634343936.roa (raw, json)
Hash identifier:          sCPh3gkJ2ARAk3MBH38PhLmPZXNDlzbbIeXpL3Dz0PA=
Subject key identifier:   34:CA:CC:F4:7C:96:16:C4:68:72:8B:74:2A:35:5A:D4:5A:D7:01:57
Certificate issuer:       /CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
Certificate serial:       78C3BFF0DF038B8942D7FFA9AA78DF61CF216736
Authority key identifier: 97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232362e302f32332d3233203d3e20323634343936.roa
Signing time:             Mon 25 May 2026 20:17:11 +0000
ROA not before:           Mon 25 May 2026 20:12:11 +0000
ROA not after:            Mon 24 May 2027 20:17:11 +0000
asID:                     264496
IP address blocks:        131.255.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl
                          rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 00:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c3:bf:f0:df:03:8b:89:42:d7:ff:a9:aa:78:df:61:cf:21:67:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C
        Validity
            Not Before: May 25 20:12:11 2026 GMT
            Not After : May 24 20:17:11 2027 GMT
        Subject: CN=34CACCF47C9616C468728B742A355AD45AD70157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:5d:79:ff:28:a3:09:17:3c:4c:ce:4a:55:
                    fa:66:d1:5e:04:b1:ef:ce:2b:74:91:fc:48:bb:8a:
                    24:10:2b:93:f5:5a:d4:b1:f5:89:71:b1:91:0a:44:
                    06:42:88:ea:86:d3:d9:35:8d:62:38:43:73:fe:d9:
                    3a:f3:f9:8e:4c:7c:02:35:7e:ea:33:3a:c8:ac:b7:
                    11:98:11:24:22:df:0f:63:54:dc:bc:08:6d:73:f4:
                    c5:ba:0e:14:4d:21:bf:d2:d6:15:78:d8:c1:ed:4d:
                    ff:35:7a:4f:2c:48:8a:2b:f5:60:1d:8a:d1:66:e8:
                    8b:9e:22:66:12:69:09:82:17:78:bd:14:52:4d:42:
                    c1:dd:5a:41:fb:70:43:87:fe:40:e1:3f:07:ec:fa:
                    2d:ff:3a:c8:f1:25:9e:4c:7b:1b:f2:db:5b:1e:28:
                    06:8a:6f:89:ba:80:b6:da:ae:8b:db:62:fc:75:07:
                    92:9b:86:a4:1d:a0:75:ce:51:da:02:51:14:a7:00:
                    87:43:aa:a6:fd:8f:85:99:65:a1:92:e9:02:44:62:
                    72:72:91:19:ff:6b:ab:e7:9b:9e:5f:50:09:e6:70:
                    4b:8d:0b:a8:ae:ed:64:d1:9f:49:88:f7:8f:e9:14:
                    cc:76:ae:44:1d:3a:0f:03:80:c8:5e:34:59:54:32:
                    af:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CA:CC:F4:7C:96:16:C4:68:72:8B:74:2A:35:5A:D4:5A:D7:01:57
            X509v3 Authority Key Identifier:
                keyid:97:0C:C2:6D:D0:C3:53:C2:44:F7:2F:5B:62:AE:4B:5B:0E:E5:AE:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/970CC26DD0C353C244F72F5B62AE4B5B0EE5AE7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnRbjxchuD6rHPufw5K7bqTw1DwfkSQ4KXaNeDSJVZng/0/3133312e3235352e3232362e302f32332d3233203d3e20323634343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:94:41:ea:c9:69:fc:cc:57:dd:74:11:54:b2:6f:5d:cf:e9:
