Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa (raw, json)
Hash identifier:          tmofePRbzXwoZKJzteDubtClsTYNEPg8Mflca4cwQmY=
Subject key identifier:   4F:D6:FE:3D:0A:40:2C:C4:22:D7:2F:35:EE:6D:8D:AC:0A:79:C5:52
Certificate issuer:       /CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
Certificate serial:       3332340776F322BCB701ECF996D55FBF140BAD46
Authority key identifier: F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa
Signing time:             Sat 24 Oct 2026 00:31:13 +0000
ROA not before:           Sat 24 Oct 2026 00:26:13 +0000
ROA not after:            Sat 23 Oct 2027 00:31:13 +0000
asID:                     61776
IP address blocks:        143.208.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Nov 2026 00:34:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:32:34:07:76:f3:22:bc:b7:01:ec:f9:96:d5:5f:bf:14:0b:ad:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF
        Validity
            Not Before: Oct 24 00:26:13 2026 GMT
            Not After : Oct 23 00:31:13 2027 GMT
        Subject: CN=4FD6FE3D0A402CC422D72F35EE6D8DAC0A79C552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:09:0d:f9:7c:e7:71:e8:0d:d6:8e:bf:dd:
                    3a:15:03:65:78:39:f6:a9:07:04:ce:ff:25:ad:bb:
                    3a:6f:16:c0:21:c6:f6:17:3f:21:c6:41:46:fb:c5:
                    c8:f8:8c:45:ce:d7:b9:17:47:83:56:88:ea:7f:ed:
                    3a:73:7c:cc:8d:46:e3:54:95:c2:a6:8b:d7:fa:37:
                    7c:bc:89:6f:1a:a6:57:61:d8:ab:86:4d:00:96:8b:
                    e7:62:8f:7b:9e:d8:a4:72:c8:92:f3:b0:19:c5:91:
                    3f:c8:54:34:a3:13:c6:f9:d4:3e:55:ef:3f:88:5d:
                    45:1f:f1:94:69:e9:d7:77:f7:34:ac:e3:7c:d0:4b:
                    9c:82:4f:f9:0a:30:a2:11:4d:98:85:6e:65:d0:f4:
                    62:32:25:b1:d1:e8:56:ea:5b:06:cd:af:cd:3e:c8:
                    ca:e9:df:af:0c:4a:b0:eb:ec:c9:4f:9f:8b:f8:db:
                    e9:84:86:64:9b:7a:1a:e2:19:b9:e5:ef:32:1d:66:
                    cb:f6:b0:fa:93:de:dd:8a:50:5a:b7:68:88:23:47:
                    30:bc:a9:95:5d:25:87:18:bf:27:18:61:78:ba:7d:
                    ed:66:f8:1b:e2:04:c2:4c:e7:35:f0:ac:e8:33:63:
                    fb:d2:c0:6a:bc:7f:0c:05:62:22:4f:5a:87:f9:ed:
                    87:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D6:FE:3D:0A:40:2C:C4:22:D7:2F:35:EE:6D:8D:AC:0A:79:C5:52
            X509v3 Authority Key Identifier:
                keyid:F1:13:E4:BF:5F:24:27:FB:9B:04:FC:6A:FA:D7:3C:3C:C3:CF:99:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F113E4BF5F2427FB9B04FC6AFAD73C3CC3CF99FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:8e:4a:d7:b8:eb:3b:2d:83:07:aa:11:4c:ef:bc:b3:80:
         99:bd:aa:75:82:83:a2:7c:55:a9:96:e8:50:eb:81:26:55:8f:
         fb:ef:2a:63:a8:b0:a0:8a:17:8d:ac:df:43:66:02:dd:53:e3:
         ee:4e:dd:2d:df:9d:38:0e:c2:46:cf:3b:a9:0d:e3:10:70:23:
         f5:95:cc:51:43:67:45:dd:c9:db:cb:32:b8:31:95:ed:db:b7:
         3d:ae:c5:b4:c3:9a:26:ac:4b:f2:45:be:63:f9:22:c2:40:1c:
         85:35:cb:82:f3:03:f8:e7:69:57:8b:79:17:27:2c:2b:08:6d:
         3f:87:22:ad:56:56:53:6f:eb:ef:81:a3:72:14:c6:59:b1:3b:
         f2:0b:a8:7c:87:3a:d4:37:b3:3c:99:dd:61:42:6c:16:6e:a9:
         bd:d2:3d:6f:9b:5a:2f:57:a1:e1:d6:a6:d1:e8:dd:8c:3d:66:
         96:2a:6c:f4:17:68:93:2d:7b:8e:8d:ea:5c:55:66:5e:f0:42:
         32:98:02:1e:2f:93:fa:b5:ad:c2:c4:70:c6:ab:5e:4a:6b:f6:
         3d:ca:b3:08:17:ac:bd:fd:c6:e9:cb:46:10:84:ca:c0:1a:45:
         3c:39:f9:80:2a:26:b1:da:20:37:95:71:4e:f8:2f:4d:19:e4:
         98:74:b9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 18:41:27 2026 by rpki-client