Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/3134332e3235352e3233312e302f32342d3234203d3e20323635313632.roa
File:                     3134332e3235352e3233312e302f32342d3234203d3e20323635313632.roa (raw, json)
Hash identifier:          rRAbej2ymwOuKL/vA2rthKGJGHq0DsavBf4qkfiOrHY=
Subject key identifier:   4F:72:4D:41:14:0C:F3:0B:55:EA:65:D4:E8:9B:91:81:DB:C4:89:57
Certificate issuer:       /CN=1C56253CEF2C7C6D01C4D0C06935463CFCD2140F
Certificate serial:       135FB5A0F6600040D90E249E3EE44F8B965AB902
Authority key identifier: 1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/3134332e3235352e3233312e302f32342d3234203d3e20323635313632.roa
Signing time:             Sat 27 Jun 2026 15:10:29 +0000
ROA not before:           Sat 27 Jun 2026 15:05:29 +0000
ROA not after:            Sat 26 Jun 2027 15:10:29 +0000
asID:                     265162
IP address blocks:        143.255.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.crl
                          rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 08:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5f:b5:a0:f6:60:00:40:d9:0e:24:9e:3e:e4:4f:8b:96:5a:b9:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C56253CEF2C7C6D01C4D0C06935463CFCD2140F
        Validity
            Not Before: Jun 27 15:05:29 2026 GMT
            Not After : Jun 26 15:10:29 2027 GMT
        Subject: CN=4F724D41140CF30B55EA65D4E89B9181DBC48957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c4:39:50:3f:38:f5:63:16:2f:fb:f4:d2:1b:
                    e4:45:aa:43:f6:35:03:a6:8d:c6:2a:85:61:b8:b2:
                    20:4b:c7:bd:47:16:e4:18:ec:15:81:42:f0:a4:cd:
                    9e:c6:e4:ba:7c:c2:49:75:4f:cb:93:13:f1:29:2d:
                    a1:b3:1f:e0:0e:c9:a6:00:ea:69:2a:68:05:77:76:
                    d9:d3:e1:06:54:d7:68:b3:4e:7a:47:87:eb:5c:44:
                    87:78:2e:a3:07:7e:25:6f:b5:f5:31:55:4a:b1:81:
                    5f:5a:9c:2d:5d:35:35:20:bc:e9:67:c4:8b:6b:ce:
                    72:01:9f:9a:c5:70:f7:02:99:8c:44:35:97:cb:7a:
                    de:20:cd:3b:15:7f:06:0a:e5:3a:e2:62:5f:a7:28:
                    7c:ef:84:e3:ce:14:74:0c:8f:79:92:66:e1:0c:d0:
                    d0:ed:f5:d9:2f:1a:9e:82:18:69:7f:22:13:52:c5:
                    37:e7:31:9c:b7:80:a8:6b:a3:b7:30:d5:ed:c3:3c:
                    2c:20:72:11:74:41:39:c8:a9:a8:2d:e4:3e:86:18:
                    3c:7b:fd:55:86:89:9f:42:b1:5e:96:22:b5:e5:84:
                    69:5e:ba:ac:b4:1e:f2:bc:8a:ec:13:9d:ab:e9:d4:
                    4a:c1:21:65:97:1a:ae:d5:1c:a9:2d:be:35:d6:56:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:72:4D:41:14:0C:F3:0B:55:EA:65:D4:E8:9B:91:81:DB:C4:89:57
            X509v3 Authority Key Identifier:
                keyid:1C:56:25:3C:EF:2C:7C:6D:01:C4:D0:C0:69:35:46:3C:FC:D2:14:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C56253CEF2C7C6D01C4D0C06935463CFCD2140F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VvJ4R92QD8jtcxUqPMifL15B6LQiZM4gU3t55TwKaWZ/0/3134332e3235352e3233312e302f32342d3234203d3e20323635313632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f4:83:02:5f:3c:c5:40:86:9e:26:d1:37:72:ac:70:0c:c1:
         39:68:22:55:fa:fe:e5:24:60:c3:22:c5:ac:76:2e:95:90:c3:
         21:e1:41:70:be:00:57:a1:75:83:ce:21:1e:83:ac:10:c8:64:
         8c:ce:d7:a9:d3:d6:0a:8d:75:eb:71:68:00:94:75:15:e2:e2:
         e6:2c:5e:c6:e7:97:53:05:f0:65:6d:e8:55:f8:cd:5f:c3:5c:
         54:7a:bc:b5:60:56:65:5e:1b:01:cb:31:ca:48:9e:e9:79:7d:
         1c:96:c4:66:19:53:f1:b3:75:ce:62:d4:06:13:c3:9c:18:1d:
         48:09:ce:3c:a1:e1:a8:50:82:90:16:6f:29:07:fc:60:29:16:
         80:56:10:66:6e:2a:5e:32:3f:df:04:d0:70:8b:77:09:90:1f:
         0f:b9:aa:6c:b5:88:46:c1:f6:11:2f:d0:53:8a:7c:ba:fd:91:
         f5:d7:73:5d:62:9a:23:cd:74:72:62:78:67:be:bc:92:84:6f:
         ad:fe:c7:7c:67:f0:d7:44:fc:05:9b:f0:96:7d:ee:5a:a1:c2:
         d9:54:8d:17:da:ec:32:e5:74:9e:7d:9c:3d:25:37:b6:99:3c:
         c0:7d:18:5b:57:8f:f3:bf:df:03:76:6b:ba:b8:31:05:04:e8:
         62:2a:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:07:38 2026 by rpki-client