Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134322e302f32342d3234203d3e20323634303039.roa
File:                     3134332e302e3134322e302f32342d3234203d3e20323634303039.roa (raw, json)
Hash identifier:          n5Ibsg+YKvysu9nOxsE4Nu3EeH5f1muAVkDW2jStiJw=
Subject key identifier:   89:30:4C:F5:D7:46:E2:8A:75:24:A1:E3:D6:C2:B9:CA:B6:D5:4D:2F
Certificate issuer:       /CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
Certificate serial:       5B42DE6CD7212BBE6ADC02B878C10CAA9967CFE1
Authority key identifier: 1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134322e302f32342d3234203d3e20323634303039.roa
Signing time:             Fri 27 Mar 2026 20:14:55 +0000
ROA not before:           Fri 27 Mar 2026 20:09:55 +0000
ROA not after:            Fri 26 Mar 2027 20:14:55 +0000
asID:                     264009
IP address blocks:        143.0.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl
                          rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 10:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:42:de:6c:d7:21:2b:be:6a:dc:02:b8:78:c1:0c:aa:99:67:cf:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789
        Validity
            Not Before: Mar 27 20:09:55 2026 GMT
            Not After : Mar 26 20:14:55 2027 GMT
        Subject: CN=89304CF5D746E28A7524A1E3D6C2B9CAB6D54D2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:5c:6a:f2:c1:90:a0:81:0d:f3:fc:99:72:
                    4a:0a:e3:27:4e:23:b2:2a:f2:0b:31:0a:90:36:75:
                    ca:6c:5a:64:ae:02:9e:57:ac:85:07:23:b5:5a:aa:
                    b3:7d:6c:eb:22:ea:7e:1f:1c:7b:81:19:1a:d0:af:
                    c4:de:bc:2f:3f:c3:8e:b7:47:20:c8:9c:49:e5:5c:
                    24:01:92:10:10:77:32:ab:a6:3c:9f:c4:13:f9:34:
                    26:af:2f:61:d2:f7:88:af:03:8b:60:7b:0f:f3:94:
                    3b:b0:bc:f0:7b:7f:4f:0b:c4:65:e4:be:fd:69:39:
                    c0:e6:94:f4:86:58:32:c0:5b:f9:5d:00:03:a1:98:
                    f6:06:14:40:1f:26:e0:b0:f9:9a:d1:71:38:b8:43:
                    1c:18:97:8e:dd:a8:ad:5f:14:fb:74:e4:79:84:8a:
                    e6:ca:9a:86:e8:a3:f8:3e:71:53:59:62:f2:3d:8d:
                    39:7e:64:2c:37:f5:54:97:91:d7:59:7b:5b:cf:00:
                    c0:a8:e8:1a:ae:df:a7:47:b3:80:fb:92:66:b5:ad:
                    73:fe:cc:9d:d8:74:6b:99:34:6e:60:c1:6d:5b:e1:
                    79:f2:19:c9:80:0c:24:dd:f9:6e:53:6c:67:35:e7:
                    8a:db:41:79:f3:4f:80:5a:66:57:14:c8:f6:94:f8:
                    ee:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:30:4C:F5:D7:46:E2:8A:75:24:A1:E3:D6:C2:B9:CA:B6:D5:4D:2F
            X509v3 Authority Key Identifier:
                keyid:1A:F7:BE:8F:4E:29:E1:CE:A1:A1:0C:0B:A0:43:05:42:12:6F:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AF7BE8F4E29E1CEA1A10C0BA0430542126FE789.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/0/3134332e302e3134322e302f32342d3234203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:07:a8:fc:66:73:c8:78:8b:ca:e4:cc:39:aa:8a:a3:89:b0:
         97:e9:51:48:20:55:54:29:10:a0:2c:46:65:ef:4e:99:d6:4d:
         bf:e6:0e:5a:1f:4f:93:62:c3:b2:7d:3d:f2:b0:47:91:5c:7e:
         b9:7a:e7:9a:a5:9f:fa:20:87:28:04:48:12:c0:f8:5c:90:15:
         fa:e0:3e:00:6f:f1:ad:92:f5:04:e8:d2:eb:72:cb:22:7f:c6:
         2d:bd:f3:2f:bb:7a:3e:14:e1:fe:0d:ff:1e:ed:90:71:84:3e:
         70:32:88:8c:34:e7:5e:1e:0a:f6:a5:27:e5:ef:17:92:92:f6:
         05:76:da:cf:45:9d:bd:d9:ab:42:9b:cf:9c:86:f0:cb:3c:6b:
         77:1e:ac:30:45:3a:7d:79:ed:0c:bd:ec:e0:45:a4:ed:cb:96:
         61:26:ca:d9:4f:88:83:4f:0b:39:df:37:40:49:d2:66:c3:c0:
         01:03:65:b7:21:d1:45:4a:d2:ab:92:5f:d0:6b:a3:e2:55:ba:
         9d:7f:b5:6e:76:ad:fc:c1:06:f5:e1:04:df:5a:f5:6f:45:ef:
         b9:df:36:a9:22:77:0e:83:6f:c9:d1:4e:4a:c4:f5:93:f0:45:
         5c:17:05:72:87:be:34:53:29:6d:6a:3c:8c:18:09:61:e8:8c:
         7c:2c:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:53:27 2026 by rpki-client