         ed:dd:b7:e4:22:af:7d:fa:39:41:81:63:2d:31:ad:d1:7d:bf:
         9c:74:60:83:08:51:bc:20:87:b5:73:de:b7:20:8e:20:a8:49:
         37:22:2c:41:7a:53:f3:c4:44:24:e5:78:40:bf:0c:8c:a8:42:
         df:37:b0:ce:78:2d:de:f7:58:3b:b9:f5:ca:27:a6:0c:b7:45:
         ef:02:96:d7:89:5f:c3:30:0c:2b:13:d8:e0:d9:a5:dd:1d:32:
         b0:07:f2:ab:22:35:cc:37:64:24:91:8d:8c:ee:1c:76:0f:c2:
         ba:3e:24:78:2a:c6:d0:36:d0:3a:58:30:b8:80:fa:c2:66:ea:
         85:d1:e4:6e:8a:89:c8:59:9d:6e:be:5c:6f:d2:3c:11:2b:49:
         f1:2f:de:45:49:69:dc:f5:6b:05:28:2c:37:f2:ba:85:df:d4:
         ba:1c:18:fd:0c:e4:3f:8d:28:c1:e3:7a:5a:a0:c7:da:6f:1d:
         5a:bf:bb:c8:ac:9f:84:b4:9b:20:c6:19:35:10:c4:25:7b:f9:
         59:a2:0f:a1:b9:c9:be:f0:6e:02:6e:ff:07:a3:1e:4a:5b:7c:
         b4:96:7b:9c:6d:74:6a:26:ba:2d:4b:29:4e:2e:4c:1e:47:7b:
         fd:82:9e:2b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeMO/8N8Di4lC1/+pqnjfYc8hZzYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTcwQ0MyNkREMEMzNTNDMjQ0RjcyRjVCNjJBRTRCNUIw
RUU1QUU3QzAeFw0yNjA1MjUyMDEyMTFaFw0yNzA1MjQyMDE3MTFaMDMxMTAvBgNV
BAMTKDM0Q0FDQ0Y0N0M5NjE2QzQ2ODcyOEI3NDJBMzU1QUQ0NUFENzAxNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPo115/yijCRc8TM5KVfpm0V4E
se/OK3SR/Ei7iiQQK5P1WtSx9YlxsZEKRAZCiOqG09k1jWI4Q3P+2Trz+Y5MfAI1
fuozOsistxGYESQi3w9jVNy8CG1z9MW6DhRNIb/S1hV42MHtTf81ek8sSIor9WAd
itFm6IueImYSaQmCF3i9FFJNQsHdWkH7cEOH/kDhPwfs+i3/OsjxJZ5Mexvy21se
KAaKb4m6gLbarovbYvx1B5KbhqQdoHXOUdoCURSnAIdDqqb9j4WZZaGS6QJEYnJy
kRn/a6vnm55fUAnmcEuNC6iu7WTRn0mI94/pFMx2rkQdOg8DgMheNFlUMq/nAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUNMrM9HyWFsRocot0KjVa1FrXAVcwHwYDVR0j
BBgwFoAUlwzCbdDDU8JE9y9bYq5LWw7lrnwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR25SYmp4Y2h1RDZySFB1Znc1SzdicVR3MUR3ZmtTUTRLWGFOZURTSlZa
bmcvMC85NzBDQzI2REQwQzM1M0MyNDRGNzJGNUI2MkFFNEI1QjBFRTVBRTdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3MENDMjZERDBDMzUzQzI0
NEY3MkY1QjYyQUU0QjVCMEVFNUFFN0MuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0duUmJqeGNodUQ2ckhQdWZ3NUs3YnFUdzFEd2ZrU1E0S1hhTmVEU0pWWm5nLzAv
MzEzMzMxMmUzMjM1MzUyZTMyMzIzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYP/4jANBgkqhkiG9w0BAQsFAAOCAQEAeJRB
6slp/MxX3XQRVLJvXc/p7d235CKvffo5QYFjLTGt0X2/nHRggwhRvCCHtXPetyCO
IKhJNyIsQXpT88REJOV4QL8MjKhC3zewzngt3vdYO7n1yiemDLdF7wKW14lfwzAM
KxPY4Nml3R0ysAfyqyI1zDdkJJGNjO4cdg/Cuj4keCrG0DbQOlgwuID6wmbqhdHk
boqJyFmdbr5cb9I8EStJ8S/eRUlp3PVrBSgsN/K6hd/UuhwY/QzkP40oweN6WqDH
2m8dWr+7yKyfhLSbIMYZNRDEJXv5WaIPobnJvvBuAm7/B6MeSlt8tJZ7nG10aia6
LUspTi5MHkd7/YKeKw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 05:17:17 2026 by rpki-client