Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/3134332e3230322e3138302e302f32332d3233203d3e20323634303730.roa
File:                     3134332e3230322e3138302e302f32332d3233203d3e20323634303730.roa (raw, json)
Hash identifier:          et+i5POjBbrcuJLLda+J90QC3XFgPZk0bZZDKC094v4=
Subject key identifier:   87:20:83:7F:DA:6E:4E:D6:D7:4D:24:A4:5B:6B:FC:AE:89:1F:47:23
Certificate issuer:       /CN=5E72277821EE1BF3B5BD02ED6F872129008C5D53
Certificate serial:       4CA92BEC2CE96A8DD63D41965A768B8BE2F577DA
Authority key identifier: 5E:72:27:78:21:EE:1B:F3:B5:BD:02:ED:6F:87:21:29:00:8C:5D:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/3134332e3230322e3138302e302f32332d3233203d3e20323634303730.roa
Signing time:             Tue 08 Sep 2026 12:44:52 +0000
ROA not before:           Tue 08 Sep 2026 12:39:52 +0000
ROA not after:            Tue 07 Sep 2027 12:44:52 +0000
asID:                     264070
IP address blocks:        143.202.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.crl
                          rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 20:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a9:2b:ec:2c:e9:6a:8d:d6:3d:41:96:5a:76:8b:8b:e2:f5:77:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E72277821EE1BF3B5BD02ED6F872129008C5D53
        Validity
            Not Before: Sep  8 12:39:52 2026 GMT
            Not After : Sep  7 12:44:52 2027 GMT
        Subject: CN=8720837FDA6E4ED6D74D24A45B6BFCAE891F4723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:db:9f:4c:91:51:5d:6a:e7:fc:e4:68:d6:
                    d6:70:4b:a8:5b:e5:04:21:5c:93:58:db:d3:6f:c0:
                    08:98:3c:ce:30:04:7a:19:5d:03:55:8a:7b:8a:57:
                    f9:42:5b:e7:b4:75:0d:c4:9e:ea:06:f6:c8:2c:9d:
                    23:30:d1:d7:55:97:0f:a2:0f:77:44:fb:81:c9:3f:
                    be:6a:f3:92:b8:30:b7:f9:6b:dd:c2:6b:8a:26:a0:
                    df:52:e0:45:6a:66:40:26:75:0c:9e:3b:9e:9d:c1:
                    40:87:8d:69:a8:c7:62:0a:0a:b4:18:40:82:68:7d:
                    d4:aa:16:9d:4b:e0:1d:14:69:2b:7b:c5:f2:47:be:
                    0f:3f:d3:83:c2:09:38:02:59:be:f0:77:d6:a2:3c:
                    db:bf:6a:61:7e:e6:7b:26:e3:66:68:01:4d:5f:66:
                    be:08:80:ab:c9:58:57:af:4c:38:b4:76:87:86:30:
                    e8:2b:bc:cf:bb:2b:7e:45:76:08:cb:c1:34:34:00:
                    ed:2c:2d:7b:b2:de:1b:48:51:1d:e4:c6:a4:0b:f8:
                    ab:f4:7c:ae:f8:f8:1e:03:fb:67:45:08:4b:e5:fd:
                    b0:47:b9:33:4c:fd:b1:8c:73:18:9a:5d:25:12:0a:
                    7a:7c:9c:5c:4c:c0:46:93:68:d7:c4:2e:ae:40:ee:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:83:7F:DA:6E:4E:D6:D7:4D:24:A4:5B:6B:FC:AE:89:1F:47:23
            X509v3 Authority Key Identifier:
                keyid:5E:72:27:78:21:EE:1B:F3:B5:BD:02:ED:6F:87:21:29:00:8C:5D:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/5E72277821EE1BF3B5BD02ED6F872129008C5D53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E72277821EE1BF3B5BD02ED6F872129008C5D53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvF7L7KLdzrzwm8gTSZsxBd1FmUwcshS6wgNuftnw5EE/0/3134332e3230322e3138302e302f32332d3233203d3e20323634303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:16:f0:50:93:83:2f:ef:e4:fd:b7:2b:45:bf:82:68:de:58:
         4a:3e:42:2a:fc:55:d9:73:a2:7d:19:fa:07:0c:fd:f4:54:2c:
         6c:86:6a:98:2d:cb:a4:c7:3d:99:16:03:82:c1:86:b6:f9:e7:
         04:c7:9d:8b:33:ba:82:45:cd:ce:aa:f4:5a:ae:02:73:d9:cd:
         62:33:49:cb:36:8a:f5:cd:38:63:b8:e4:ab:79:0b:76:58:bc:
         ee:8f:d9:72:36:d3:b1:11:a7:a1:ec:a6:ce:26:ae:f4:47:d9:
         84:90:7a:bc:da:6d:84:b2:16:6a:0c:a1:58:60:56:9e:4e:a7:
         b5:12:9f:14:3e:9b:32:1c:a1:db:ee:21:1a:c8:8c:a3:58:7f:
         64:0e:bb:ef:fc:19:14:a0:05:95:10:bd:99:6a:2d:a8:f3:68:
         da:5a:60:25:bb:96:11:f4:f8:d6:32:df:8c:05:ef:7e:1e:7e:
         79:ad:72:76:f8:33:47:ba:b6:89:9f:90:fa:a8:64:45:c2:ff:
         1b:20:a4:89:27:9c:10:ee:3c:2d:7f:ed:d2:f3:b6:d7:d6:df:
         fe:97:de:fa:cb:b7:f6:0d:bc:6d:c0:d6:dd:93:34:14:dc:f6:
         cc:83:0b:6f:c5:93:6e:32:1a:2f:f9:c8:c3:55:66:67:e9:0c:
         4b:42:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:23:28 2026 by rpki-client