Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e352e302f32342d3234203d3e20323634303838.roa
File:                     3134332e3230382e352e302f32342d3234203d3e20323634303838.roa (raw, json)
Hash identifier:          V9JWhN6NUzo3qtWciMCRh7Hj5zrrsgMuGw76IN1C6D0=
Subject key identifier:   8D:CC:CB:10:5D:A4:D1:65:31:44:69:91:6E:83:54:09:23:00:02:A7
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       234933EF3D683613B721CEB744A3BE8F0F1146E7
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e352e302f32342d3234203d3e20323634303838.roa
Signing time:             Tue 22 Sep 2026 17:12:00 +0000
ROA not before:           Tue 22 Sep 2026 17:07:00 +0000
ROA not after:            Tue 21 Sep 2027 17:12:00 +0000
asID:                     264088
IP address blocks:        143.208.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:49:33:ef:3d:68:36:13:b7:21:ce:b7:44:a3:be:8f:0f:11:46:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:07:00 2026 GMT
            Not After : Sep 21 17:12:00 2027 GMT
        Subject: CN=8DCCCB105DA4D165314469916E835409230002A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:99:ea:b2:12:9d:85:a8:f1:cf:24:d4:96:
                    dc:c5:bc:99:4a:be:2b:b0:80:83:54:8c:6c:51:82:
                    ac:65:a4:84:58:22:2b:c3:da:70:db:ca:4a:98:c9:
                    33:83:75:e2:b6:2e:d2:d6:09:49:c6:8e:59:8d:3e:
                    41:83:ea:00:0e:c4:40:f7:f0:63:69:10:fa:7b:c2:
                    81:67:4a:cb:2e:b3:7e:18:41:3f:7c:4a:f2:64:52:
                    77:33:0a:89:da:20:36:3f:f6:5d:91:7a:78:41:9f:
                    60:81:cc:ee:3f:63:4d:ec:ad:fe:21:5d:7d:36:0e:
                    f7:a4:e2:a0:52:19:83:cb:3e:54:0b:e3:3a:ad:27:
                    86:8f:e0:e7:66:18:11:80:8d:58:92:4b:b0:ce:c4:
                    1e:a4:6c:53:78:88:f5:31:07:1a:92:cd:8b:7e:f7:
                    41:28:2b:b3:ef:c5:41:fa:f9:74:62:4d:81:ce:c0:
                    4d:7c:d8:50:3d:7b:40:e1:43:e4:96:0a:60:4c:45:
                    c9:af:82:23:40:ea:2b:b6:4f:af:c5:91:ff:7e:28:
                    ab:53:0e:c1:d2:a6:eb:60:8a:6b:2c:66:e8:96:63:
                    e7:6c:58:aa:42:9a:1e:87:ee:f7:d5:c5:17:30:91:
                    1c:d1:7d:b2:3f:87:48:61:3d:d5:cd:c4:86:ae:68:
                    37:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:CB:10:5D:A4:D1:65:31:44:69:91:6E:83:54:09:23:00:02:A7
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e352e302f32342d3234203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:44:92:d7:d6:a9:89:c6:51:1b:d7:6a:1e:09:5d:b0:c8:
         b2:a3:6a:28:db:35:4d:87:55:12:5f:fb:0d:e6:3e:57:fe:66:
         24:8c:20:45:7b:9c:af:e2:0c:5b:ba:9a:62:42:07:50:d9:d7:
         f1:8e:67:3b:eb:e4:85:fc:df:a8:33:f1:76:1a:2c:89:e2:60:
         2f:96:5a:a4:2c:9b:d3:0a:67:c2:10:bc:a2:3d:b0:d7:82:26:
         23:14:00:e6:69:5d:0c:5b:9e:eb:b3:21:46:c5:7e:8e:52:0c:
         62:4d:64:31:82:48:81:8c:e3:31:26:ac:a8:ae:c1:a0:76:ec:
         5f:1a:21:ec:14:3e:e2:da:ff:2b:37:a6:d5:81:09:1a:5d:03:
         88:46:3c:7b:fc:7a:a7:d6:26:54:1b:a1:66:d4:20:98:7d:b2:
         2e:f4:b1:07:9e:e9:93:b5:20:76:9d:9e:ce:fd:7a:3e:5f:d0:
         d6:0f:2f:cb:64:e6:9a:4f:ed:b3:01:54:a0:93:e3:0a:29:1f:
         1b:f9:4e:0d:e3:c0:88:1f:d8:f8:38:14:9d:e5:c7:12:0e:d7:
         6c:71:d7:32:57:8d:e9:8a:e9:b2:21:d9:a7:43:04:c1:70:03:
         81:94:38:33:87:ce:ac:0d:37:d6:33:09:55:4e:42:44:c9:aa:
         60:d6:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:41:00 2026 by rpki-client