Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/3134332e3230322e3138302e302f32322d3232203d3e20323634303730.roa
File:                     3134332e3230322e3138302e302f32322d3232203d3e20323634303730.roa (raw, json)
Hash identifier:          1PftDafKqyo/vuF4jQ32R4mOyJUef4SunYJVk1J19h8=
Subject key identifier:   A3:2D:A7:F7:E6:BC:E1:82:A8:82:A2:8A:3D:44:02:CA:F5:27:FC:7B
Certificate issuer:       /CN=5E72277821EE1BF3B5BD02ED6F872129008C5D53
Certificate serial:       7B054CB8201B39CA710AFBA6925D119406948169
Authority key identifier: 5E:72:27:78:21:EE:1B:F3:B5:BD:02:ED:6F:87:21:29:00:8C:5D:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/3134332e3230322e3138302e302f32322d3232203d3e20323634303730.roa
Signing time:             Tue 08 Sep 2026 12:44:52 +0000
ROA not before:           Tue 08 Sep 2026 12:39:52 +0000
ROA not after:            Tue 07 Sep 2027 12:44:52 +0000
asID:                     264070
IP address blocks:        143.202.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.crl
                          rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 11:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:05:4c:b8:20:1b:39:ca:71:0a:fb:a6:92:5d:11:94:06:94:81:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E72277821EE1BF3B5BD02ED6F872129008C5D53
        Validity
            Not Before: Sep  8 12:39:52 2026 GMT
            Not After : Sep  7 12:44:52 2027 GMT
        Subject: CN=A32DA7F7E6BCE182A882A28A3D4402CAF527FC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a4:76:d1:3c:08:90:61:7f:a5:58:82:9f:e6:
                    39:4c:d0:f7:4f:5a:05:63:96:bc:3a:35:03:2e:7b:
                    73:f5:33:09:b8:cf:7e:9a:4c:49:c5:e1:16:37:3b:
                    6f:ff:c5:b1:26:fb:e4:f0:14:e2:1c:e7:d4:f2:26:
                    9c:78:32:8c:90:99:f9:e9:84:51:68:aa:2d:05:e4:
                    59:5b:b8:6d:b1:5e:d7:fd:70:4f:03:90:60:5f:7d:
                    7c:61:fd:d6:61:74:de:ea:9e:bd:d3:61:b2:ef:e2:
                    3e:48:c4:b7:e5:17:19:62:02:e0:0b:4b:b1:af:3b:
                    ad:5a:df:5b:a3:65:8f:e7:c4:6f:9c:3c:91:77:4d:
                    86:b1:2f:db:36:85:e0:38:4e:26:01:e2:06:81:2b:
                    3f:e3:15:40:81:bb:ae:02:79:8f:b5:23:f9:6a:d3:
                    dd:f3:33:39:57:12:ed:fc:26:3e:da:ad:f3:44:e8:
                    b7:fd:17:b1:f4:de:3a:a1:c8:06:0d:06:81:ec:8e:
                    81:d2:d6:07:96:af:28:e7:a3:6c:1a:00:e6:95:c9:
                    61:88:a5:8d:e2:10:6a:a8:50:6a:48:de:ed:52:82:
                    4a:66:c4:82:46:ae:13:42:5b:1c:86:c7:6f:98:1f:
                    b6:15:8e:e9:6d:f6:1c:70:b8:f3:04:6c:3d:1d:9d:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2D:A7:F7:E6:BC:E1:82:A8:82:A2:8A:3D:44:02:CA:F5:27:FC:7B
            X509v3 Authority Key Identifier:
                keyid:5E:72:27:78:21:EE:1B:F3:B5:BD:02:ED:6F:87:21:29:00:8C:5D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/3134332e3230322e3138302e302f32322d3232203d3e20323634303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:b3:16:01:82:c2:ef:bb:82:ca:f9:db:b2:21:4b:df:ec:cb:
         b1:33:85:d0:21:a9:cb:48:65:99:97:a9:cc:ed:e8:11:18:1a:
         d2:10:ef:4f:06:09:e7:7f:ca:7f:ef:31:4c:ca:b7:82:16:b4:
         33:a3:a2:b1:ec:d2:7c:00:7c:4c:be:bd:ec:af:a0:f3:83:c0:
         eb:0c:9b:ee:3a:28:cc:9a:77:63:9e:d5:78:f9:83:fb:b7:d9:
         36:d9:eb:46:32:9b:43:06:7f:c5:c8:c0:f3:3f:38:41:71:54:
         59:d4:b3:5b:8c:99:f7:a2:ad:84:71:20:24:b9:c9:5e:37:70:
         b8:0c:64:df:42:28:36:e9:c7:ee:2f:ad:41:6f:1a:a6:68:94:
         00:d9:64:7b:c0:58:4b:41:e8:11:7a:28:0a:87:17:f1:18:b1:
         76:cb:10:3e:f0:a3:27:b0:8f:b2:a9:39:4a:8e:10:0f:ec:55:
         4c:a3:01:94:80:cc:42:01:91:ef:ce:54:de:2a:13:51:b7:44:
         17:d7:1e:d2:b5:8f:51:f4:4d:f2:5d:cf:fe:f2:1e:e2:1b:6d:
         0d:92:af:9f:82:7a:1e:e5:ae:7b:e9:e8:64:0e:9c:10:52:a7:
         b7:91:2d:2b:a7:37:f0:f3:b5:9c:ff:0b:b2:45:dc:1d:64:ad:
         97:c3:54:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:32:04 2026 by rpki-client