Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa
File:                     3134332e302e3136362e302f32342d3234203d3e20323634303134.roa (raw, json)
Hash identifier:          yzs6SvEHzgaPIoRbqymR8TWb4/a8MHKsjjNyxE929yE=
Subject key identifier:   C1:5F:C0:D6:A0:53:42:1B:B6:C9:E8:CE:A5:AB:46:22:67:F6:48:23
Certificate issuer:       /CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
Certificate serial:       3C6915B5BDA70DC5F39689CA1555DA8F506501DE
Authority key identifier: 76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa
Signing time:             Fri 28 Aug 2026 16:11:43 +0000
ROA not before:           Fri 28 Aug 2026 16:06:43 +0000
ROA not after:            Fri 27 Aug 2027 16:11:43 +0000
asID:                     264014
IP address blocks:        143.0.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl
                          rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Sep 2026 10:17:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:69:15:b5:bd:a7:0d:c5:f3:96:89:ca:15:55:da:8f:50:65:01:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7643FED3EB9012593E1CACA78CF4664A362FAD23
        Validity
            Not Before: Aug 28 16:06:43 2026 GMT
            Not After : Aug 27 16:11:43 2027 GMT
        Subject: CN=C15FC0D6A053421BB6C9E8CEA5AB462267F64823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:71:e2:c1:f5:ba:f3:2c:dd:99:25:ad:29:25:
                    8e:48:e4:53:d6:da:57:3c:d8:20:81:e2:80:8a:eb:
                    ad:d2:ed:28:f3:5e:98:7b:4f:46:20:f9:6a:0c:6d:
                    18:d5:87:86:f7:07:32:83:61:70:4f:a4:f3:f7:e1:
                    8c:3e:01:97:9d:4a:24:96:48:58:a3:9f:a7:0d:73:
                    20:dc:72:cd:c8:49:01:ee:6c:36:4b:8d:8f:73:53:
                    a4:34:71:be:66:38:7e:0d:bd:34:02:bc:1d:6b:74:
                    fd:ac:0a:26:0a:84:39:18:3d:64:a5:a6:56:95:ec:
                    af:71:dc:51:27:de:d2:4c:48:2e:13:10:65:41:2b:
                    30:f9:8d:4e:88:11:64:f6:7b:0b:ee:fe:70:32:8a:
                    57:32:55:f8:d9:64:6f:a2:09:63:bf:ee:a9:99:3e:
                    18:c8:ec:05:c9:e6:85:b0:b1:dc:08:7c:33:91:8a:
                    75:6f:eb:f0:d3:38:dd:fd:c4:bd:46:ee:8e:47:35:
                    dd:25:7a:b5:0a:4e:a8:64:9d:ac:9f:18:c5:ac:3f:
                    c6:2f:07:88:ca:54:80:4f:bf:31:a1:8f:60:ce:2d:
                    33:56:1e:02:49:93:74:ab:99:44:1c:ae:5a:01:ac:
                    8c:b9:7a:73:ad:16:69:ae:d8:29:35:dc:00:a4:5f:
                    ad:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5F:C0:D6:A0:53:42:1B:B6:C9:E8:CE:A5:AB:46:22:67:F6:48:23
            X509v3 Authority Key Identifier:
                keyid:76:43:FE:D3:EB:90:12:59:3E:1C:AC:A7:8C:F4:66:4A:36:2F:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/7643FED3EB9012593E1CACA78CF4664A362FAD23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7643FED3EB9012593E1CACA78CF4664A362FAD23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4TsFHKuMvcfYXTprXsQ35YW1RP6BybNLFb7d2U7hnLx/0/3134332e302e3136362e302f32342d3234203d3e20323634303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:08:f0:fa:88:1d:d6:a7:30:ad:e0:31:94:db:7f:72:67:
