Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e38382e302f32342d3234203d3e203238353731.roa
File:                     3134332e3130372e38382e302f32342d3234203d3e203238353731.roa (raw, json)
Hash identifier:          fPHHI2usVj0DEpIQ6HM+NcUNZlmiur81bSucvwAB7O8=
Subject key identifier:   D2:6A:5B:E4:C5:C3:9B:9F:B6:42:15:D4:06:49:4A:30:02:26:E9:14
Certificate issuer:       /CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
Certificate serial:       5CD4D0D7515A870DFE7D7CA8E504830053C607CE
Authority key identifier: 2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e38382e302f32342d3234203d3e203238353731.roa
Signing time:             Fri 15 May 2026 20:47:49 +0000
ROA not before:           Fri 15 May 2026 20:42:49 +0000
ROA not after:            Fri 14 May 2027 20:47:49 +0000
asID:                     28571
IP address blocks:        143.107.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl
                          rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 12:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d4:d0:d7:51:5a:87:0d:fe:7d:7c:a8:e5:04:83:00:53:c6:07:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44
        Validity
            Not Before: May 15 20:42:49 2026 GMT
            Not After : May 14 20:47:49 2027 GMT
        Subject: CN=D26A5BE4C5C39B9FB64215D406494A300226E914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ca:6e:71:e1:ce:37:13:27:3e:c1:49:2b:51:
                    c6:9b:90:5d:21:f0:03:93:f3:a7:af:fe:1b:b3:e0:
                    57:e7:d9:8d:41:d3:ce:ae:f7:0e:d1:f0:5e:df:1e:
                    e6:59:ac:0c:cc:fb:93:13:fb:1e:0a:d9:5a:b2:75:
                    1a:0a:f9:da:a3:b4:6a:26:57:b2:fd:4f:d1:41:ec:
                    49:3b:71:0a:21:e7:ac:3e:c7:b5:66:00:5a:2b:8b:
                    d0:0b:00:92:ec:8b:78:de:82:58:52:cd:5f:6f:0f:
                    9b:58:d5:0e:42:11:c8:2a:1b:f0:55:b3:87:43:0e:
                    e3:16:41:f8:3d:40:5d:9e:03:ec:a0:21:f8:39:b2:
                    bf:32:61:df:89:96:09:39:6e:ec:41:62:77:f5:81:
                    e6:c3:9a:fb:6f:39:fb:86:37:a8:98:72:1b:86:9c:
                    44:0f:01:92:e7:61:e3:80:81:fd:fa:32:d4:ae:da:
                    7d:41:4d:d0:d9:6d:5a:ef:b3:e4:60:06:0f:e6:00:
                    4e:47:7d:ae:97:0f:30:a6:e2:85:50:ed:ac:ff:76:
                    ac:89:66:19:b4:94:4b:6c:14:7d:f0:16:1b:de:d1:
                    bb:59:a9:d5:5d:0a:0c:e8:ef:ce:3a:49:46:d5:ba:
                    ed:83:86:b0:01:7e:16:3d:9b:1c:36:fc:2b:ab:55:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6A:5B:E4:C5:C3:9B:9F:B6:42:15:D4:06:49:4A:30:02:26:E9:14
            X509v3 Authority Key Identifier:
                keyid:2C:AF:D9:D8:A7:9A:EC:27:7E:AB:A7:07:4D:7B:B2:B9:9D:EF:9A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CAFD9D8A79AEC277EABA7074D7BB2B99DEF9A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cde96YgXPNg5Una7mufVUH4qkjoqstvGhoxRv3GSbgz/0/3134332e3130372e38382e302f32342d3234203d3e203238353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.107.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:06:28:2c:46:37:43:7f:0e:0b:11:c1:41:da:ff:4a:9f:
         b3:0d:d3:ca:40:52:9b:43:89:b0:f4:45:38:a2:e8:a3:e1:ba:
         6d:02:d6:b5:38:ce:13:bf:35:e6:97:e9:21:e8:59:c9:80:0b:
         46:ca:25:09:bb:b6:dc:64:51:80:ff:76:55:f4:c0:c2:6a:b6:
         66:49:81:a3:21:85:26:93:19:9b:80:61:af:97:19:90:e3:9b:
         9b:b3:23:0e:47:74:ac:20:53:5e:7e:04:b8:a1:d8:4e:b0:1a:
         da:d2:fe:6b:d3:64:5b:2e:5a:db:fc:c8:3d:86:f4:0f:ed:86:
         93:cb:cc:79:cc:92:5b:81:6b:df:5c:98:e6:72:f6:e7:a7:bd:
         f3:ac:c7:f0:5e:ec:f4:69:b0:f0:30:2a:38:78:51:f5:bc:46:
         b0:ed:ec:c8:5f:44:b7:c0:46:70:9a:ee:7d:a8:b2:7b:82:c7:
         55:97:00:35:f4:88:ff:51:6e:3b:aa:8a:72:4f:34:79:ff:0e:
         72:18:4a:70:84:27:31:83:4c:77:09:03:6b:42:79:bd:bf:b3:
         be:78:bc:e6:8e:e0:c2:76:a1:43:2b:be:9e:64:c7:51:88:c2:
         d3:7a:ac:b6:4d:75:40:ec:2a:76:b3:f5:47:a1:41:e2:76:f1:
         45:1a:0e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:43:25 2026 by rpki-client