Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134332e302f32342d3234203d3e20323632363432.roa
File:                     3136382e3230352e3134332e302f32342d3234203d3e20323632363432.roa (raw, json)
Hash identifier:          Z7D4/lqCsR8hxrfbMjUXfWLJvDROBh7kyo035zFXElg=
Subject key identifier:   74:67:5B:3F:20:C4:21:D2:04:FB:51:F4:8E:C8:2A:7D:4C:FE:B7:11
Certificate issuer:       /CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
Certificate serial:       1E9D2A9DCD548BD15C8E854F535B3FD829475A50
Authority key identifier: F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134332e302f32342d3234203d3e20323632363432.roa
Signing time:             Fri 28 Aug 2026 17:06:02 +0000
ROA not before:           Fri 28 Aug 2026 17:01:02 +0000
ROA not after:            Fri 27 Aug 2027 17:06:02 +0000
asID:                     262642
IP address blocks:        168.205.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl
                          rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 01:42:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9d:2a:9d:cd:54:8b:d1:5c:8e:85:4f:53:5b:3f:d8:29:47:5a:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3E287DE6111146952ABBC02AC1C5A338C633AAC
        Validity
            Not Before: Aug 28 17:01:02 2026 GMT
            Not After : Aug 27 17:06:02 2027 GMT
        Subject: CN=74675B3F20C421D204FB51F48EC82A7D4CFEB711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:10:f4:27:fb:f0:05:00:4b:fe:d3:72:c3:
                    93:ef:c5:ed:eb:12:b9:f7:84:f6:2e:eb:f4:e0:37:
                    63:59:89:52:4a:fe:e1:08:0e:be:fc:33:e6:3a:b7:
                    d1:be:2f:db:d3:ba:9e:3e:d4:a3:e6:da:b3:fe:4e:
                    f5:ae:3b:fc:0e:86:74:7b:64:03:53:9f:07:80:e7:
                    c9:18:56:52:36:b7:40:8c:b4:99:9c:d9:45:1c:92:
                    f5:94:1a:01:7a:44:d8:e1:27:ec:a2:a2:cb:e8:9d:
                    06:41:cd:84:90:c2:a9:88:4d:ec:74:26:6d:20:e1:
                    82:d8:63:14:05:62:f3:c9:c3:e1:52:71:ed:d2:58:
                    20:fb:3e:76:48:ce:a5:f8:42:70:aa:bd:ea:88:c8:
                    c3:a6:12:cb:8b:78:29:17:01:a1:0c:9b:11:b0:40:
                    18:b3:02:69:59:6c:c4:6f:28:d2:9e:83:9b:0a:ad:
                    e4:49:c8:c2:b3:91:3f:3e:c8:b1:4e:e3:04:36:7f:
                    ae:df:1d:7c:75:ed:16:c6:70:b2:a7:8a:8b:b9:ed:
                    a9:7e:d8:8b:29:7a:3f:69:06:5d:90:65:07:15:2d:
                    28:e7:d1:04:62:bc:4a:b5:2f:f6:ea:e0:1c:85:f4:
                    26:d0:fa:97:be:9a:e1:61:37:3d:91:3c:fd:82:06:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:67:5B:3F:20:C4:21:D2:04:FB:51:F4:8E:C8:2A:7D:4C:FE:B7:11
            X509v3 Authority Key Identifier:
