Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32332d3233203d3e20323634303134.roa
File:                     3134332e302e3136342e302f32332d3233203d3e20323634303134.roa (raw, json)
Hash identifier:          JVTGw0KicqnCAPzgf6kLlfaYDWcQiObzBwi7vEv65jU=
Subject key identifier:   0D:13:C5:6B:3C:43:83:7D:54:09:DE:3E:64:43:4F:18:90:BE:72:A4
Certificate issuer:       /CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
Certificate serial:       524D41DE0F57F7BCB1B824DDCC51025F260A22A6
Authority key identifier: 76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32332d3233203d3e20323634303134.roa
Signing time:             Fri 28 Aug 2026 16:11:42 +0000
ROA not before:           Fri 28 Aug 2026 16:06:42 +0000
ROA not after:            Fri 27 Aug 2027 16:11:42 +0000
asID:                     264014
IP address blocks:        143.0.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 10:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4d:41:de:0f:57:f7:bc:b1:b8:24:dd:cc:51:02:5f:26:0a:22:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
        Validity
            Not Before: Aug 28 16:06:42 2026 GMT
            Not After : Aug 27 16:11:42 2027 GMT
        Subject: CN=0D13C56B3C43837D5409DE3E64434F1890BE72A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:64:4d:ea:5b:dd:63:1d:16:53:87:7b:2f:
                    22:14:21:6a:13:4b:de:ba:c1:a0:ad:63:d6:9f:5b:
                    c3:43:92:52:f5:ed:2e:ef:7f:ba:3d:2d:ad:3e:46:
                    00:43:2a:56:93:a5:a4:58:bd:bc:68:e5:a7:f7:17:
                    e2:a9:10:9c:3f:ee:b1:94:59:dc:45:65:7c:77:d2:
                    9d:b2:c0:d3:6f:c7:e2:52:42:e3:2b:4f:36:31:88:
                    39:5b:db:31:d2:17:4a:fb:e6:c4:45:28:1a:1d:d4:
                    89:a8:2b:5d:81:1f:d6:b9:5c:c4:80:9c:15:cc:ed:
                    11:c0:17:76:ad:f8:cf:a2:f5:0a:52:8e:d5:fe:3d:
                    7d:f0:fa:0d:65:01:9f:c3:06:67:25:6c:63:ee:f4:
                    65:da:5c:9c:13:95:4d:01:96:b1:39:7c:c3:88:25:
                    82:af:d8:df:09:61:ce:e2:cf:2e:6f:47:43:c9:99:
                    48:dd:3a:2e:05:e2:79:6b:96:17:9d:4b:97:f4:d4:
                    78:87:a5:d4:6a:39:e5:98:c2:ba:20:8e:73:be:27:
                    73:fa:8a:27:3e:8d:ea:e9:83:c0:1d:d7:2e:26:09:
                    9c:6f:a7:16:b5:d5:4e:6f:7a:a4:57:1f:f3:bb:76:
                    4f:7e:ca:b1:df:ea:f6:e1:c7:06:13:4b:b1:7c:d6:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:13:C5:6B:3C:43:83:7D:54:09:DE:3E:64:43:4F:18:90:BE:72:A4
            X509v3 Authority Key Identifier:
                keyid:76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136342e302f32332d3233203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c8:f0:36:c1:46:8b:07:a0:79:c6:dd:b0:7c:68:ee:43:6c:40:
