Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3134332e3133372e3134322e302f32332d3233203d3e20323632353132.roa
File:                     3134332e3133372e3134322e302f32332d3233203d3e20323632353132.roa (raw, json)
Hash identifier:          x/BMuhK6OP/1eElpe5B79gH9KGxoRbYX44MJBFz+r5o=
Subject key identifier:   72:EC:8D:65:D3:3C:B2:08:99:A8:AC:A0:EA:92:5A:ED:ED:A5:10:1A
Certificate issuer:       /CN=5853BCEF67545FD76D14D45889A4517D1C2A0EEB
Certificate serial:       34695118665C6C41DC6334EF9BF9828FC440619C
Authority key identifier: 58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3134332e3133372e3134322e302f32332d3233203d3e20323632353132.roa
Signing time:             Thu 01 Oct 2026 13:20:56 +0000
ROA not before:           Thu 01 Oct 2026 13:15:56 +0000
ROA not after:            Thu 30 Sep 2027 13:20:56 +0000
asID:                     262512
IP address blocks:        143.137.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.crl
                          rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 01:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:69:51:18:66:5c:6c:41:dc:63:34:ef:9b:f9:82:8f:c4:40:61:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853BCEF67545FD76D14D45889A4517D1C2A0EEB
        Validity
            Not Before: Oct  1 13:15:56 2026 GMT
            Not After : Sep 30 13:20:56 2027 GMT
        Subject: CN=72EC8D65D33CB20899A8ACA0EA925AEDEDA5101A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d8:b7:20:7c:0d:27:b6:d4:c5:db:4c:8e:a8:
                    a7:b9:93:db:1f:50:09:fa:9c:5d:5c:57:1a:3a:c8:
                    1f:6f:fd:3d:68:2f:97:02:69:41:38:91:a2:18:97:
                    a2:19:21:be:88:cb:17:c2:00:5b:af:4d:87:95:d9:
                    35:18:a1:ef:e1:e7:24:12:a4:8c:fa:c4:e9:68:a7:
                    d1:4a:7d:5f:7b:a1:95:bf:e8:b1:f6:97:e8:7b:e5:
                    ad:ca:72:a0:fb:5e:9e:08:ac:8c:8d:33:53:c6:09:
                    9b:76:56:78:c8:40:38:6c:a1:64:ab:74:42:04:d3:
                    a8:81:f3:a2:98:63:72:a5:61:d4:e9:11:e8:c9:ff:
                    aa:d0:36:1c:ca:2c:3f:f1:a6:09:c9:da:2e:90:2c:
                    c1:bb:1d:2d:0d:7a:65:fc:90:5c:b5:f3:84:87:76:
                    2a:a2:ef:2c:e7:61:ea:5f:5b:c1:41:d5:41:f5:a3:
                    04:94:a4:86:c0:be:f6:5f:79:7f:1a:55:0d:7e:7f:
                    ea:c6:ed:76:16:d0:5c:ce:cd:e7:5d:b2:f1:2e:e8:
                    cd:e9:0b:7d:80:b4:a6:ec:14:7a:ed:ec:92:44:cf:
                    84:75:c4:7b:9b:7d:44:7a:37:24:25:ab:63:a9:ae:
                    b4:aa:d8:08:3b:42:72:8d:e4:6c:5f:34:29:ba:0b:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EC:8D:65:D3:3C:B2:08:99:A8:AC:A0:EA:92:5A:ED:ED:A5:10:1A
            X509v3 Authority Key Identifier:
                keyid:58:53:BC:EF:67:54:5F:D7:6D:14:D4:58:89:A4:51:7D:1C:2A:0E:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5853BCEF67545FD76D14D45889A4517D1C2A0EEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ArdZx9WpRzuv8UKDTHG4wMtXcs7SAC2HVYAL48d7Z2bd/0/3134332e3133372e3134322e302f32332d3233203d3e20323632353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:17:c4:81:34:98:dd:df:c6:bd:c2:4c:79:84:67:29:a3:ac:
         ba:d2:0c:bb:4d:b6:75:76:9b:30:4f:8f:16:8b:29:d9:51:02:
         f8:ae:c6:21:97:a4:90:fa:1c:59:68:73:33:3d:64:11:ee:f1:
         72:f3:a0:f5:f9:fc:c8:a3:cd:b8:80:15:ae:03:91:91:93:63:
         ac:ba:d6:3b:6d:1f:5e:86:92:06:72:c1:9f:e2:91:59:40:a6:
         66:74:f4:a2:ab:9d:50:71:ab:d5:7e:d0:a9:40:25:b8:ab:5f:
         be:bf:3c:ac:b0:0c:83:00:ca:ee:95:f8:55:12:6d:d0:8c:47:
         bc:11:3e:94:83:5b:cd:a2:dc:d8:4d:da:d7:f2:d8:22:9f:46:
         ab:a6:dd:87:70:56:19:71:f0:15:28:69:89:ec:80:92:ed:30:
         c4:03:ad:e0:78:82:90:90:b0:01:6f:97:39:70:a1:0c:62:f6:
         8c:2d:48:c0:26:fb:37:13:ab:78:a7:3f:99:d8:b4:7b:b9:ad:
         2d:e8:79:4e:4a:8e:cc:6c:05:60:87:19:cb:f0:67:6d:d5:fb:
         c7:99:89:ca:a3:b1:2a:00:a2:82:d7:60:5a:c6:45:1c:d8:de:
         54:8b:33:5b:1d:35:04:92:26:0b:e6:d1:44:f1:84:2c:ff:a1:
         d5:77:1b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:33:28 2026 by rpki-client