Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3133312e37322e32302e302f32322d3234203d3e203631373136.roa
File:                     3133312e37322e32302e302f32322d3234203d3e203631373136.roa (raw, json)
Hash identifier:          5VrKblktjPqGZLjhrulaEpZaWIeb+qXBJdRrb2vhi+Y=
Subject key identifier:   DE:A0:0D:35:83:17:43:6D:D3:31:FB:CB:B1:6B:B0:2E:C4:64:4D:B9
Certificate issuer:       /CN=3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E
Certificate serial:       7E4D53856D53ED3679E4CEA5A90E61493F9D84C6
Authority key identifier: 38:82:AA:F6:D8:9E:CE:D0:62:4C:2F:F7:99:E2:E6:CA:05:84:DF:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3133312e37322e32302e302f32322d3234203d3e203631373136.roa
Signing time:             Thu 19 Feb 2026 17:20:48 +0000
ROA not before:           Thu 19 Feb 2026 17:15:48 +0000
ROA not after:            Thu 18 Feb 2027 17:20:48 +0000
asID:                     61716
IP address blocks:        131.72.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.crl
                          rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 21:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:4d:53:85:6d:53:ed:36:79:e4:ce:a5:a9:0e:61:49:3f:9d:84:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E
        Validity
            Not Before: Feb 19 17:15:48 2026 GMT
            Not After : Feb 18 17:20:48 2027 GMT
        Subject: CN=DEA00D358317436DD331FBCBB16BB02EC4644DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:41:13:b9:48:43:a5:82:46:a4:22:2f:fb:
                    fd:99:01:77:69:09:26:e5:4a:5b:f9:3e:0a:15:ef:
                    9c:57:04:4a:33:de:93:e6:89:b8:49:47:2a:f2:28:
                    e3:f0:b5:e8:66:df:d5:5e:ca:a0:ed:d5:5d:8b:fb:
                    2f:fd:c6:f8:a9:f4:dd:16:81:3a:36:fc:08:b8:c0:
                    f6:2c:4d:1d:33:39:d2:24:2d:b6:1a:ee:f3:39:80:
                    89:f4:b0:13:0d:b3:54:64:21:6b:12:d0:ab:97:0f:
                    1a:1d:97:fe:ac:fb:01:6b:67:f2:c6:d4:b7:6e:ed:
                    4e:65:30:65:d3:58:d2:18:02:4b:69:6a:6f:e0:22:
                    71:36:a0:e8:6c:a0:3e:72:a7:f3:67:34:f0:0f:bb:
                    5a:14:bc:9e:89:6b:8c:86:7d:64:fd:85:68:f3:92:
                    17:33:ec:bc:8d:ec:54:a1:37:07:80:0e:01:6d:10:
                    6e:e2:8a:c6:39:4f:db:6d:48:78:19:7a:16:3b:fd:
                    60:c1:15:55:ee:47:d1:40:33:a2:59:34:b8:a2:17:
                    71:64:b1:5c:b8:fb:e4:dc:a0:4a:0e:2f:de:10:8d:
                    e4:43:98:69:de:a7:d3:17:fa:a4:2f:4d:86:e8:96:
                    50:04:3b:63:dd:03:93:41:a1:1a:e7:af:59:c0:3f:
                    36:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A0:0D:35:83:17:43:6D:D3:31:FB:CB:B1:6B:B0:2E:C4:64:4D:B9
            X509v3 Authority Key Identifier:
                keyid:38:82:AA:F6:D8:9E:CE:D0:62:4C:2F:F7:99:E2:E6:CA:05:84:DF:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3882AAF6D89ECED0624C2FF799E2E6CA0584DF3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVK4Vf1Hise1pY2ThEFwDZyZJcUgKMKXpjrjXbjhhNnZ/0/3133312e37322e32302e302f32322d3234203d3e203631373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:e7:36:a1:c9:8b:70:2a:5b:f6:d4:03:b1:13:ab:9f:3f:
         ca:7a:44:50:eb:4b:a3:94:a1:de:4d:7e:08:c8:f3:5e:ec:29:
         43:31:a6:d9:99:97:a1:f0:fc:0d:26:71:f3:0e:af:c8:46:67:
         a3:3b:57:e8:97:55:6a:4c:7f:ed:d4:07:3b:aa:ad:00:97:08:
         ba:eb:c3:1b:dd:50:9f:bb:65:a0:ab:53:55:14:d5:7e:ca:b0:
         f3:ce:77:45:14:b4:ca:73:ab:0c:a2:4e:71:e8:26:71:ba:bb:
         b5:2a:04:22:75:c5:31:10:1e:b1:65:8f:59:ae:d1:82:70:93:
         5c:a2:cb:e4:b2:36:db:00:9b:0b:4c:92:af:53:de:06:36:2c:
         a1:3f:4f:3f:18:90:fb:fc:a1:de:17:c2:b4:80:a8:00:af:14:
         bb:a1:81:93:e7:6b:86:a8:7c:ce:3f:ee:7d:fd:d8:a6:43:b1:
         60:74:12:89:17:68:b8:0c:1d:4a:5f:1b:cb:a0:0a:c6:e4:f9:
         cd:98:d2:01:31:e3:31:3a:cc:9d:c2:a0:9f:42:04:d3:14:0e:
         a8:26:68:73:9c:69:bf:8b:04:a7:da:77:0d:52:c3:59:83:fa:
         e0:58:e2:bb:7d:74:fe:27:9b:16:38:29:de:d8:58:55:22:1b:
         ec:cc:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 03:01:51 2026 by rpki-client