Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
File:                     3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          PibllMEzw/3/9Hm2ndzeG0RFWTvjtxksvd3E/Qu/zhM=
Subject key identifier:   2C:93:8C:E2:E9:91:56:6F:41:B0:C2:D5:94:71:F7:F8:AF:17:AA:06
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       43AF07A80178DBE1197B18F3446184518B037C7E
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa
Signing time:             Fri 30 Oct 2026 13:41:27 +0000
ROA not before:           Fri 30 Oct 2026 13:36:27 +0000
ROA not after:            Fri 29 Oct 2027 13:41:27 +0000
asID:                     52573
IP address blocks:        143.255.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:af:07:a8:01:78:db:e1:19:7b:18:f3:44:61:84:51:8b:03:7c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Oct 30 13:36:27 2026 GMT
            Not After : Oct 29 13:41:27 2027 GMT
        Subject: CN=2C938CE2E991566F41B0C2D59471F7F8AF17AA06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:74:60:c0:92:6f:1d:bc:e2:6f:8d:bb:84:99:
                    53:e9:2e:29:e4:a0:e8:3c:db:f8:ae:9c:d9:66:67:
                    83:6b:a3:b8:cb:7e:85:11:31:46:3e:18:ce:33:2a:
                    62:b3:25:56:5b:db:df:c5:79:cf:9d:10:a3:59:c9:
                    28:50:76:b7:e5:31:58:4a:5d:82:06:73:e4:4e:c1:
                    91:3e:25:f4:4a:41:2c:2f:09:fd:88:7f:61:ed:62:
                    a0:54:04:64:b4:e3:43:75:d4:3d:be:f4:62:81:20:
                    65:5b:84:8d:c4:56:e4:45:ac:82:85:e7:2a:3e:c9:
                    c9:fb:37:35:be:7b:9e:df:11:0d:8c:99:15:b3:94:
                    e6:ef:87:5d:a0:1f:58:28:8e:8d:d0:00:4e:2c:a3:
                    ce:33:52:a9:5e:b2:13:d2:f4:a8:37:5c:2f:6f:65:
                    97:fa:18:8d:39:c4:c8:4b:15:6c:80:f4:79:12:8f:
                    99:0a:25:f7:bf:a0:36:a7:46:ef:ae:12:c5:5b:94:
                    96:01:ff:65:87:a7:42:e1:68:75:11:79:0e:51:4a:
                    fc:d7:80:3d:23:90:c8:ca:cb:fe:b9:d9:fc:bf:06:
                    ef:18:7c:b3:88:0b:f9:bc:4e:bb:e8:e5:70:97:64:
                    74:17:c8:ab:e2:42:08:ca:98:39:f1:4a:61:f2:a4:
                    ee:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:93:8C:E2:E9:91:56:6F:41:B0:C2:D5:94:71:F7:F8:AF:17:AA:06
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3235352e3134382e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:5a:aa:a7:05:58:c8:44:28:b9:bc:d8:01:48:6a:a7:9f:3d:
         35:3c:52:ef:c5:28:32:8e:9b:fc:93:49:11:6f:05:18:a7:4e:
         c8:ad:e3:10:e7:c4:15:18:32:dc:bf:a7:52:e1:a2:fb:ea:91:
         27:c3:d9:15:e3:5f:b0:dd:d9:7c:f4:ec:ab:0e:d8:9c:d1:90:
         62:5f:cc:2b:21:0a:9b:5f:6d:96:4e:5e:4f:1b:05:b4:34:f0:
         db:e6:fb:4f:0c:8a:f6:64:1b:06:53:d2:e3:d8:d5:60:7f:58:
         2f:d2:92:e7:1b:f9:10:48:cc:17:b6:53:a0:fb:1c:cb:42:e6:
         ea:e9:e9:f6:e3:8a:00:ea:13:0a:98:aa:a6:17:60:67:85:10:
         54:f5:be:5a:49:59:de:3d:fd:00:d1:cd:40:cb:70:3b:22:fa:
         ea:c0:16:e8:d8:f8:8a:7a:6d:bf:c7:4b:e0:ff:bd:05:7d:f3:
         7b:0e:c8:a3:90:77:2f:02:a8:5f:37:13:5c:9d:a8:73:04:1b:
         5f:4b:37:26:9f:28:ae:bb:f0:cd:86:c1:0c:3f:83:ad:39:da:
         d7:be:d3:0d:f3:a2:40:b4:95:6c:25:e1:b1:31:9e:91:8f:71:
         60:5c:84:e8:d3:9b:60:cf:09:7e:fa:52:1a:fa:0a:fe:1a:6b:
         e8:a2:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:03:05 2026 by rpki-client