         af:09:1b:89:26:76:37:00:75:63:53:ab:ef:f3:08:17:27:b4:
         70:25:40:85:93:a8:ae:e6:62:49:39:44:fa:50:1c:2c:ad:3c:
         92:3d:1b:52:f4:2f:40:39:14:a8:04:59:f1:d5:81:4b:c2:b8:
         2e:6c:ac:a8:03:53:ec:76:cf:3f:35:35:86:3e:31:b5:6d:6d:
         34:45:b6:44:f0:5d:fc:df:1d:53:1e:51:40:a9:9c:85:23:e1:
         ad:07:38:70:52:43:37:1c:5e:ef:78:4a:9f:a7:b8:8c:df:58:
         95:84:b3:ea:f3:c2:89:13:86:88:d7:7e:7f:46:42:bc:b5:7c:
         a6:3e:1d:f7:6d:e2:67:44:68:7d:d5:25:22:07:0b:08:ca:e9:
         ae:df:72:5c:b0:0a:6e:4e:b3:52:cb:61:3c:ff:0d:31:cf:ca:
         c6:61:ca:4e:d4:a5:af:dc:15:8c:1a:5c:d8:68:f1:ab:42:b7:
         62:66:24:32:bc:b2:ad:39:39:ed:2b:49:a2:25:9e:14:23:35:
         40:5a:97:de:49:ce:8e:0b:8e:b9:a5:f7:a0:5e:14:82:c7:33:
         61:fa:c6:7d:f5:36:cb:b7:bd:0a:d0:83:53:53:0c:b9:78:86:
         68:d2:d8:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPGkVtb2nDcXzlonKFVXaj1BlAd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0M0ZFRDNFQjkwMTI1OTNFMUNBQ0E3OENGNDY2NEEz
NjJGQUQyMzAeFw0yNjA4MjgxNjA2NDNaFw0yNzA4MjcxNjExNDNaMDMxMTAvBgNV
BAMTKEMxNUZDMEQ2QTA1MzQyMUJCNkM5RThDRUE1QUI0NjIyNjdGNjQ4MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHceLB9brzLN2ZJa0pJY5I5FPW
2lc82CCB4oCK663S7SjzXph7T0Yg+WoMbRjVh4b3BzKDYXBPpPP34Yw+AZedSiSW
SFijn6cNcyDccs3ISQHubDZLjY9zU6Q0cb5mOH4NvTQCvB1rdP2sCiYKhDkYPWSl
plaV7K9x3FEn3tJMSC4TEGVBKzD5jU6IEWT2ewvu/nAyilcyVfjZZG+iCWO/7qmZ
PhjI7AXJ5oWwsdwIfDORinVv6/DTON39xL1G7o5HNd0lerUKTqhknayfGMWsP8Yv
B4jKVIBPvzGhj2DOLTNWHgJJk3SrmUQcrloBrIy5enOtFmmu2Ck13ACkX62bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwV/A1qBTQhu2yejOpatGImf2SCMwHwYDVR0j
BBgwFoAUdkP+0+uQElk+HKynjPRmSjYvrSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDRUc0ZIS3VNdmNmWVhUcHJYc1EzNVlXMVJQNkJ5Yk5MRmI3ZDJVN2hu
THgvMC83NjQzRkVEM0VCOTAxMjU5M0UxQ0FDQTc4Q0Y0NjY0QTM2MkZBRDIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzc2NDNGRUQzRUI5MDEyNTkz
RTFDQUNBNzhDRjQ2NjRBMzYyRkFEMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g0VHNGSEt1TXZjZllYVHByWHNRMzVZVzFSUDZCeWJOTEZiN2QyVTdobkx4LzAv
MzEzNDMzMmUzMDJlMzEzNjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0
MzAzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAjwCmMA0GCSqGSIb3DQEBCwUAA4IBAQBsaAjw+ogd
1qcwreAxlNt/cmevCRuJJnY3AHVjU6vv8wgXJ7RwJUCFk6iu5mJJOUT6UBwsrTyS
PRtS9C9AORSoBFnx1YFLwrgubKyoA1Psds8/NTWGPjG1bW00RbZE8F383x1THlFA
qZyFI+GtBzhwUkM3HF7veEqfp7iM31iVhLPq88KJE4aI135/RkK8tXymPh33beJn
RGh91SUiBwsIyumu33JcsApuTrNSy2E8/w0xz8rGYcpO1KWv3BWMGlzYaPGrQrdi
ZiQyvLKtOTntK0miJZ4UIzVAWpfeSc6OC465pfegXhSCxzNh+sZ99TbLt70K0INT
Uwy5eIZo0tgC
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:15:35 2026 by rpki-client