Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa
File:                     3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa (raw, json)
Hash identifier:          sHh+U0f1rytS7XrprQgah/N01VuF/fPaB/4B7Jlfcnw=
Subject key identifier:   08:D4:B8:3C:A9:50:FA:BA:37:19:80:60:D1:09:B4:7A:A2:09:13:8A
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       56D250CA1071167D356174701DD411DB36D74F11
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:13:57 +0000
ROA not before:           Fri 28 Aug 2026 19:08:57 +0000
ROA not after:            Fri 27 Aug 2027 19:13:57 +0000
asID:                     262369
IP address blocks:        143.137.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 06:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d2:50:ca:10:71:16:7d:35:61:74:70:1d:d4:11:db:36:d7:4f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:08:57 2026 GMT
            Not After : Aug 27 19:13:57 2027 GMT
        Subject: CN=08D4B83CA950FABA37198060D109B47AA209138A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:6e:24:6a:dd:20:c0:3c:b0:59:e5:da:8b:
                    b8:60:17:0d:d6:b4:42:08:8a:27:49:f7:b1:f4:17:
                    80:43:97:bc:ed:1e:de:af:1e:ed:d4:44:a3:91:dd:
                    3b:61:a8:a1:e9:e3:c1:11:32:21:1a:0a:45:81:d0:
                    4e:4b:40:81:16:2f:de:e5:fc:e4:22:68:21:81:1d:
                    22:f6:4a:7c:19:d0:bd:f8:ac:30:71:2e:4c:f2:89:
                    35:3d:10:dc:1a:da:c4:00:38:02:50:98:55:67:a0:
                    36:33:62:b6:89:22:88:55:01:32:9e:32:c2:e3:c1:
                    56:83:95:c1:73:25:df:73:25:e5:bd:40:d0:93:a3:
                    37:ab:5e:4e:39:a7:49:18:0c:28:b8:b0:eb:c8:0c:
                    b1:4d:74:d6:17:38:ff:e2:bf:28:ad:73:30:6c:ac:
                    75:75:a3:44:c8:31:79:b8:26:35:1d:94:56:cd:2b:
                    3d:06:2c:22:49:ef:87:5f:b4:b2:4c:8b:89:62:8f:
                    45:90:cd:e1:63:2a:0c:a1:88:b6:39:6c:29:72:55:
                    a1:3d:8f:c8:b5:40:ed:86:96:f2:26:d9:7f:52:ca:
                    cd:3c:f5:56:7f:1e:c2:42:6d:8b:93:95:11:fd:c9:
                    a4:bb:c2:aa:ad:dc:c5:dd:7e:3e:65:d2:e2:48:cf:
                    96:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D4:B8:3C:A9:50:FA:BA:37:19:80:60:D1:09:B4:7A:A2:09:13:8A
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e36382e302f32332d3233203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:2a:ce:07:49:22:72:aa:2d:c1:46:3c:99:61:af:5e:23:
         03:e0:85:41:39:8c:8e:25:d6:af:a8:93:68:46:7d:ab:89:50:
         14:5e:ed:47:d0:50:8b:41:c6:24:71:2b:f3:e2:43:04:64:71:
         8a:74:a3:7b:34:7a:7b:cd:bf:59:c3:51:4d:40:d4:78:1b:85:
         d9:9f:69:fa:fb:58:c3:4e:b6:17:f5:41:aa:a2:17:23:6c:e1:
         9f:96:8f:80:dd:1f:c2:f6:72:e0:a9:2a:1e:93:6e:7d:f0:43:
         93:26:b1:9b:f1:b0:93:cd:50:1f:18:4b:ad:6f:d9:9f:65:77:
         0a:b0:fa:92:bb:88:70:0b:5e:d1:02:9d:bd:7c:61:40:30:76:
         46:e6:38:09:d3:da:38:89:73:81:7c:3a:d1:53:58:17:b6:a3:
         d1:18:b9:79:b3:01:b8:98:e1:60:2a:39:64:a7:6a:d1:9c:2d:
         47:f4:ba:dc:a7:50:93:05:66:4c:81:2f:89:c7:6d:87:88:96:
         53:ab:53:b7:b1:cd:66:34:71:d9:1d:62:31:67:8e:42:df:89:
         f2:63:b5:0b:4b:c6:e5:ba:21:28:b8:4c:2b:d0:41:d8:11:4e:
         d0:ca:e6:d3:e5:59:e6:0c:3f:dc:50:4a:9b:c9:fd:a9:9c:34:
         de:9e:de:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:26:13 2026 by rpki-client