Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa
File:                     3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          JrHibrPMBWM7mxntuw77QcblL/v6IUOY8OujeRj78vI=
Subject key identifier:   DE:71:67:08:F2:6C:16:76:4C:01:95:3D:23:1C:70:59:8F:F4:49:8F
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       5923FA3E5FAA41E611EB5977FED66E9B44832880
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 15:00:13 +0000
ROA not before:           Fri 28 Aug 2026 14:55:13 +0000
ROA not after:            Fri 27 Aug 2027 15:00:13 +0000
asID:                     264589
IP address blocks:        143.202.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 08:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:23:fa:3e:5f:aa:41:e6:11:eb:59:77:fe:d6:6e:9b:44:83:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:55:13 2026 GMT
            Not After : Aug 27 15:00:13 2027 GMT
        Subject: CN=DE716708F26C16764C01953D231C70598FF4498F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:69:c8:b1:57:03:1e:2a:cb:b9:e6:be:7f:ff:
                    ab:12:04:2b:2a:68:c2:9a:ec:62:b3:97:a8:44:40:
                    e1:87:74:07:20:1d:db:12:e6:c0:9f:f6:20:09:24:
                    47:ad:29:55:46:bf:2b:23:03:91:d6:3f:ac:a8:b7:
                    78:4b:9c:b5:10:8e:3c:2e:4a:42:79:5f:fd:e7:1e:
                    e0:40:f8:e0:a7:a1:06:9e:31:6d:6c:a5:27:06:99:
                    11:04:8a:26:90:10:cd:ce:e4:35:c9:ec:ee:0a:61:
                    5f:83:3c:eb:f1:4b:e3:2f:bb:b2:05:25:03:49:b7:
                    79:a1:8e:97:2c:59:83:1d:ce:a4:65:6d:d5:b3:a6:
                    66:80:00:d8:c2:4c:d6:34:7a:7b:5e:0a:d1:e6:d8:
                    f7:61:fa:a8:ff:5f:83:b6:43:0c:99:61:e7:60:09:
                    c1:88:87:89:55:3d:c7:7b:6b:2d:42:44:6c:4d:ae:
                    ea:c2:57:06:72:77:ce:1a:d0:ae:8a:e5:0a:0b:47:
                    b8:76:58:01:52:41:ef:96:73:b6:cd:ec:00:44:cf:
                    be:7f:6d:53:62:ef:3c:41:b5:60:70:ab:59:eb:97:
                    d1:c6:ea:d9:24:52:d7:9d:99:48:05:a4:da:87:dd:
                    4d:f6:50:57:1a:14:bd:f3:4b:ca:a6:ea:61:4b:9f:
                    c7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:71:67:08:F2:6C:16:76:4C:01:95:3D:23:1C:70:59:8F:F4:49:8F
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3232392e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:7f:22:52:72:cb:89:17:b7:a5:f8:cc:d3:9a:4b:f1:eb:62:
         69:07:77:84:50:b7:d6:82:62:1f:0a:b8:bb:a7:ad:95:07:11:
         7c:98:15:48:ee:20:49:8c:1d:ce:f4:ad:44:f2:4d:5e:ae:66:
         16:88:80:6d:16:8f:72:ce:81:36:c1:56:67:19:75:68:a1:8a:
         49:71:85:37:43:b4:fa:30:88:f1:c2:d9:63:1f:83:18:c8:00:
         e6:50:ce:0a:f9:e5:17:4b:bc:96:bb:66:fe:af:7a:0f:0b:97:
         53:1c:47:08:91:b5:f4:b5:48:2c:e8:f2:63:f1:4b:80:56:1d:
         f7:e2:81:86:07:6e:82:5d:74:f3:43:a5:62:92:65:67:bc:9e:
         41:cc:cc:fa:76:de:03:92:79:d1:fc:7e:3e:47:e2:86:30:e1:
         52:7f:c8:d7:ab:ca:43:57:09:3e:45:f1:34:a3:59:df:7b:df:
         15:af:bd:ee:48:c8:ed:24:a6:66:d7:4e:35:ac:7b:62:46:c4:
         44:dd:67:46:80:f4:7f:f9:a6:6e:b0:d4:86:d3:96:82:73:8e:
         15:ac:91:fe:32:11:cf:ac:0a:b3:af:ef:0e:88:55:e5:df:62:
         2b:fd:ba:d8:ca:ac:96:07:9a:5b:de:92:8b:e6:57:4d:7e:66:
         5e:11:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:25:25 2026 by rpki-client