Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa
File:                     3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa (raw, json)
Hash identifier:          hZjMUROU9nx2CYpxgIfxm6LKPrpgUBba+yZeBmURfTo=
Subject key identifier:   7F:2B:01:E0:61:F5:75:01:83:68:51:ED:6C:ED:5F:C7:95:1C:C6:AB
Certificate issuer:       /CN=88253E1822F73AA3A3B16BE2183CEC4E54413750
Certificate serial:       244CEEB2964501BD1CF55AB23801C3E6BC4B903F
Authority key identifier: 88:25:3E:18:22:F7:3A:A3:A3:B1:6B:E2:18:3C:EC:4E:54:41:37:50
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88253E1822F73AA3A3B16BE2183CEC4E54413750.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa
Signing time:             Tue 02 Jun 2026 11:31:37 +0000
ROA not before:           Tue 02 Jun 2026 11:26:37 +0000
ROA not after:            Tue 01 Jun 2027 11:31:37 +0000
asID:                     265161
IP address blocks:        143.255.212.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/88253E1822F73AA3A3B16BE2183CEC4E54413750.crl
                          rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/88253E1822F73AA3A3B16BE2183CEC4E54413750.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88253E1822F73AA3A3B16BE2183CEC4E54413750.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 13 Jun 2026 21:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4c:ee:b2:96:45:01:bd:1c:f5:5a:b2:38:01:c3:e6:bc:4b:90:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88253E1822F73AA3A3B16BE2183CEC4E54413750
        Validity
            Not Before: Jun  2 11:26:37 2026 GMT
            Not After : Jun  1 11:31:37 2027 GMT
        Subject: CN=7F2B01E061F57501836851ED6CED5FC7951CC6AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:a9:a2:ea:5c:c3:a3:08:1b:03:8d:f8:28:
                    8c:f0:00:fd:c6:3b:66:44:01:6e:ef:9c:7e:cd:41:
                    7b:c2:52:af:a2:c9:38:ae:03:6f:21:93:72:cb:7a:
                    da:36:2e:22:54:a2:a9:25:10:e0:6d:a0:fc:e2:8c:
                    2d:fc:39:a2:d5:6e:a5:28:1f:7f:c9:1f:77:91:02:
                    1b:72:e5:1c:de:86:0f:28:24:e8:d9:21:40:a3:5f:
                    82:7c:95:d5:3d:75:62:0a:b7:12:e4:a7:ca:8b:b0:
                    22:59:d6:55:67:1c:fe:a6:3c:1f:91:da:b5:76:3f:
                    bd:3c:3d:25:68:d4:ca:a6:f8:7e:8f:01:00:39:c2:
                    38:9f:4b:45:44:cf:e6:83:1a:21:87:d8:58:33:22:
                    8b:56:ca:a3:ba:0b:cd:ba:77:24:4d:b8:10:65:55:
                    4f:6a:9b:9a:c2:7b:cb:5f:3f:aa:b2:f4:68:b9:2e:
                    8b:96:ce:ca:8d:14:79:63:2b:40:66:44:1b:0b:cc:
                    d5:73:24:47:cc:17:47:87:35:67:ab:8e:d1:c5:1e:
                    3a:5b:02:28:12:5f:b9:a6:a4:a0:81:f9:93:92:92:
                    e4:5c:ec:7b:46:af:1a:ec:c0:ab:bf:97:6a:8f:46:
                    17:88:5b:04:b6:03:2b:e0:b4:67:f4:38:e3:92:67:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:01:E0:61:F5:75:01:83:68:51:ED:6C:ED:5F:C7:95:1C:C6:AB
            X509v3 Authority Key Identifier:
                keyid:88:25:3E:18:22:F7:3A:A3:A3:B1:6B:E2:18:3C:EC:4E:54:41:37:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/88253E1822F73AA3A3B16BE2183CEC4E54413750.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88253E1822F73AA3A3B16BE2183CEC4E54413750.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hy8aqw8rbw8NVtMz4XAcWZv3yoAmv6qb1BoYvBKvGbhH/0/3134332e3235352e3231322e302f32322d3332203d3e20323635313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:b3:7c:8f:31:a4:4e:3d:13:ca:64:71:2d:f6:64:cb:48:a6:
         a0:30:d2:11:06:ce:12:37:df:81:38:b2:7b:d9:d3:6f:64:01:
         46:ae:22:3e:81:81:63:19:4a:3a:67:a4:58:fc:4c:89:10:3e:
         63:30:fe:79:32:f4:10:80:2b:2b:31:83:27:5f:39:5a:29:03:
         8b:81:29:78:ea:4f:9f:c8:33:74:3c:06:89:c9:a6:fe:33:94:
         64:57:22:0a:88:fe:d6:2b:47:c4:22:da:45:45:5d:20:e4:c9:
         6c:94:22:6a:47:a5:4e:1d:6e:86:90:15:4f:ab:8f:27:67:ac:
         02:62:89:fd:8b:70:0d:a0:c9:1c:4f:ad:b9:62:be:0f:a2:be:
         54:8e:2a:c7:0f:f8:d4:44:2e:08:42:81:00:7c:1d:ec:29:aa:
         74:d3:b9:48:42:0a:4a:d7:93:a1:6d:98:05:97:f5:e0:b2:b0:
         53:11:c2:7a:19:03:91:32:ac:e0:77:7f:c6:12:a5:2a:81:1d:
         ae:8f:f4:f7:c8:74:95:49:c6:e6:73:61:6c:34:32:d0:fa:bb:
         3f:0c:a1:1d:52:eb:c3:e2:92:f1:ff:65:97:ff:50:fc:40:4e:
         ef:7a:00:59:27:95:25:7b:4b:f3:f8:80:c9:f5:fe:b3:77:ac:
         9d:aa:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 03:56:57 2026 by rpki-client