Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e3235342e302f32342d3234203d3e203238353731.roa
File:                     3134332e3130372e3235342e302f32342d3234203d3e203238353731.roa (raw, json)
Hash identifier:          GWac0kFb8oHV736MasOlYriEEWaYh8UZZqvHjeGgOrc=
Subject key identifier:   48:82:22:9B:41:CD:FC:DB:94:29:D8:24:25:29:E6:33:AE:65:02:B3
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       12943901B123C018DA78A0810B50D3EFBBD65F3D
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e3235342e302f32342d3234203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:45 +0000
ROA not before:           Fri 15 May 2026 20:42:45 +0000
ROA not after:            Fri 14 May 2027 20:47:45 +0000
asID:                     28571
IP address blocks:        143.107.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:94:39:01:b1:23:c0:18:da:78:a0:81:0b:50:d3:ef:bb:d6:5f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:45 2026 GMT
            Not After : May 14 20:47:45 2027 GMT
        Subject: CN=4882229B41CDFCDB9429D8242529E633AE6502B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3e:bd:53:f5:f0:84:47:8a:df:74:89:66:4c:
                    c2:bb:dc:05:4b:39:d2:03:bf:a3:d7:f6:a2:13:5c:
                    58:f4:98:1a:39:7c:6c:21:f0:85:76:a2:19:77:7e:
                    88:e6:0c:8e:f0:c4:8b:97:bc:b6:9d:a6:55:83:b5:
                    d5:5d:f5:66:80:54:7a:ac:a6:18:62:6c:4d:62:ad:
                    cf:6c:e8:69:11:8d:02:4f:ef:1a:20:c6:e0:5c:00:
                    c2:71:6b:dc:31:4d:ea:70:0f:2a:44:2f:ca:df:36:
                    56:18:60:8c:fd:27:ec:de:a2:43:99:22:93:1f:25:
                    44:61:a0:de:3d:cc:b5:52:28:06:80:27:b6:ef:2f:
                    03:c6:e4:9c:28:7a:15:91:5d:59:39:3e:8c:98:76:
                    ef:ed:19:5b:31:82:03:d1:8c:42:86:7a:33:63:60:
                    60:6c:8a:7f:06:00:57:a2:48:d0:d4:d1:52:f7:e6:
                    38:28:50:1a:77:8f:af:40:a0:8e:29:9f:2b:79:17:
                    9b:99:37:c3:dd:cf:0c:78:0b:18:3f:97:d9:ef:c0:
                    c9:51:57:9a:89:6c:cd:d8:a4:04:9c:42:60:29:ac:
                    1a:0d:d5:fa:dd:54:4a:a5:ce:8f:f9:3e:6c:fe:62:
                    44:fc:bc:f3:4e:6a:94:88:5e:2a:26:b5:c3:e1:b7:
                    93:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:82:22:9B:41:CD:FC:DB:94:29:D8:24:25:29:E6:33:AE:65:02:B3
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e3235342e302f32342d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.107.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:cd:69:ed:15:ec:f1:0f:24:71:4a:46:93:c0:64:e9:61:31:
