Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134312e302f32342d3234203d3e20323634303039.roa
File:                     3134332e302e3134312e302f32342d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          4RhLsxRWx29c8ZqCxQJlReIjMpBlhApUUyGAeIkRKTc=
Subject key identifier:   98:A0:6F:AB:B3:54:F1:F1:2B:6A:A7:16:27:56:DF:08:DE:35:6E:FA
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       691E7CE61CF49784AC12AF2E2450E2A4B2290EB3
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134312e302f32342d3234203d3e20323634303039.roa
Signing time:             Fri 27 Mar 2026 20:14:55 +0000
ROA not before:           Fri 27 Mar 2026 20:09:55 +0000
ROA not after:            Fri 26 Mar 2027 20:14:55 +0000
asID:                     264009
IP address blocks:        143.0.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1e:7c:e6:1c:f4:97:84:ac:12:af:2e:24:50:e2:a4:b2:29:0e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Mar 27 20:09:55 2026 GMT
            Not After : Mar 26 20:14:55 2027 GMT
        Subject: CN=98A06FABB354F1F12B6AA7162756DF08DE356EFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:d2:59:2d:b9:cc:4c:2f:0c:16:83:72:4d:
                    2f:6f:13:92:1c:18:23:00:43:f7:46:5a:28:17:24:
                    00:b3:eb:49:ae:da:07:52:b5:a3:56:5d:80:ea:29:
                    b1:3c:f6:fc:14:84:78:6b:6e:43:ce:1a:92:39:db:
                    85:df:67:1c:f1:b9:a7:b7:f5:5e:1b:c5:55:b4:6f:
                    be:1f:14:4f:11:74:22:b1:7f:16:0d:11:1f:d6:20:
                    8e:65:59:0d:ef:32:18:7c:07:76:ed:94:cf:43:b6:
                    b5:59:22:9b:21:9c:66:44:53:bf:29:eb:4b:a8:d6:
                    e9:00:7d:0a:94:15:d0:12:c1:03:27:5e:97:a4:85:
                    dc:52:b8:00:21:77:18:8e:94:42:06:64:9b:ec:a2:
                    5b:8d:b0:33:a2:bb:fb:c4:74:9c:83:69:8e:dc:70:
                    c2:d7:3e:96:4b:d9:57:c7:d0:dc:41:2f:17:71:c2:
                    0d:15:4f:4d:c8:19:e8:4f:67:18:8a:74:f6:b7:cc:
                    98:1b:27:4b:80:36:49:8a:1e:f1:2d:4a:df:56:b1:
                    ad:82:7b:8b:e4:dd:1b:eb:53:07:e2:82:89:02:ed:
                    ff:64:8e:1c:4d:57:31:94:c9:3f:02:58:8c:aa:d6:
                    1c:a2:4c:84:cd:34:42:23:1d:73:f5:d8:f4:81:d4:
                    5e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A0:6F:AB:B3:54:F1:F1:2B:6A:A7:16:27:56:DF:08:DE:35:6E:FA
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134312e302f32342d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:91:f0:7e:41:37:93:6a:a1:f4:ce:4a:9d:a2:a2:0b:af:78:
         35:b4:da:11:99:32:57:2e:c7:c4:2d:32:ef:d5:9a:7f:fe:a8:
         7b:9a:0e:f9:c0:0e:bd:8c:21:76:fb:25:bf:0f:f3:88:f5:70:
         c9:f0:e1:25:59:ab:80:a3:89:a1:9d:b7:79:f2:f4:71:e5:b6:
         a8:93:b8:e1:64:3c:f5:a6:21:19:1f:65:c3:ed:b3:22:3e:02:
         f7:9b:00:85:ac:2f:04:c6:da:05:85:26:ee:05:5c:9e:81:ce:
         05:b8:08:fd:73:0b:0c:b3:42:8d:6d:34:08:d1:35:13:bb:a6:
         6a:20:b7:11:d2:3c:6e:4d:00:07:b5:a2:77:90:9e:8b:ba:b6:
         a2:ec:e5:cc:7c:fe:e9:69:a2:82:3f:c1:5e:be:fa:f7:7e:0c:
         e4:17:bb:c7:7a:e5:fe:61:bf:70:04:7b:2d:a4:26:59:02:29:
         f0:e5:1c:63:df:1a:9e:c4:c2:9f:82:32:65:da:89:7a:71:9c:
         aa:1d:f9:2d:63:54:fb:db:9b:d1:55:cd:05:5b:77:94:22:79:
         6b:a0:fc:4f:fd:22:c3:9f:29:fe:3c:02:3a:1b:25:70:1d:20:
         1e:93:5a:71:c3:c2:75:0d:14:d3:47:a7:9b:4c:d1:15:76:c5:
         bf:16:87:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:42:11 2026 by rpki-client