                keyid:F3:E2:87:DE:61:11:14:69:52:AB:BC:02:AC:1C:5A:33:8C:63:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/F3E287DE6111146952ABBC02AC1C5A338C633AAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3E287DE6111146952ABBC02AC1C5A338C633AAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/69GwaijCsda1NmDXncXidx2rLfbMamwuJUyT4Sos52af/0/3136382e3230352e3134332e302f32342d3234203d3e20323632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:33:fd:5d:e0:d8:5c:87:c7:fb:bb:dd:c0:9a:5c:b4:51:62:
         5b:a2:7b:e7:d3:45:92:65:be:a8:00:26:76:85:ee:0b:24:e5:
         5b:dc:79:ff:99:c2:29:93:54:ed:f2:06:5c:c2:84:01:79:96:
         a6:1e:3a:ca:ec:3d:3a:49:79:69:d0:2e:67:a8:c7:b7:6e:af:
         94:b5:e1:82:c3:90:0f:f2:82:27:f5:18:27:f3:bf:34:bd:19:
         3b:10:00:57:86:60:59:c9:99:e8:eb:6b:c6:d6:b8:c2:a1:c9:
         db:a3:f6:d1:61:78:75:44:cd:d4:35:3b:95:41:1d:84:5c:3f:
         a5:57:9a:62:ab:3b:87:37:64:e0:66:43:7e:8b:64:e3:10:32:
         92:c0:35:19:74:fe:9e:bb:78:08:b0:71:db:30:d0:c3:19:de:
         e0:71:cb:65:d8:a7:e3:f0:d1:b0:7b:9d:b7:ee:89:6d:92:29:
         8e:0d:aa:7b:a5:fb:34:95:ed:7c:09:86:2a:6b:cd:db:0d:83:
         7f:47:8e:49:da:3b:4a:50:3f:6c:c8:47:0f:95:1a:79:ab:70:
         f6:2e:9a:04:90:4d:a1:bb:0e:cb:07:e7:8c:7c:9d:0a:6f:87:
         3e:58:58:01:87:4c:16:ed:0f:de:fe:51:e7:ea:fa:b3:cb:27:
         f1:81:c6:4c
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUHp0qnc1Ui9FcjoVPU1s/2ClHWlAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjNFMjg3REU2MTExMTQ2OTUyQUJCQzAyQUMxQzVBMzM4
QzYzM0FBQzAeFw0yNjA4MjgxNzAxMDJaFw0yNzA4MjcxNzA2MDJaMDMxMTAvBgNV
BAMTKDc0Njc1QjNGMjBDNDIxRDIwNEZCNTFGNDhFQzgyQTdENENGRUI3MTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ghD0J/vwBQBL/tNyw5Pvxe3r
Ern3hPYu6/TgN2NZiVJK/uEIDr78M+Y6t9G+L9vTup4+1KPm2rP+TvWuO/wOhnR7
ZANTnweA58kYVlI2t0CMtJmc2UUckvWUGgF6RNjhJ+yiosvonQZBzYSQwqmITex0
Jm0g4YLYYxQFYvPJw+FSce3SWCD7PnZIzqX4QnCqveqIyMOmEsuLeCkXAaEMmxGw
QBizAmlZbMRvKNKeg5sKreRJyMKzkT8+yLFO4wQ2f67fHXx17RbGcLKniou57al+
2Ispej9pBl2QZQcVLSjn0QRivEq1L/bq4ByF9CbQ+pe+muFhNz2RPP2CBgsrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUdGdbPyDEIdIE+1H0jsgqfUz+txEwHwYDVR0j
BBgwFoAU8+KH3mERFGlSq7wCrBxaM4xjOqwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjlHd2FpakNzZGExTm1EWG5jWGlkeDJyTGZiTWFtd3VKVXlUNFNvczUy
YWYvMC9GM0UyODdERTYxMTExNDY5NTJBQkJDMDJBQzFDNUEzMzhDNjMzQUFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YzRTI4N0RFNjExMTE0Njk1
MkFCQkMwMkFDMUM1QTMzOEM2MzNBQUMuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY5R3dhaWpDc2RhMU5tRFhuY1hpZHgyckxmYk1hbXd1SlV5VDRTb3M1MmFmLzAv
MzEzNjM4MmUzMjMwMzUyZTMxMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM2MzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjNjzANBgkqhkiG9w0BAQsFAAOCAQEAEzP9
XeDYXIfH+7vdwJpctFFiW6J759NFkmW+qAAmdoXuCyTlW9x5/5nCKZNU7fIGXMKE
AXmWph46yuw9Okl5adAuZ6jHt26vlLXhgsOQD/KCJ/UYJ/O/NL0ZOxAAV4ZgWcmZ
6Otrxta4wqHJ26P20WF4dUTN1DU7lUEdhFw/pVeaYqs7hzdk4GZDfotk4xAyksA1
GXT+nrt4CLBx2zDQwxne4HHLZdin4/DRsHudt+6JbZIpjg2qe6X7NJXtfAmGKmvN
2w2Df0eOSdo7SlA/bMhHD5Uaeatw9i6aBJBNobsOywfnjHydCm+HPlhYAYdMFu0P
3v5R5+r6s8sn8YHGTA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 14:35:19 2026 by rpki-client