         58:a2:57:e4:a8:c5:c1:a0:5a:1e:59:d2:43:26:0d:e2:e4:c4:
         75:23:db:a8:18:b1:11:e9:2d:e6:94:50:7b:20:50:fc:e0:85:
         a4:04:10:77:ea:a1:25:21:ec:8f:7f:b6:d2:09:ea:80:f4:c9:
         8c:f3:87:76:8e:78:0d:31:fe:37:a7:98:65:52:6c:d5:89:4a:
         5c:15:3f:4a:13:bc:84:93:52:70:18:7f:a2:48:a3:a7:ea:a4:
         ae:67:22:0c:a3:5f:9e:f5:cd:93:b3:54:6b:f7:42:d2:55:49:
         79:66:cf:e6:2e:04:cf:c7:b4:43:09:45:fa:41:95:19:1e:32:
         a1:99:ee:f3:60:98:de:0e:d2:ac:41:b2:f3:cf:ae:2d:83:76:
         47:10:03:f3:d9:4d:36:ca:5c:d4:55:b0:ca:df:15:3e:01:3a:
         61:a4:28:a6:9f:06:05:87:56:4c:ce:3d:63:1e:22:c0:62:2f:
         18:5d:b6:62:cc:c1:b1:33:d9:a8:49:41:0a:48:a3:45:c4:08:
         42:ce:8f:50:cc:0b:b3:0a:8c:68:2f:89:8f:b8:99:b1:fe:9b:
         1b:b2:f4:4a:dc:e5:bb:c3:e6:98:2f:97:1f:7d:72:71:10:ef:
         03:aa:8d:80
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUk1B3g9X97yxuCTdzFECXyYKIqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0M0ZFRDNFQjkwMTI1OTNFMUNBQ0E3OENGNDY2NEEz
NjJGQUQyMzAeFw0yNjA4MjgxNjA2NDJaFw0yNzA4MjcxNjExNDJaMDMxMTAvBgNV
BAMTKDBEMTNDNTZCM0M0MzgzN0Q1NDA5REUzRTY0NDM0RjE4OTBCRTcyQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3sGRN6lvdYx0WU4d7LyIUIWoT
S966waCtY9afW8NDklL17S7vf7o9La0+RgBDKlaTpaRYvbxo5af3F+KpEJw/7rGU
WdxFZXx30p2ywNNvx+JSQuMrTzYxiDlb2zHSF0r75sRFKBod1ImoK12BH9a5XMSA
nBXM7RHAF3at+M+i9QpSjtX+PX3w+g1lAZ/DBmclbGPu9GXaXJwTlU0BlrE5fMOI
JYKv2N8JYc7izy5vR0PJmUjdOi4F4nlrlhedS5f01HiHpdRqOeWYwrogjnO+J3P6
iic+jerpg8Ad1y4mCZxvpxa11U5veqRXH/O7dk9+yrHf6vbhxwYTS7F81qr5AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUDRPFazxDg31UCd4+ZENPGJC+cqQwHwYDVR0j
BBgwFoAUdkP+0+uQElk+HKynjPRmSjYvrSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu
THgvMC83NjQzRkVEM0VCOTAxMjU5M0UxQ0FDQTc4Q0Y0NjY0QTM2MkZBRDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDNGRUQzRUI5MDEyNTkz
RTFDQUNBNzhDRjQ2NjRBMzYyRkFEMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0VHNGSEt1TXZjZllYVHByWHNRMzVZVzFSUDZCeWJOTEZiN2QyVTdobkx4LzAv
MzEzNDMzMmUzMDJlMzEzNjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBjwCkMA0GCSqGSIb3DQEBCwUAA4IBAQDI8DbBRosH
oHnG3bB8aO5DbEBYolfkqMXBoFoeWdJDJg3i5MR1I9uoGLER6S3mlFB7IFD84IWk
BBB36qElIeyPf7bSCeqA9MmM84d2jngNMf43p5hlUmzViUpcFT9KE7yEk1JwGH+i
SKOn6qSuZyIMo1+e9c2Ts1Rr90LSVUl5Zs/mLgTPx7RDCUX6QZUZHjKhme7zYJje
DtKsQbLzz64tg3ZHEAPz2U02ylzUVbDK3xU+ATphpCimnwYFh1ZMzj1jHiLAYi8Y
XbZizMGxM9moSUEKSKNFxAhCzo9QzAuzCoxoL4mPuJmx/psbsvRK3OW7w+aYL5cf
fXJxEO8Dqo2A
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:03:45 2026 by rpki-client