Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/3134332e3230382e3234342e302f32322d3332203d3e20323635313337.roa
File:                     3134332e3230382e3234342e302f32322d3332203d3e20323635313337.roa (raw, json)
Hash identifier:          r/eDd1EkRcrAEH1ID9bCnDbhQlRjH0RcIIu+Ma2i0Eo=
Subject key identifier:   A0:56:50:0A:43:FC:3C:AE:F4:E3:9C:BD:E3:96:DF:97:80:9A:92:D3
Certificate issuer:       /CN=296427C6A97F26F711858827E613168D5D5837B7
Certificate serial:       655635F94A909E8FA4C65E3ECF9975EC4FBCEBFD
Authority key identifier: 29:64:27:C6:A9:7F:26:F7:11:85:88:27:E6:13:16:8D:5D:58:37:B7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296427C6A97F26F711858827E613168D5D5837B7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/3134332e3230382e3234342e302f32322d3332203d3e20323635313337.roa
Signing time:             Fri 27 Mar 2026 17:59:35 +0000
ROA not before:           Fri 27 Mar 2026 17:54:35 +0000
ROA not after:            Fri 26 Mar 2027 17:59:35 +0000
asID:                     265137
IP address blocks:        143.208.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/296427C6A97F26F711858827E613168D5D5837B7.crl
                          rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/296427C6A97F26F711858827E613168D5D5837B7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296427C6A97F26F711858827E613168D5D5837B7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Mar 2026 14:35:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:56:35:f9:4a:90:9e:8f:a4:c6:5e:3e:cf:99:75:ec:4f:bc:eb:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296427C6A97F26F711858827E613168D5D5837B7
        Validity
            Not Before: Mar 27 17:54:35 2026 GMT
            Not After : Mar 26 17:59:35 2027 GMT
        Subject: CN=A056500A43FC3CAEF4E39CBDE396DF97809A92D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:31:c0:c1:ff:ce:7b:73:b1:6e:4b:4c:77:a4:
                    2d:28:67:d9:75:24:5b:31:07:5a:89:b0:c1:80:17:
                    df:31:ae:01:08:3f:45:75:cd:4f:cc:f4:ba:bb:d5:
                    1c:c3:1b:c2:f1:30:2f:11:85:20:10:8c:7e:4a:33:
                    51:44:ef:bd:dc:f8:80:07:66:c8:7e:32:c4:96:25:
                    ce:89:63:b4:4c:cd:3e:74:b0:f8:9c:87:ab:3b:0c:
                    e9:25:e3:f6:be:22:c7:78:5c:72:e1:79:48:30:ca:
                    19:ff:dd:6f:29:ce:3f:bf:c4:7d:ba:fa:a7:c7:a2:
                    ef:8a:e1:14:0a:8b:93:19:ca:7a:bf:10:f6:b9:e3:
                    13:8a:e5:e3:af:92:9a:fe:c8:83:4c:ee:17:a0:73:
                    5c:0a:d9:c3:e3:f4:2e:b5:8d:27:d9:be:20:b1:e0:
                    bd:e5:97:6a:cf:cd:35:a6:6c:f4:5f:47:4d:17:3e:
                    ed:86:d3:3e:06:2e:cc:5b:f2:02:93:6d:36:fd:67:
                    cb:59:a3:35:4c:10:a4:a1:e0:21:bb:5a:98:cc:bb:
                    61:04:99:5a:08:21:1b:0d:cb:93:5c:d2:53:0e:ce:
                    ac:70:84:39:6e:e0:91:c1:07:0b:ea:4a:65:7a:31:
                    73:d6:ec:a7:5f:0e:a4:31:8d:29:9f:fc:ae:31:24:
                    41:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:56:50:0A:43:FC:3C:AE:F4:E3:9C:BD:E3:96:DF:97:80:9A:92:D3
            X509v3 Authority Key Identifier:
                keyid:29:64:27:C6:A9:7F:26:F7:11:85:88:27:E6:13:16:8D:5D:58:37:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/296427C6A97F26F711858827E613168D5D5837B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296427C6A97F26F711858827E613168D5D5837B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7iBffgxDBxYqduVBqXVJPRtigiD1kn5Rwy6DeeEKxkL/1/3134332e3230382e3234342e302f32322d3332203d3e20323635313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:7a:55:a8:66:8b:be:39:a9:b5:2c:0a:52:97:8d:46:b7:cc:
         b2:55:8a:66:4d:4b:ed:bf:c4:da:64:d9:e8:b5:59:5b:75:ce:
         01:4c:96:c7:39:90:a7:4d:70:3f:d0:d2:fc:f8:dc:fc:6b:c7:
         30:13:c4:ee:a0:08:d5:6e:7f:50:58:50:e4:be:0e:00:ee:00:
         7c:11:34:0b:e9:c7:6c:12:cf:34:00:cf:69:c1:0d:32:44:1e:
         b4:9a:de:88:eb:c0:82:7e:19:24:08:1f:a1:11:c4:a9:5f:6b:
         d2:9e:8e:cc:9e:87:44:20:21:84:0c:9a:42:50:08:65:bc:1c:
         21:51:27:14:96:c4:93:5d:c9:02:84:2e:c7:f7:30:12:f1:39:
         15:d4:7d:b8:86:9c:06:f1:8d:da:f7:83:d6:85:fe:7b:68:86:
         74:35:04:8d:77:b1:1c:17:fb:c5:0b:38:00:7a:62:ed:bb:92:
         ce:4e:2b:b1:b9:15:b0:7f:df:f0:d9:09:72:44:41:e6:d0:13:
         af:c8:dd:6f:2c:97:c7:63:cc:d0:d7:74:1e:fd:a6:41:45:3d:
         38:7a:08:6d:2e:18:06:11:da:01:1e:79:e9:12:fa:ea:8f:15:
         f2:3b:17:e9:3d:e1:f0:f0:8b:99:08:1b:32:52:fe:8b:b8:35:
         9c:e6:8b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 20:08:12 2026 by rpki-client