Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
File:                     3133312e3130302e32342e302f32322d3234203d3e203533313037.roa (raw, json)
Hash identifier:          2JShWl0hTRduXf2XbDOsW7XsRGYIk5zsvayZ9L5XbMY=
Subject key identifier:   DC:B4:D4:9A:E3:A3:65:14:90:71:7D:FC:3C:3C:3B:86:30:57:98:63
Certificate issuer:       /CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
Certificate serial:       4F521FD5621E560FE317D47D03C490CFA99767AE
Authority key identifier: 1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa
Signing time:             Tue 09 Jun 2026 01:56:43 +0000
ROA not before:           Tue 09 Jun 2026 01:51:43 +0000
ROA not after:            Tue 08 Jun 2027 01:56:43 +0000
asID:                     53107
IP address blocks:        131.100.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl
                          rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 14:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:52:1f:d5:62:1e:56:0f:e3:17:d4:7d:03:c4:90:cf:a9:97:67:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5
        Validity
            Not Before: Jun  9 01:51:43 2026 GMT
            Not After : Jun  8 01:56:43 2027 GMT
        Subject: CN=DCB4D49AE3A3651490717DFC3C3C3B8630579863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:92:02:df:50:21:2f:c6:c8:76:2c:0e:8c:a7:
                    48:58:1e:85:23:52:e8:68:b4:a8:8d:6f:e0:70:38:
                    80:9e:89:36:2e:56:54:97:ad:4c:df:01:fc:95:71:
                    ab:35:70:3b:d5:69:e6:8a:88:d6:d0:82:cc:f3:fd:
                    88:c4:21:41:f5:aa:4d:c2:c1:72:49:cc:83:0d:5a:
                    ca:e8:52:f6:c8:05:78:11:96:46:50:fc:82:2a:f9:
                    ab:3f:a7:23:d5:72:40:64:f2:be:85:82:da:1f:ac:
                    45:7d:c7:d9:89:d9:d1:e5:bf:7a:03:83:9b:8b:66:
                    68:2e:33:f8:cf:68:e5:ed:f4:47:5f:be:1a:8c:90:
                    32:5b:d6:f2:31:45:1b:55:a2:de:03:b8:e3:c2:51:
                    de:43:78:e9:9b:24:44:e7:7e:cd:87:6e:8b:34:f3:
                    43:b5:47:0d:ff:bf:de:99:94:22:03:3e:bb:e0:76:
                    d1:96:67:47:b2:c7:ad:b3:e0:a9:9c:ce:81:27:9b:
                    a8:a5:52:c2:05:b3:85:f4:eb:15:70:bb:fc:61:51:
                    5e:91:51:d7:a3:11:45:80:b4:2a:86:15:d1:45:84:
                    04:ae:47:61:85:4f:a0:89:ce:9d:5e:4c:51:41:85:
                    ee:19:63:18:8d:4a:0c:04:43:15:23:69:66:a6:34:
                    ac:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:D4:9A:E3:A3:65:14:90:71:7D:FC:3C:3C:3B:86:30:57:98:63
            X509v3 Authority Key Identifier:
                keyid:1E:3D:B7:CE:B7:4C:B0:4C:59:7B:B5:0B:05:0D:E0:E7:85:CF:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1E3DB7CEB74CB04C597BB50B050DE0E785CFA1A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/3133312e3130302e32342e302f32322d3234203d3e203533313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:d6:96:66:71:67:14:b5:7c:4d:43:ee:0b:e9:bc:3e:2f:ec:
         16:43:ae:fc:9d:d9:56:44:f5:63:ae:cf:a6:8d:2e:49:5a:8d:
         ec:34:28:94:d8:19:2b:81:b4:58:02:1b:4a:f4:1b:f4:56:12:
         da:5c:ba:36:63:47:cb:dc:bb:fb:10:9b:1e:9c:43:e0:50:4b:
         45:86:41:fb:ff:5e:dd:ce:9f:36:0f:77:6b:7d:a7:70:80:f1:
         a7:b6:33:4e:1b:71:55:60:19:dc:27:87:b2:cb:1b:f7:f1:cb:
         96:c3:70:c7:a1:d3:49:17:e2:45:cf:47:65:44:6d:4b:d5:46:
         24:f5:46:d2:95:2b:23:ca:58:12:92:26:d8:a6:d5:e8:f9:73:
         5a:4a:e3:60:48:1d:16:fe:52:f1:91:dd:76:83:a6:d2:9d:ba:
         f2:b8:f5:d9:42:96:f6:ef:78:6d:ee:35:2a:e8:aa:f7:51:02:
         0e:c3:1c:5c:e5:02:fd:f6:0b:c2:1b:45:60:3a:7a:62:22:77:
         e5:8f:67:e9:33:27:ef:d0:f2:5d:49:b7:40:8d:41:1c:53:cc:
         9c:77:49:f3:7b:21:c1:b6:89:b8:29:10:c4:a7:f4:77:f0:db:
         e7:0b:52:5d:4f:e9:55:d9:81:57:f3:07:91:95:84:fd:29:23:
         68:48:71:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:18:13 2026 by rpki-client