Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32332d3233203d3e20323634303134.roa
File:                     3134332e302e3136362e302f32332d3233203d3e20323634303134.roa (raw, json)
Hash identifier:          a8FbS2Dev7IoqlJ+1AW4V3NvIayz5GLpy8yfWHkGJz0=
Subject key identifier:   D6:0D:56:C8:2D:D2:AA:2A:DD:F7:85:BE:82:FB:15:6A:5F:9E:2D:79
Certificate issuer:       /CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
Certificate serial:       2003B8A201C2296E88D27D73708D41EB399A5C4C
Authority key identifier: 76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32332d3233203d3e20323634303134.roa
Signing time:             Fri 28 Aug 2026 16:11:42 +0000
ROA not before:           Fri 28 Aug 2026 16:06:42 +0000
ROA not after:            Fri 27 Aug 2027 16:11:42 +0000
asID:                     264014
IP address blocks:        143.0.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 10:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:03:b8:a2:01:c2:29:6e:88:d2:7d:73:70:8d:41:eb:39:9a:5c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
        Validity
            Not Before: Aug 28 16:06:42 2026 GMT
            Not After : Aug 27 16:11:42 2027 GMT
        Subject: CN=D60D56C82DD2AA2ADDF785BE82FB156A5F9E2D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:02:5a:7b:86:30:c8:fb:76:06:1f:9c:8e:40:
                    e1:f8:20:3f:59:1c:f1:11:70:82:18:a7:5c:8c:35:
                    4c:ed:b9:34:bc:a8:53:08:ac:47:dd:02:d7:47:b6:
                    eb:60:5c:5c:63:10:a8:d4:e9:f7:f7:04:aa:f3:26:
                    42:12:02:7a:b6:9e:bd:e4:8e:d4:45:75:0a:0f:77:
                    46:33:73:8f:10:88:ad:ce:6f:1a:0b:f8:c7:2d:32:
                    7f:8d:36:88:a2:84:9a:ff:87:67:c3:42:9d:ce:fc:
                    cd:19:9d:6f:f4:eb:2d:b3:ee:9d:9a:ff:75:80:e2:
                    4d:1b:36:a9:b4:7f:6e:b4:da:98:bc:28:73:c1:52:
                    41:8e:60:9c:a5:93:d5:81:39:e3:98:c6:79:0c:18:
                    c8:43:f4:f2:f7:f2:06:eb:4a:4d:aa:3f:04:7c:03:
                    69:3d:17:43:0b:c9:41:d3:b7:86:de:2d:5e:ec:18:
                    c3:26:4c:c8:cf:f6:60:e1:4e:60:eb:21:7a:86:a1:
                    60:de:50:46:1c:ae:ee:51:cf:86:fd:76:8c:d1:29:
                    47:ad:81:e4:0a:38:8b:37:c7:7d:05:65:19:33:5d:
                    c6:e3:8c:ec:46:94:52:95:4f:70:39:19:b6:45:83:
                    81:92:83:46:d3:5b:6a:2b:67:79:57:07:2f:72:55:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:0D:56:C8:2D:D2:AA:2A:DD:F7:85:BE:82:FB:15:6A:5F:9E:2D:79
            X509v3 Authority Key Identifier:
