Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa
File:                     3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa (raw, json)
Hash identifier:          Dcs9ujG63UEN8iKH5z0l7Qdd9FtCiy7JQKBJ+xhqums=
Subject key identifier:   59:FE:12:6A:1E:C1:35:2D:AB:19:A2:67:7B:6C:08:6D:D6:6E:81:BE
Certificate issuer:       /CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
Certificate serial:       616674238022460BA3B2FBE99371460C9CF60D1A
Authority key identifier: 87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa
Signing time:             Fri 28 Aug 2026 19:06:24 +0000
ROA not before:           Fri 28 Aug 2026 19:01:24 +0000
ROA not after:            Fri 27 Aug 2027 19:06:24 +0000
asID:                     262369
IP address blocks:        143.137.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl
                          rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 01:03:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:66:74:23:80:22:46:0b:a3:b2:fb:e9:93:71:46:0c:9c:f6:0d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=870BEA059ABEEBC1F544EA1F3FA635CF72A84657
        Validity
            Not Before: Aug 28 19:01:24 2026 GMT
            Not After : Aug 27 19:06:24 2027 GMT
        Subject: CN=59FE126A1EC1352DAB19A2677B6C086DD66E81BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:93:85:3e:ff:18:99:4e:d9:63:11:90:31:
                    fb:4d:2d:a0:2c:32:74:09:46:a7:85:0e:d2:4a:a9:
                    7a:b4:bf:bb:22:b6:47:52:98:be:ba:0f:9d:cf:78:
                    62:c8:7a:0f:30:ca:b1:d3:9e:90:57:d5:ae:9f:4e:
                    1a:e7:34:b7:f7:3e:07:57:b8:4d:57:15:8d:82:0a:
                    e1:9f:71:7d:07:58:7e:6e:70:6a:2a:36:cd:48:b8:
                    ff:5c:eb:f4:71:10:f3:a1:a7:46:bf:0e:a4:3a:65:
                    35:a9:63:3d:9e:a3:e0:ef:b1:80:8a:14:d1:e8:b5:
                    8e:6a:8c:01:eb:3f:70:c1:9d:40:5b:02:92:7e:c9:
                    70:b9:bf:a8:03:36:d2:8b:e2:74:2f:81:3d:26:0b:
                    0c:03:25:c4:19:7c:30:4b:46:ca:ad:2a:39:10:11:
                    2c:93:e9:ec:b9:80:db:4a:22:a1:26:2d:b9:1b:0d:
                    46:6c:e8:9e:90:76:ad:93:d9:cf:a4:46:a7:39:26:
                    0a:8b:4e:a8:c3:2c:7f:91:e3:a4:72:b7:88:f6:23:
                    7c:af:72:c1:95:fc:7e:dc:ce:39:96:5b:63:e1:bb:
                    26:20:f5:ec:64:98:3f:1e:83:7c:a0:be:5a:b4:13:
                    98:a5:3c:60:25:24:d9:6c:3f:27:4d:50:f5:94:d1:
                    30:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FE:12:6A:1E:C1:35:2D:AB:19:A2:67:7B:6C:08:6D:D6:6E:81:BE
            X509v3 Authority Key Identifier:
                keyid:87:0B:EA:05:9A:BE:EB:C1:F5:44:EA:1F:3F:A6:35:CF:72:A8:46:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/870BEA059ABEEBC1F544EA1F3FA635CF72A84657.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/3134332e3133372e37312e302f32342d3234203d3e20323632333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:1b:cb:de:ef:0a:bb:8b:f0:e0:c5:c1:22:10:12:7b:d2:0b:
         73:7a:b1:a7:b6:ad:c7:ba:2c:d8:7a:f3:6f:77:b1:53:db:9f:
         7a:83:c8:66:48:d4:bb:5b:26:c0:ce:a8:a2:d6:8d:7d:49:3f:
         44:26:38:82:90:6e:0d:4e:01:67:35:4c:05:9c:f6:cd:6d:8d:
         7a:7f:e1:25:04:6b:fb:63:0b:34:5e:33:95:75:45:43:51:c0:
         8d:5e:ad:9c:5e:72:ca:9f:81:9a:13:4a:13:22:f5:90:7a:21:
         4c:cb:8e:81:48:ce:d2:15:9e:39:53:80:b7:ca:a0:63:36:7d:
         ae:e9:d9:63:8b:52:8f:cd:21:a5:3f:36:16:b0:5e:a0:bb:45:
         c2:0e:38:2a:3a:6f:05:be:3b:01:a8:4d:7a:93:a9:41:90:04:
         f9:58:9b:a1:9e:14:50:ab:e7:fe:d4:95:09:f9:be:94:a0:91:
         7e:c0:33:ef:86:b8:86:55:02:c3:93:44:1b:36:f5:c4:c5:85:
         7b:f0:5b:bc:6c:3d:64:d1:e9:80:dd:46:8b:8a:0b:e0:3f:9a:
         bd:f8:1d:44:d3:54:e4:a6:0f:e4:ec:ba:ee:39:be:6b:ac:82:
         9a:9f:0c:8f:97:6d:62:4f:d5:a2:01:0a:23:51:d8:8d:90:67:
         84:48:30:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:17:33 2026 by rpki-client