Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3134332e302e38342e302f32322d3234203d3e20323633393938.roa
File:                     3134332e302e38342e302f32322d3234203d3e20323633393938.roa (raw, json)
Hash identifier:          zkPnK4tOtted6GS+Z8ZexaNwbN3S8oewSRQurlcoYCw=
Subject key identifier:   6F:53:16:82:01:52:EA:BE:A3:F8:0A:2C:57:E0:9D:03:E6:0D:42:3D
Certificate issuer:       /CN=060144782D91D2CA471796AA8E28FE3D784C65D9
Certificate serial:       628AA0010D41A2F9E8A22BA81549B381B6C645F4
Authority key identifier: 06:01:44:78:2D:91:D2:CA:47:17:96:AA:8E:28:FE:3D:78:4C:65:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/060144782D91D2CA471796AA8E28FE3D784C65D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3134332e302e38342e302f32322d3234203d3e20323633393938.roa
Signing time:             Tue 18 Aug 2026 03:08:35 +0000
ROA not before:           Tue 18 Aug 2026 03:03:35 +0000
ROA not after:            Tue 17 Aug 2027 03:08:35 +0000
asID:                     263998
IP address blocks:        143.0.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/060144782D91D2CA471796AA8E28FE3D784C65D9.crl
                          rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/060144782D91D2CA471796AA8E28FE3D784C65D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/060144782D91D2CA471796AA8E28FE3D784C65D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 20:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:8a:a0:01:0d:41:a2:f9:e8:a2:2b:a8:15:49:b3:81:b6:c6:45:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=060144782D91D2CA471796AA8E28FE3D784C65D9
        Validity
            Not Before: Aug 18 03:03:35 2026 GMT
            Not After : Aug 17 03:08:35 2027 GMT
        Subject: CN=6F5316820152EABEA3F80A2C57E09D03E60D423D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:39:7d:7b:0e:57:a9:1d:73:c1:0e:e5:88:33:
                    0b:18:70:a5:a1:7b:d1:3a:32:e2:64:93:a0:bf:2e:
                    bd:85:6d:ea:df:52:8d:e8:69:bf:bf:cb:2e:ac:1f:
                    b8:59:ba:21:d9:0b:27:1f:9b:da:62:57:8d:35:b0:
                    9f:44:bd:2c:63:6e:c2:33:18:b5:3e:25:5e:56:67:
                    15:42:4a:cf:de:e4:7c:8e:48:0d:5a:b2:ba:4a:b2:
                    ff:40:7f:7b:31:fe:8b:6f:6f:38:06:80:a0:eb:c5:
                    d2:27:68:e5:a9:80:ec:68:d3:19:2e:d7:77:1f:f1:
                    71:05:c6:44:b1:b8:e9:4e:f7:4b:09:00:e0:47:37:
                    e7:e1:4c:c3:f6:b0:ae:f9:0b:69:14:f7:0e:6a:39:
                    58:c5:ff:47:82:96:01:fe:a3:25:a1:95:33:f8:7e:
                    89:4a:dd:8c:c3:08:65:b7:4f:49:ba:6a:8a:b6:94:
                    4f:50:8f:64:aa:fc:ae:d4:48:76:e7:3c:71:d2:5b:
                    f5:d8:d8:4a:3e:66:a0:df:86:fe:90:e1:27:2e:30:
                    dd:be:61:20:8e:34:74:8d:07:4a:83:2e:03:00:62:
                    fe:9f:78:69:bf:43:46:c3:c4:8b:13:3c:78:25:f4:
                    79:4e:59:fe:87:df:e7:ec:c9:2f:27:89:ee:65:c9:
                    71:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:53:16:82:01:52:EA:BE:A3:F8:0A:2C:57:E0:9D:03:E6:0D:42:3D
            X509v3 Authority Key Identifier:
                keyid:06:01:44:78:2D:91:D2:CA:47:17:96:AA:8E:28:FE:3D:78:4C:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/060144782D91D2CA471796AA8E28FE3D784C65D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/060144782D91D2CA471796AA8E28FE3D784C65D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/3134332e302e38342e302f32322d3234203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:54:72:de:9c:82:41:e4:b4:43:38:60:2e:92:29:9f:7f:27:
         07:c3:3e:10:2d:a5:5f:dc:25:1e:ea:e9:64:d4:82:1b:a9:41:
         17:54:82:07:7a:be:2a:6c:e7:ad:b1:cb:1f:87:e4:b7:aa:d9:
         aa:1f:ec:26:ad:7a:55:5c:c3:9d:33:4a:f2:74:4c:95:2e:fd:
         17:46:e9:23:53:3a:97:4c:34:0e:99:92:57:23:c5:aa:91:05:
         24:e8:b8:bf:a3:4d:90:53:c3:a3:5e:a4:da:ce:8d:23:48:0b:
         9a:6f:98:ac:0d:53:22:36:1f:3a:ce:67:de:33:5c:76:23:a5:
         a5:8e:76:34:29:72:24:f0:85:61:c3:c1:72:e7:53:5f:9d:63:
         39:80:28:02:50:4a:5a:28:c8:a1:d6:fb:23:ba:8f:d1:06:16:
         66:ed:26:39:78:62:1f:46:d7:99:c0:87:46:1d:ab:89:80:0a:
         55:71:22:d7:4a:3f:33:cb:b8:56:9e:ed:1b:de:f7:d4:49:bc:
         2b:ce:77:5d:aa:0a:29:40:27:02:5b:65:c2:b2:2f:ad:66:cd:
         e0:df:b2:f0:af:d2:9c:da:21:d1:09:06:15:06:87:54:60:30:
         f0:1a:ed:dc:7e:a5:74:34:c7:bb:39:01:33:f6:ee:d3:a7:0c:
         24:7c:11:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 02:36:20 2026 by rpki-client