Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3133312e37322e3138342e302f32322d3234203d3e203631373530.roa
File:                     3133312e37322e3138342e302f32322d3234203d3e203631373530.roa (raw, json)
Hash identifier:          YVaWrbvLt1eANUAAJTvoSj3qWAT7si8+b3ZJ2IM+EkQ=
Subject key identifier:   16:37:C3:F5:67:5B:B4:29:52:00:3D:34:E9:75:4A:9B:3E:4E:EA:01
Certificate issuer:       /CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
Certificate serial:       02ECC213ECCF9CC384A0352E409D51E508D1353D
Authority key identifier: A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3133312e37322e3138342e302f32322d3234203d3e203631373530.roa
Signing time:             Wed 21 Oct 2026 13:55:32 +0000
ROA not before:           Wed 21 Oct 2026 13:50:32 +0000
ROA not after:            Wed 20 Oct 2027 13:55:32 +0000
asID:                     61750
IP address blocks:        131.72.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl
                          rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 19:09:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ec:c2:13:ec:cf:9c:c3:84:a0:35:2e:40:9d:51:e5:08:d1:35:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA
        Validity
            Not Before: Oct 21 13:50:32 2026 GMT
            Not After : Oct 20 13:55:32 2027 GMT
        Subject: CN=1637C3F5675BB42952003D34E9754A9B3E4EEA01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b6:db:c9:6e:c8:4e:f0:c5:81:1c:1e:82:bc:
                    0e:21:c2:cf:51:15:7e:43:d2:19:48:d9:1c:65:11:
                    ff:25:a8:d2:12:d3:9e:b2:e7:d4:f7:6b:5e:db:bc:
                    c5:bd:90:8a:7e:fd:62:22:db:49:67:c8:6d:6c:1d:
                    02:39:5d:42:f8:87:b8:14:f2:a8:2d:20:4f:cf:bc:
                    50:89:e3:45:86:ed:a6:d6:45:b0:bf:bb:55:4b:2a:
                    5a:03:4b:85:10:c4:b4:75:24:7e:48:dc:e9:a8:25:
                    e9:11:f6:a8:45:f7:a9:b2:3b:e7:a5:52:8d:e6:80:
                    1f:0a:aa:7b:b2:1c:18:18:a0:f6:11:e8:43:44:9c:
                    c8:f7:77:68:84:89:51:ae:36:24:11:0d:2a:27:14:
                    0d:23:a8:95:80:f7:c9:30:f1:c2:96:82:bf:57:2c:
                    4f:33:4c:67:ad:30:d5:39:d0:27:0d:10:59:b0:e9:
                    3c:3d:2c:72:e2:45:d6:83:07:95:75:23:bc:8b:05:
                    42:04:bc:10:1c:d9:4f:e2:ee:5b:b9:be:c1:b9:24:
                    86:f7:1b:a3:31:c2:92:d4:db:c7:dd:37:f1:ad:5e:
                    b0:c2:9d:49:e2:cc:82:64:f9:31:38:24:5d:f2:46:
                    10:7b:8e:c2:2f:06:37:40:5c:79:67:99:89:1f:90:
                    96:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:C3:F5:67:5B:B4:29:52:00:3D:34:E9:75:4A:9B:3E:4E:EA:01
            X509v3 Authority Key Identifier:
                keyid:A0:18:B2:CA:A6:D0:D5:0A:96:B8:55:60:1A:C3:B9:9D:5B:B9:CF:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A018B2CAA6D0D50A96B855601AC3B99D5BB9CFFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HQix4EfNgapnYkK3uvqYGDJPCvuVgzYhH6pxaWJPwW8U/0/3133312e37322e3138342e302f32322d3234203d3e203631373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:d4:4b:4b:58:86:29:ed:1f:d8:74:09:64:26:04:9b:92:c5:
         74:bd:77:22:8a:39:8e:46:55:ef:df:75:c6:fa:e0:1b:c6:a5:
         2f:ee:0e:97:e4:8c:2a:42:db:70:34:62:29:9e:33:b8:c5:e9:
         02:87:fc:02:b1:14:42:a5:63:e8:ce:c0:3d:11:1b:27:cc:1f:
         04:df:a2:43:9a:b1:77:1b:54:88:11:d9:9a:11:78:69:37:7b:
         bc:2e:c1:56:eb:8e:13:e0:cb:c2:69:7b:a7:3d:c8:f9:4c:8d:
         59:27:3a:ba:79:9f:79:b5:a6:50:3b:e6:18:1a:94:c7:13:28:
         81:51:e7:15:81:6a:72:df:14:96:4a:e8:69:74:5f:3f:84:54:
         a5:b1:f3:5d:b2:89:60:05:e2:a8:a9:54:38:6f:5a:1a:d4:57:
         81:20:0e:cf:68:18:c6:e6:b1:4f:a9:91:b7:c5:a1:cb:51:9e:
         f8:22:9b:24:1b:4b:a7:34:3a:c4:92:ee:e7:6e:e4:11:8e:31:
         01:bd:59:6f:cb:5b:2e:99:bc:07:a7:49:0c:be:95:65:ae:10:
         33:55:3f:58:f6:1e:34:0e:99:92:1c:6b:9a:98:28:fd:71:ca:
         3b:12:9b:97:11:fd:30:57:df:55:bd:79:fe:49:8e:47:1d:d2:
         9a:65:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:07:31 2026 by rpki-client