Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32332d3233203d3e20323634303838.roa
File:                     3134332e3230382e362e302f32332d3233203d3e20323634303838.roa (raw, json)
Hash identifier:          Nh0nkNBNpHUFOhH+OwqgBoyLQVypD/lE7DOTjZ/9AHI=
Subject key identifier:   3E:F0:A9:0D:12:3B:C0:7B:F3:92:7F:C4:7F:3F:4D:E1:7E:5A:C8:44
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       69232579D110D11BB4B7293AA72E75A020670CF5
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32332d3233203d3e20323634303838.roa
Signing time:             Tue 22 Sep 2026 17:11:59 +0000
ROA not before:           Tue 22 Sep 2026 17:06:59 +0000
ROA not after:            Tue 21 Sep 2027 17:11:59 +0000
asID:                     264088
IP address blocks:        143.208.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 Oct 2026 10:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:23:25:79:d1:10:d1:1b:b4:b7:29:3a:a7:2e:75:a0:20:67:0c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Sep 22 17:06:59 2026 GMT
            Not After : Sep 21 17:11:59 2027 GMT
        Subject: CN=3EF0A90D123BC07BF3927FC47F3F4DE17E5AC844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:50:d4:ed:4c:dc:46:da:00:c0:ed:46:d9:
                    40:1b:31:6c:bd:a0:c7:60:bf:9a:48:c1:3c:26:70:
                    4e:ab:4d:de:22:e2:f9:9a:47:bc:7f:2a:55:6e:81:
                    f4:08:48:58:10:19:a2:24:5e:28:18:fa:f9:bf:7a:
                    61:9a:d5:b3:8a:fa:f6:db:a6:96:da:51:8d:b3:9e:
                    ed:60:2e:e0:5b:97:c0:fb:54:c7:bf:bb:c5:97:ec:
                    df:a9:28:02:88:cc:01:69:87:d4:44:22:22:ab:cc:
                    48:62:07:38:61:76:6e:c1:c7:bf:e2:3e:25:61:42:
                    16:23:e9:c3:c5:95:95:ab:8b:ec:2a:e1:65:0b:dd:
                    8a:22:5c:7f:d0:b4:86:27:77:1a:2d:3a:72:28:1f:
                    24:fd:bf:4f:7e:08:8b:6a:4f:b0:ab:15:86:8b:77:
                    dc:25:5e:02:71:09:c2:99:82:4b:bc:e9:2d:6a:24:
                    48:d8:43:4c:be:38:bb:99:d8:65:41:92:57:36:b1:
                    5b:81:62:e0:a9:c2:e6:1c:fd:32:b9:78:50:7b:b4:
                    cb:e6:cc:22:d6:ee:70:8a:9a:2b:9d:d6:f8:a1:f4:
                    ea:35:f9:40:1c:d0:96:33:8c:e2:cd:11:17:a2:0d:
                    5a:05:77:e5:8a:b1:30:8c:fd:55:88:b2:8e:2c:89:
                    a6:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F0:A9:0D:12:3B:C0:7B:F3:92:7F:C4:7F:3F:4D:E1:7E:5A:C8:44
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e362e302f32332d3233203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:91:86:91:fa:38:ba:a1:f9:52:71:ba:dd:91:f0:44:96:
         24:11:11:d3:b3:bd:c1:99:9d:79:f8:1d:01:89:e0:24:0a:b7:
         58:97:3a:a8:cc:b7:49:9b:63:a1:7b:b0:38:60:65:d0:1c:1f:
         9f:d0:40:82:83:e6:39:84:cc:a8:5f:ac:7e:a1:3e:5c:fc:d7:
         7c:f0:5b:ac:c6:65:5f:05:89:dc:bf:00:24:cb:b2:64:60:79:
         17:0a:74:6e:fd:51:79:f7:05:b6:29:02:f1:58:d9:5e:54:89:
         58:e7:09:90:46:97:c1:0a:13:65:e7:3c:c2:73:1b:2e:ee:e2:
         6c:3e:df:8a:c2:b9:f0:53:03:93:2b:d1:da:7e:f2:f5:25:59:
         97:b8:70:9c:d6:09:8f:8c:7d:42:24:63:ce:0a:91:3e:40:1d:
         e4:12:9b:82:bd:d8:63:13:76:3e:3b:5a:5c:e0:7e:26:bb:e9:
         38:a6:6c:97:31:cd:c7:94:64:42:e1:a0:76:22:55:9b:10:b5:
         9c:62:36:84:3a:fc:77:db:04:a2:83:71:c3:02:73:83:a0:07:
         97:ab:40:bc:6b:70:15:61:fb:99:db:f6:c2:38:ab:90:23:c3:
         8c:43:75:1a:8f:42:3f:5a:ef:0e:67:5e:54:38:66:bc:f9:44:
         68:23:e9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 15:33:18 2026 by rpki-client