Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
File:                     3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa (raw, json)
Hash identifier:          5FsczQLJK/0FtSzdmlJR9qnsGLEFraDsBJHb0/yDYhg=
Subject key identifier:   EE:AF:08:09:AD:74:46:54:5B:71:C8:A3:4F:52:8B:2D:AD:D5:DB:79
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       55FD4E20A5D468D7019698DC64555DB22C2B6C47
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:07:59 +0000
ROA not before:           Mon 18 May 2026 15:02:59 +0000
ROA not after:            Mon 17 May 2027 15:07:59 +0000
asID:                     262729
IP address blocks:        143.208.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fd:4e:20:a5:d4:68:d7:01:96:98:dc:64:55:5d:b2:2c:2b:6c:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:02:59 2026 GMT
            Not After : May 17 15:07:59 2027 GMT
        Subject: CN=EEAF0809AD7446545B71C8A34F528B2DADD5DB79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:60:68:53:7d:11:58:f7:d3:c9:ab:10:96:
                    17:b0:71:b2:af:b2:d9:b0:be:11:07:20:9c:df:35:
                    20:ab:0b:ee:07:1c:8f:88:1e:c6:60:6e:72:c6:68:
                    91:85:ea:e7:60:3c:a8:0a:7b:4d:63:eb:57:c4:82:
                    f6:03:0d:9f:6a:90:8b:87:a4:e8:8d:99:e3:5e:37:
                    1e:a9:39:72:c7:c6:09:4a:59:92:99:b4:83:4b:14:
                    63:be:28:89:b0:e0:bc:81:f4:57:13:8e:1e:dd:5a:
                    a3:21:fb:b5:60:51:c9:72:47:ce:35:5a:72:43:4f:
                    e7:36:c0:2a:a8:19:90:91:a5:0b:39:11:70:65:e0:
                    2b:87:c1:89:cf:cc:99:70:e5:0d:73:34:0d:13:74:
                    8e:0c:8a:63:70:6e:d4:ee:65:ed:95:24:9d:28:ed:
                    66:ef:2e:72:de:ed:df:6e:64:82:48:97:88:8c:9d:
                    af:d5:ce:23:14:a1:55:fd:e8:ca:24:4f:5d:84:93:
                    18:18:08:a9:96:d9:d0:b5:3a:9d:a7:fb:4e:bb:85:
                    ac:85:ae:70:8a:b8:bd:6a:9a:b1:c3:8c:4c:dc:40:
                    f8:c8:50:93:3f:be:47:c3:ca:6d:ce:c4:ae:34:24:
                    3c:e5:4f:48:7f:30:2f:fd:be:14:1e:a1:4f:74:08:
                    fb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AF:08:09:AD:74:46:54:5B:71:C8:A3:4F:52:8B:2D:AD:D5:DB:79
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32322d3232203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:24:1c:33:bf:8b:f4:0f:cd:a8:5a:58:a8:3f:77:55:10:9c:
         6e:a9:22:df:42:1a:a0:3d:8a:f6:39:6f:e0:02:6e:d4:d7:f3:
         53:13:0c:3f:c7:b9:80:3b:f3:6b:9f:f1:e2:9d:b7:1b:f7:d2:
         9a:fa:8f:c4:ca:ef:06:a1:75:62:90:66:dd:78:e5:9e:3e:9b:
         0a:96:d3:9d:83:80:46:f5:ba:f5:76:79:1b:2b:5c:57:82:e4:
         4d:33:c8:ac:d0:c7:47:70:04:74:ed:9a:7c:94:96:0a:0b:0e:
         4b:33:25:e7:b9:fe:33:96:4f:58:00:34:f0:80:94:bd:19:97:
         6f:77:c4:c1:50:69:93:c8:74:9a:59:ce:f8:4a:88:e0:e2:b1:
         b3:91:f8:e7:5a:3f:cb:35:9b:b9:c9:a1:20:d0:2a:0a:35:ae:
         a9:1b:f1:6b:1e:77:00:81:6c:a4:80:d6:48:02:ed:06:33:fb:
         bd:fc:37:86:21:9d:b7:86:fc:a8:7d:b4:02:cf:df:7a:65:b7:
         c3:e4:e1:86:fc:d6:d2:fb:01:30:3a:ae:13:31:8d:82:1b:e3:
         07:1d:63:6a:e7:86:11:74:44:90:fa:e8:83:ca:54:d9:1c:ca:
         6c:f9:a3:f6:a5:ad:13:d2:56:b7:0d:c9:51:72:fb:ab:32:e8:
         b8:9b:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 17:11:57 2026 by rpki-client