                keyid:76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32332d3233203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:e9:03:a6:7d:0b:ee:95:fa:b9:c8:6d:47:17:7b:f7:69:0a:
         8d:11:fb:f2:dc:9f:2a:10:93:9a:1d:67:2e:bb:c8:2c:3b:44:
         e2:fd:72:11:f4:79:52:30:75:e0:ab:ee:41:cd:bf:fb:c6:7d:
         77:55:76:19:b8:da:0a:1a:21:22:be:17:a8:a0:18:ff:75:df:
         ee:20:98:f4:26:14:4b:e7:95:8c:26:b2:83:44:b4:56:33:02:
         94:73:df:21:23:8b:42:57:b9:0b:28:64:b8:8c:31:81:2a:3a:
         3d:fd:49:b8:2c:1f:3a:03:42:b0:bb:a4:ed:3e:0f:5d:60:8e:
         33:75:da:2a:51:16:31:fa:13:a4:7b:97:3a:77:27:81:e7:02:
         61:c2:ec:61:b3:e9:a3:eb:d5:db:12:51:8d:be:9d:29:84:cd:
         e4:5a:0d:e7:21:97:63:1a:b0:d5:6f:cf:a6:6a:a9:81:23:d7:
         80:f6:47:d4:78:00:ab:4e:c5:6e:36:b2:7a:5b:c3:ca:b5:c9:
         ac:2c:3e:68:43:c9:d0:9f:b6:77:1c:48:b3:0e:fd:2b:ac:d6:
         0f:53:0e:46:83:53:a2:40:e7:4d:3d:c5:0c:9c:6f:a8:d0:c8:
         f8:4f:84:e4:4c:7e:75:b3:a8:d9:d4:2d:6b:1d:f0:4e:b8:b6:
         e6:a8:9f:05
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUIAO4ogHCKW6I0n1zcI1B6zmaXEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0M0ZFRDNFQjkwMTI1OTNFMUNBQ0E3OENGNDY2NEEz
NjJGQUQyMzAeFw0yNjA4MjgxNjA2NDJaFw0yNzA4MjcxNjExNDJaMDMxMTAvBgNV
BAMTKEQ2MEQ1NkM4MkREMkFBMkFEREY3ODVCRTgyRkIxNTZBNUY5RTJENzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqAlp7hjDI+3YGH5yOQOH4ID9Z
HPERcIIYp1yMNUztuTS8qFMIrEfdAtdHtutgXFxjEKjU6ff3BKrzJkISAnq2nr3k
jtRFdQoPd0Yzc48QiK3ObxoL+MctMn+NNoiihJr/h2fDQp3O/M0ZnW/06y2z7p2a
/3WA4k0bNqm0f2602pi8KHPBUkGOYJylk9WBOeOYxnkMGMhD9PL38gbrSk2qPwR8
A2k9F0MLyUHTt4beLV7sGMMmTMjP9mDhTmDrIXqGoWDeUEYcru5Rz4b9dozRKUet
geQKOIs3x30FZRkzXcbjjOxGlFKVT3A5GbZFg4GSg0bTW2orZ3lXBy9yVX0JAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU1g1WyC3Sqird94W+gvsVal+eLXkwHwYDVR0j
BBgwFoAUdkP+0+uQElk+HKynjPRmSjYvrSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu
THgvMC83NjQzRkVEM0VCOTAxMjU5M0UxQ0FDQTc4Q0Y0NjY0QTM2MkZBRDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDNGRUQzRUI5MDEyNTkz
RTFDQUNBNzhDRjQ2NjRBMzYyRkFEMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0VHNGSEt1TXZjZllYVHByWHNRMzVZVzFSUDZCeWJOTEZiN2QyVTdobkx4LzAv
MzEzNDMzMmUzMDJlMzEzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBjwCmMA0GCSqGSIb3DQEBCwUAA4IBAQCa6QOmfQvu
lfq5yG1HF3v3aQqNEfvy3J8qEJOaHWcuu8gsO0Ti/XIR9HlSMHXgq+5Bzb/7xn13
VXYZuNoKGiEivheooBj/dd/uIJj0JhRL55WMJrKDRLRWMwKUc98hI4tCV7kLKGS4
jDGBKjo9/Um4LB86A0Kwu6TtPg9dYI4zddoqURYx+hOke5c6dyeB5wJhwuxhs+mj
69XbElGNvp0phM3kWg3nIZdjGrDVb8+maqmBI9eA9kfUeACrTsVuNrJ6W8PKtcms
LD5oQ8nQn7Z3HEizDv0rrNYPUw5Gg1OiQOdNPcUMnG+o0Mj4T4TkTH51s6jZ1C1r
HfBOuLbmqJ8F
-----END CERTIFICATE-----
Generated at Fri Sep 4 21:03:49 2026 by rpki-client