Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa
File:                     3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa (raw, json)
Hash identifier:          Rn6k5C7YL96v5ukc/xd6P3g6I5d1sBKgTEDDLluSzWA=
Subject key identifier:   49:59:55:E6:31:CB:AC:70:73:9E:44:F6:21:44:7F:2A:97:8C:6B:33
Certificate issuer:       /CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43
Certificate serial:       53A82AEAADB824228074CE8C7376DA83B5F49E9C
Authority key identifier: 1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa
Signing time:             Fri 28 Aug 2026 15:58:43 +0000
ROA not before:           Fri 28 Aug 2026 15:53:43 +0000
ROA not after:            Fri 27 Aug 2027 15:58:43 +0000
asID:                     265131
IP address blocks:        143.208.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl
                          rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 02:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a8:2a:ea:ad:b8:24:22:80:74:ce:8c:73:76:da:83:b5:f4:9e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BAC59FCDA28C7F094923C0BB50996E4CE329F43
        Validity
            Not Before: Aug 28 15:53:43 2026 GMT
            Not After : Aug 27 15:58:43 2027 GMT
        Subject: CN=495955E631CBAC70739E44F621447F2A978C6B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:7f:83:98:d0:ab:d0:aa:f0:31:bc:63:c4:
                    ee:b5:dd:c2:9b:6e:99:be:4a:ea:96:8b:60:0b:3c:
                    06:52:b7:65:c4:19:99:2f:ce:ec:72:80:13:a1:d9:
                    ca:f6:d8:d7:7e:72:ad:09:4d:92:f2:83:e0:3a:67:
                    7f:ed:17:2c:fa:03:a7:9a:85:a9:9d:89:c6:64:ab:
                    89:3e:2f:18:15:30:25:81:56:20:ff:e9:45:71:d3:
                    a8:d4:04:76:aa:e7:3f:15:02:f2:a1:5b:18:e1:5f:
                    4e:f8:35:35:b6:b5:07:1f:b0:ad:0c:36:c3:1a:c9:
                    ae:fd:f0:5e:7f:0d:f4:ef:be:91:74:46:e0:2b:56:
                    89:ee:43:cb:dd:8b:fd:4d:1c:42:64:b5:a8:59:1e:
                    05:fb:35:e8:a2:58:4a:66:b6:1d:53:8b:f8:90:73:
                    21:13:96:fa:71:6d:3b:e8:c6:be:54:b4:95:ed:8b:
                    c3:13:d0:d7:3a:cb:ba:92:01:97:bb:ac:af:29:61:
                    50:1d:e8:05:b3:9f:52:fd:7d:aa:3c:99:4c:ae:55:
                    e2:e8:67:d2:a7:d5:38:c6:92:1a:eb:4e:08:a8:6e:
                    87:de:c4:e2:1b:20:bf:c4:46:1e:3a:fb:22:bf:2e:
                    bc:64:4f:5f:ce:c4:a2:24:0a:a7:12:4d:9d:c6:4a:
                    68:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:55:E6:31:CB:AC:70:73:9E:44:F6:21:44:7F:2A:97:8C:6B:33
            X509v3 Authority Key Identifier:
                keyid:1B:AC:59:FC:DA:28:C7:F0:94:92:3C:0B:B5:09:96:E4:CE:32:9F:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BAC59FCDA28C7F094923C0BB50996E4CE329F43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLdTuvkPzrMpCfAUB3UsdTm2f6m6eWwEiv7CgoCP6Jge/0/3134332e3230382e3232302e302f32342d3234203d3e20323635313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:85:1e:bc:93:53:1f:9a:fc:cc:b3:28:5d:23:45:30:ab:d0:
         29:82:c1:95:8e:26:c7:2f:60:21:3a:9f:ac:3c:02:77:e9:43:
         f9:c5:7c:e8:3b:b9:ce:fa:75:96:28:b1:f5:28:05:f4:af:c9:
         80:ac:f6:1a:31:70:a1:a8:84:fd:52:18:0b:66:58:85:e1:e8:
         ae:7f:d6:b2:90:93:01:f6:3f:be:8d:d4:52:a5:d3:d4:b4:86:
         22:2c:55:44:e3:ca:68:04:bb:da:f1:55:12:dd:e3:2c:59:d7:
         df:e1:86:44:16:22:28:04:20:dd:04:98:98:6e:9f:82:f8:25:
         a4:79:ff:6d:c4:c2:2b:74:89:63:29:1d:65:e9:e1:f4:8f:4a:
         9d:e4:35:6f:ef:5c:a0:87:ef:72:be:81:88:fa:89:ec:ac:bb:
         0c:d2:63:60:75:56:cb:73:34:97:46:47:93:ca:05:25:ce:38:
         97:93:40:27:a4:b1:d1:69:8a:2f:af:e6:37:e3:41:27:0b:c1:
         c4:bd:26:29:61:a1:46:6d:da:bf:f1:6c:18:1a:41:5c:ac:d4:
         5e:4c:cc:07:96:78:ec:d0:27:3b:0d:c2:69:36:6d:02:82:0d:
         ca:a4:04:4f:e6:e3:df:97:fa:5a:68:06:07:3a:b0:46:74:0d:
         96:c7:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:03:31 2026 by rpki-client