         d4:7a:79:62:08:3d:95:df:cc:0f:90:55:9f:39:b8:1c:c4:3f:
         ea:93:b6:63:f5:08:7a:a3:90:5e:b4:5d:6e:46:21:92:48:97:
         be:07:20:f0:8c:1c:d2:ac:e8:1a:1a:49:c8:9d:1f:a6:b6:3b:
         8b:7b:68:cb:18:fe:08:58:56:3a:05:01:f5:34:20:3a:fd:37:
         3e:90:ac:b7:7b:ab:6b:c5:2c:e7:d2:91:54:d9:4d:d8:81:a9:
         c5:a1:f9:54:0d:a2:ba:90:5d:d9:de:9e:a3:41:90:9c:96:e0:
         b7:6b:9b:3f:62:2c:b4:51:c8:69:fa:7b:3f:8b:ac:3c:1e:69:
         7f:99:e3:7e:18:7b:ac:cc:1d:da:0d:db:12:6f:56:22:b7:83:
         39:d2:d2:f7:73:ef:23:09:fc:81:3b:4f:91:8b:48:a8:b6:9d:
         1b:8e:8c:72:56:a2:21:1d:bb:4f:2d:fc:4f:10:61:10:8a:43:
         7f:a7:42:79:59:7d:e5:5e:1a:5d:32:ab:f4:8c:fd:b4:18:95:
         c0:aa:79:ed:ab:c7:3e:0a:39:6d:c6:b5:57:be:ca:e6:f2:be:
         79:dc:23:83:b5:ca:b6:59:e8:d0:16:b0:9e:ad:f9:76:5b:a6:
         da:27:57:7b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEpQ5AbEjwBjaeKCBC1DT77vWXz0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBRkQ5RDhBNzlBRUMyNzdFQUJBNzA3NEQ3QkIyQjk5
REVGOUE0NDAeFw0yNjA1MTUyMDQyNDVaFw0yNzA1MTQyMDQ3NDVaMDMxMTAvBgNV
BAMTKDQ4ODIyMjlCNDFDREZDREI5NDI5RDgyNDI1MjlFNjMzQUU2NTAyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPr1T9fCER4rfdIlmTMK73AVL
OdIDv6PX9qITXFj0mBo5fGwh8IV2ohl3fojmDI7wxIuXvLadplWDtdVd9WaAVHqs
phhibE1irc9s6GkRjQJP7xogxuBcAMJxa9wxTepwDypEL8rfNlYYYIz9J+zeokOZ
IpMfJURhoN49zLVSKAaAJ7bvLwPG5JwoehWRXVk5PoyYdu/tGVsxggPRjEKGejNj
YGBsin8GAFeiSNDU0VL35jgoUBp3j69AoI4pnyt5F5uZN8Pdzwx4Cxg/l9nvwMlR
V5qJbM3YpAScQmAprBoN1frdVEqlzo/5Pmz+YkT8vPNOapSIXiomtcPht5PlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSIIim0HN/NuUKdgkJSnmM65lArMwHwYDVR0j
BBgwFoAULK/Z2Kea7Cd+q6cHTXuyuZ3vmkQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmNkZTk2WWdYUE5nNVVuYTdtdWZWVUg0cWtqb3FzdHZHaG94UnYzR1Ni
Z3ovMC8yQ0FGRDlEOEE3OUFFQzI3N0VBQkE3MDc0RDdCQjJCOTlERUY5QTQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJDQUZEOUQ4QTc5QUVDMjc3
RUFCQTcwNzREN0JCMkI5OURFRjlBNDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZjZGU5NllnWFBOZzVVbmE3bXVmVlVINHFram9xc3R2R2hveFJ2M0dTYmd6LzAv
MzEzNDMzMmUzMTMwMzcyZTMyMzUzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACPa/4wDQYJKoZIhvcNAQELBQADggEBAMrNae0V
7PEPJHFKRpPAZOlhMdR6eWIIPZXfzA+QVZ85uBzEP+qTtmP1CHqjkF60XW5GIZJI
l74HIPCMHNKs6BoaScidH6a2O4t7aMsY/ghYVjoFAfU0IDr9Nz6QrLd7q2vFLOfS
kVTZTdiBqcWh+VQNorqQXdnenqNBkJyW4Ldrmz9iLLRRyGn6ez+LrDweaX+Z434Y
e6zMHdoN2xJvViK3gznS0vdz7yMJ/IE7T5GLSKi2nRuOjHJWoiEdu08t/E8QYRCK
Q3+nQnlZfeVeGl0yq/SM/bQYlcCqee2rxz4KOW3GtVe+yubyvnncI4O1yrZZ6NAW
sJ6t+XZbptonV3s=
-----END CERTIFICATE-----
Generated at Sun May 24 14:43:13 2026 by rpki-client