Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3232203d3e20323634303039.roa
File:                     3134332e302e3134302e302f32322d3232203d3e20323634303039.roa (raw, json)
Hash identifier:          tF0aUtU8Fd9n2qk8If+GHIC6L3yTklKzqp1ZDspmwEo=
Subject key identifier:   1D:09:B3:88:6D:B1:7E:62:F8:61:9C:02:30:14:EC:88:F3:01:46:ED
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       6572E7777436A0632B8216A37D0EAB2657C4C3F9
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3232203d3e20323634303039.roa
Signing time:             Fri 27 Mar 2026 20:14:55 +0000
ROA not before:           Fri 27 Mar 2026 20:09:55 +0000
ROA not after:            Fri 26 Mar 2027 20:14:55 +0000
asID:                     264009
IP address blocks:        143.0.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:72:e7:77:74:36:a0:63:2b:82:16:a3:7d:0e:ab:26:57:c4:c3:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Mar 27 20:09:55 2026 GMT
            Not After : Mar 26 20:14:55 2027 GMT
        Subject: CN=1D09B3886DB17E62F8619C023014EC88F30146ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e7:b6:9d:63:ba:17:da:23:75:8c:4f:02:1a:
                    eb:aa:e0:b1:12:3a:6a:5e:56:c2:b2:ec:49:ad:b7:
                    3f:85:3e:cc:3a:65:fb:e9:8b:f6:4b:01:bd:75:ec:
                    01:97:2a:dc:e7:ce:c4:30:e9:ca:ec:c8:dd:b4:6b:
                    a8:2d:9d:24:3f:42:7b:5e:af:81:98:5d:a0:2b:07:
                    fe:c9:08:de:98:39:30:2c:b4:3e:2c:1c:bb:83:d1:
                    e1:90:9d:e8:b4:a0:af:b9:eb:f4:1f:73:54:79:1c:
                    b0:63:e2:df:2f:1f:c3:7b:e8:3f:34:ba:a3:08:17:
                    b3:c3:c4:db:ae:c7:17:5d:72:bd:c4:dc:62:86:71:
                    9d:de:17:6b:e0:e4:30:10:cd:24:81:db:3d:1b:a5:
                    ff:78:46:e9:af:b4:bb:22:d7:64:59:b1:fc:a8:72:
                    18:72:23:fb:94:ac:9d:0a:de:69:24:92:f8:d7:cb:
                    a7:e4:c7:10:89:3d:14:f0:1d:ef:fc:fc:d7:78:26:
                    8d:b9:d8:83:f5:6e:20:48:b2:14:52:89:50:d0:3a:
                    ec:49:3b:4a:f2:8d:55:38:13:0a:32:c9:4b:09:97:
                    7b:82:09:b1:86:1b:2b:22:24:c1:29:45:a0:7f:36:
                    ca:ef:04:2f:06:3a:ee:b7:f5:fc:bc:b6:8f:7e:b7:
                    a3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:B3:88:6D:B1:7E:62:F8:61:9C:02:30:14:EC:88:F3:01:46:ED
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134302e302f32322d3232203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:f4:e7:f0:f9:0b:80:3c:ee:3c:d5:43:cf:5b:e9:d2:76:58:
         76:15:17:84:18:73:27:15:e7:a8:46:fc:71:4e:61:92:aa:be:
         5e:9d:d6:4c:b2:0b:2e:fc:27:7e:64:1e:81:82:c8:f4:7d:96:
         27:49:eb:c3:98:b6:19:09:a0:51:ff:f0:a6:3d:35:c7:5e:79:
         5d:11:9b:85:57:32:59:ee:b0:a0:70:44:4c:88:19:d1:98:b6:
         eb:3b:6c:e2:fb:59:1f:e7:3d:01:52:f6:44:00:35:72:44:3b:
         19:3f:00:4e:b5:52:fb:22:ff:2a:e7:1c:82:e6:e6:15:ec:45:
         a4:c1:ec:ce:29:66:63:ce:e7:b4:df:2c:17:84:ac:fa:77:37:
         56:6a:97:c6:90:3e:85:eb:be:3a:f0:a6:b8:db:51:49:89:84:
         6c:a1:7d:11:45:c9:b3:63:a8:7e:a5:0a:e9:0d:83:3a:fd:10:
         c3:7f:d5:48:13:9a:3f:ab:70:63:52:1f:b3:e5:b6:13:62:af:
         b4:16:79:0a:c7:0c:7d:47:80:39:95:50:41:bd:67:d3:cd:c0:
         9c:00:3b:d1:83:5a:b9:9c:39:1c:73:7a:36:91:97:e4:38:fc:
         c3:23:ce:2a:0a:1b:d8:38:ea:41:01:bc:28:86:92:f1:40:28:
         45:94:34:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:42:33 2026 by rpki-client