Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e34342e302f32332d3233203d3e203238353731.roa
File:                     3134332e3130372e34342e302f32332d3233203d3e203238353731.roa (raw, json)
Hash identifier:          hMcavL9zfAo9kyBNpzw7H+oTKBBzWl62Cm9pgzpXH04=
Subject key identifier:   AD:9A:79:77:DC:C7:7A:FA:53:2F:58:3F:10:CA:CE:BC:BA:1C:71:15
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       1DA1445559565841F2CE18CBE41C3C55E562C9BE
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e34342e302f32332d3233203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:42 +0000
ROA not before:           Fri 15 May 2026 20:42:42 +0000
ROA not after:            Fri 14 May 2027 20:47:42 +0000
asID:                     28571
IP address blocks:        143.107.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a1:44:55:59:56:58:41:f2:ce:18:cb:e4:1c:3c:55:e5:62:c9:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:42 2026 GMT
            Not After : May 14 20:47:42 2027 GMT
        Subject: CN=AD9A7977DCC77AFA532F583F10CACEBCBA1C7115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ed:cf:dc:82:fa:8a:0d:00:dd:e2:3e:7e:18:
                    aa:aa:4f:75:09:4f:83:5d:89:89:d3:37:74:95:0e:
                    47:bc:d7:b5:e3:62:cb:5c:50:94:ac:3c:24:02:1f:
                    76:80:89:89:f7:df:53:6c:07:b0:dd:e2:32:8a:1d:
                    ce:c1:30:8e:c6:13:e0:59:42:c3:ae:7f:ed:c4:e7:
                    ff:f2:2b:d6:83:06:9a:86:d8:7e:4a:7b:50:22:c9:
                    5f:45:3b:b8:39:14:95:97:5f:65:5e:2d:7e:18:a4:
                    c4:5c:20:80:c3:3b:f1:ac:62:be:fc:70:b9:53:67:
                    b1:8f:c8:d0:6e:be:56:84:5a:9c:aa:1f:e8:41:22:
                    dd:8d:22:67:77:b5:c1:ec:31:0c:ff:32:a3:c9:95:
                    ea:e8:1a:22:0a:20:06:71:72:47:5f:18:e1:50:d3:
                    4a:ec:05:9c:7a:e5:76:48:0b:9b:97:d7:a9:c3:e3:
                    1e:92:4a:6a:ea:8f:08:52:1e:28:47:46:03:5d:6e:
                    49:68:e9:a9:60:c5:91:6a:79:17:f3:b4:b4:83:0d:
                    57:ca:d7:e7:4e:93:dc:15:c7:83:f0:4f:8b:43:7c:
                    8d:51:66:1e:68:6a:97:ff:2e:55:83:77:db:ac:b2:
                    63:d2:9c:cf:82:68:3f:5a:0f:93:cf:a5:ef:de:2f:
                    42:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9A:79:77:DC:C7:7A:FA:53:2F:58:3F:10:CA:CE:BC:BA:1C:71:15
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e34342e302f32332d3233203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.107.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:2e:7e:ea:f1:ad:08:26:8b:c3:ef:71:d2:54:3c:43:e1:ae:
         5e:28:b8:19:07:4f:b9:33:71:1c:5d:2b:21:c0:95:fb:24:78:
         15:29:52:9b:0a:37:33:c7:b3:d6:f4:99:2d:ab:4a:ab:0c:2a:
         76:59:77:99:98:f4:53:25:80:05:38:b6:90:9a:a1:01:a7:c0:
         3a:98:81:76:48:4e:73:3c:49:ca:32:f3:07:92:c2:13:33:75:
         9e:7a:91:21:d8:7a:54:fe:c2:e6:85:58:3e:28:12:65:0b:34:
         e0:ee:c0:1d:3d:35:b4:8f:a6:ae:f2:ce:22:45:c9:a2:01:c2:
         4c:49:4c:fb:1c:bc:ba:dd:8d:c1:e9:c9:11:2d:fe:71:38:d1:
         b3:5b:64:f9:f4:c5:5c:0c:6a:e9:ca:ad:3b:dc:ba:6c:2d:c0:
         51:0a:5f:9e:13:77:e5:4a:2b:4d:e5:2c:2b:f0:2d:55:3d:b8:
         67:fd:73:ab:db:fd:a1:b5:11:be:b8:b5:fb:a8:fd:51:22:84:
         41:66:af:1a:75:9f:ab:6d:a6:08:cf:fd:8d:77:16:78:30:e1:
         9c:bf:7c:02:a7:11:19:02:7c:f0:84:3e:dc:fb:24:df:ee:83:
         ce:a3:f5:4b:f9:3f:26:dc:de:29:52:1b:9c:82:b6:20:4e:a7:
         f9:64:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:42:37 2026 by rpki-client