Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa
File:                     3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa (raw, json)
Hash identifier:          MOLjI4j0mXUI5AmrUqQ7po2biHv9PoxyHwU/TntUaxE=
Subject key identifier:   03:E2:24:5D:24:32:64:2F:29:F2:CA:4B:68:2A:E8:05:6C:B5:BA:67
Certificate issuer:       /CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
Certificate serial:       37ECE2E997C2B38415882C469FADBB58A57AC2C7
Authority key identifier: 83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa
Signing time:             Fri 28 Aug 2026 14:43:51 +0000
ROA not before:           Fri 28 Aug 2026 14:38:51 +0000
ROA not after:            Fri 27 Aug 2027 14:43:51 +0000
asID:                     264589
IP address blocks:        143.202.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 08:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ec:e2:e9:97:c2:b3:84:15:88:2c:46:9f:ad:bb:58:a5:7a:c2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8386FB28634856B6B9770AB37BF1A60579AFDAD9
        Validity
            Not Before: Aug 28 14:38:51 2026 GMT
            Not After : Aug 27 14:43:51 2027 GMT
        Subject: CN=03E2245D2432642F29F2CA4B682AE8056CB5BA67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e6:07:17:d5:bd:e3:73:0d:32:f2:5b:a9:f7:
                    1a:a4:b7:cc:b1:c5:8b:9c:b2:0e:fd:07:c0:35:49:
                    20:51:2c:45:ad:88:00:cc:93:0d:fd:4e:bc:c0:30:
                    44:d7:0e:78:7a:2d:4b:77:5f:e4:6b:c0:16:51:25:
                    f9:07:cf:4c:7f:4d:19:9b:c4:53:d4:5a:55:25:09:
                    dc:57:98:95:b0:f6:c1:ee:c1:5e:d3:87:57:1a:28:
                    39:87:50:b8:e4:8f:7a:bd:1d:e6:c2:c8:51:c2:ab:
                    d5:c9:a9:4c:b4:c1:8d:4b:b9:9b:b2:84:29:ac:a7:
                    ab:e7:f0:cb:d6:c6:78:45:65:38:80:6a:1c:29:6b:
                    31:ee:9e:70:1d:62:0b:ee:bc:6f:8b:d7:d8:a2:e5:
                    56:a1:b2:5e:12:4d:75:73:17:0d:92:05:af:d8:1c:
                    08:8e:07:60:fe:80:4f:6d:62:12:d7:d7:16:6a:87:
                    e9:c9:b1:21:ef:a3:bb:19:45:5f:dc:22:a7:84:c0:
                    7d:34:64:1b:9f:74:b7:fa:5d:20:75:72:0d:b6:ea:
                    4b:63:5e:10:cb:72:27:83:92:d1:8d:35:39:5b:12:
                    01:2e:cd:42:ac:91:eb:2e:fa:fa:a9:4d:00:6e:5e:
                    7d:18:18:bc:68:2b:ab:91:57:0d:f7:c4:fc:42:53:
                    1a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E2:24:5D:24:32:64:2F:29:F2:CA:4B:68:2A:E8:05:6C:B5:BA:67
            X509v3 Authority Key Identifier:
                keyid:83:86:FB:28:63:48:56:B6:B9:77:0A:B3:7B:F1:A6:05:79:AF:DA:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/8386FB28634856B6B9770AB37BF1A60579AFDAD9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8386FB28634856B6B9770AB37BF1A60579AFDAD9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/3134332e3230322e3233312e302f32342d3234203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:ea:be:36:ab:c7:cb:75:19:83:03:e8:82:73:82:ce:63:
         cc:50:dd:c9:11:5f:f0:90:90:8c:e9:35:81:28:6c:1a:b8:47:
         9f:31:17:0e:89:9f:e7:d4:c4:70:df:95:f6:41:f5:7d:fe:93:
         f6:c9:78:a2:f3:9f:54:cc:ec:0f:fb:5d:ff:af:f6:97:d4:e1:
         0d:5a:2f:7b:61:ee:3d:34:80:cc:c9:39:c1:20:d3:27:2b:f2:
         a7:6e:f5:00:d8:bc:af:7c:21:61:89:19:f5:c0:42:9b:4f:e4:
         7b:e7:69:5a:fe:0e:45:99:7e:22:aa:a4:ed:50:e8:d8:04:7f:
         21:28:74:99:64:fb:23:93:11:e4:fa:9a:1c:7f:fb:0e:4e:a0:
         2e:d4:79:08:85:47:12:1e:5d:de:eb:77:3e:be:3a:48:be:8c:
         52:85:20:35:b1:5e:02:af:07:30:ac:fb:da:aa:c5:7b:63:ba:
         ef:05:03:8c:0c:4c:f1:c7:20:d5:e6:2d:eb:c9:70:b3:dd:18:
         06:5f:11:4d:b2:e0:5b:cc:1f:1c:1a:a6:82:53:4b:bc:e6:90:
         1d:31:5d:bd:f1:60:ae:58:42:a3:a3:64:d6:58:8d:b0:af:7f:
         ac:aa:78:b7:33:e6:40:85:c3:c3:63:bd:45:24:50:ae:c2:84:
         cd:33:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 11:08:18 2026 by rpki-client