Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32322d3234203d3e20323632353530.roa
File:                     3134332e302e34302e302f32322d3234203d3e20323632353530.roa (raw, json)
Hash identifier:          DLHFVXZxbG/FoonZGXu9PUK0PIf8uygSe3N5xDMhF8k=
Subject key identifier:   8D:9B:98:AF:AD:9B:85:2F:AA:63:E5:81:05:BE:4C:E4:E4:6C:25:8A
Certificate issuer:       /CN=4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB
Certificate serial:       604F076C91B9AEDEF0375B4457D3CC036B0F4A19
Authority key identifier: 4D:6C:E3:6D:B2:E2:A6:72:25:BE:60:62:A8:96:CD:4F:FF:E3:DC:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32322d3234203d3e20323632353530.roa
Signing time:             Sat 16 May 2026 14:13:17 +0000
ROA not before:           Sat 16 May 2026 14:08:17 +0000
ROA not after:            Sat 15 May 2027 14:13:17 +0000
asID:                     262550
IP address blocks:        143.0.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.crl
                          rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 10:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4f:07:6c:91:b9:ae:de:f0:37:5b:44:57:d3:cc:03:6b:0f:4a:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB
        Validity
            Not Before: May 16 14:08:17 2026 GMT
            Not After : May 15 14:13:17 2027 GMT
        Subject: CN=8D9B98AFAD9B852FAA63E58105BE4CE4E46C258A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a9:35:d8:c8:03:d2:ee:8d:6d:a5:0f:86:5b:
                    98:1b:2c:b3:2d:d5:f8:71:9d:49:27:d9:0b:f9:0d:
                    08:64:a3:00:df:a1:a6:ae:33:81:6c:16:b8:af:bf:
                    a9:88:74:cf:db:7e:ba:48:27:40:1c:5e:0f:79:b5:
                    2c:76:b4:8b:5b:85:7b:d6:71:bd:2e:09:d4:59:cc:
                    f4:22:18:2b:f6:fe:5b:85:d9:a7:1a:45:8b:55:ac:
                    a9:f5:4b:1e:bd:54:67:f8:87:65:e3:88:2d:3e:3d:
                    c0:bc:9a:89:fd:e4:09:40:e0:9a:6d:6a:84:0a:1c:
                    f7:65:e2:c4:e9:48:15:fa:2e:8e:6e:b2:38:3f:f1:
                    ba:00:f8:12:b4:5d:24:c3:b3:01:43:fe:bd:69:32:
                    f1:02:da:d4:35:2e:6a:1f:21:5f:4e:6a:e4:ec:b8:
                    5e:70:6a:bc:32:45:a4:26:01:71:f0:3e:53:d5:01:
                    9b:56:91:3a:bd:2e:99:64:19:b0:1f:f1:f2:0c:af:
                    dc:5a:1e:a6:d2:d9:71:c5:4e:ee:0e:ae:15:e0:89:
                    3f:68:09:cb:17:19:23:cb:e9:de:08:ed:62:c8:63:
                    9e:b7:34:c6:26:ca:79:46:e4:07:d4:f7:fa:0b:ec:
                    2c:a9:2a:59:57:8f:12:a5:98:97:c1:96:22:b8:84:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9B:98:AF:AD:9B:85:2F:AA:63:E5:81:05:BE:4C:E4:E4:6C:25:8A
            X509v3 Authority Key Identifier:
                keyid:4D:6C:E3:6D:B2:E2:A6:72:25:BE:60:62:A8:96:CD:4F:FF:E3:DC:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6CE36DB2E2A67225BE6062A896CD4FFFE3DCDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/3134332e302e34302e302f32322d3234203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:aa:f6:e2:0a:fe:95:f2:1f:40:95:fe:b4:16:ef:4b:dd:
         45:bf:c0:e0:c9:70:d0:18:11:06:8f:3b:f3:c5:b2:11:6b:41:
         61:2b:cc:6c:8b:d2:e2:bd:36:53:a0:16:33:86:69:a3:a3:11:
         70:0b:6d:ef:47:42:26:62:79:6a:ce:59:6d:c4:d7:a9:53:ba:
         f3:71:9a:81:34:65:22:58:a8:9d:5d:a4:bf:86:dd:e1:b4:f2:
         1b:ec:51:0e:bb:7c:0c:07:bb:d8:1f:bd:b9:78:e6:cc:83:15:
         28:2a:e2:05:bd:79:9f:fe:98:47:ce:97:3c:ef:2e:fe:69:ff:
         c1:57:bc:58:ea:ff:c8:22:ef:02:f6:b8:a5:0e:31:95:c7:6b:
         12:ac:5e:6e:be:86:36:9a:f4:16:61:69:a0:56:2f:3d:50:4f:
         12:55:84:51:e2:ea:bd:a9:0f:49:fd:58:72:c6:86:27:b2:18:
         32:93:5f:b8:43:1e:75:71:00:04:8f:6f:69:1f:99:69:f4:05:
         c1:93:61:ab:7d:5c:75:99:76:96:22:0b:e7:cb:f2:d3:cf:36:
         bd:82:0f:16:33:4f:63:dd:e9:11:f7:06:f1:04:7b:99:16:df:
         dc:0f:04:12:2b:b1:26:ba:5b:01:3b:55:3d:94:4a:04:68:c2:
         9c:72:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 19:20:38 2026 by rpki-client