Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa
File:                     3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          oaTvEyNR/iizhUWofK1X+gx/J8WChbLMRTpjAMegfRg=
Subject key identifier:   A4:AE:5C:FB:59:9C:95:7D:25:9B:09:18:6E:C5:1A:97:EA:CF:C1:AB
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       63F549587AB3665DC8A071A12C2EE2D815F132E6
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:08:01 +0000
ROA not before:           Mon 18 May 2026 15:03:01 +0000
ROA not after:            Mon 17 May 2027 15:08:01 +0000
asID:                     262729
IP address blocks:        143.208.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:37:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:f5:49:58:7a:b3:66:5d:c8:a0:71:a1:2c:2e:e2:d8:15:f1:32:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:03:01 2026 GMT
            Not After : May 17 15:08:01 2027 GMT
        Subject: CN=A4AE5CFB599C957D259B09186EC51A97EACFC1AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:ff:81:b0:13:9e:e9:ce:1e:3a:ee:6a:12:
                    94:21:a0:c9:a4:10:a2:18:75:09:40:f1:df:b4:76:
                    12:f6:e4:0d:a6:f2:f0:f1:24:66:af:e1:b2:ba:d4:
                    fb:37:74:1e:f8:ea:9f:3b:ae:4e:69:e0:38:f3:7e:
                    93:55:68:03:bc:cd:fb:71:5b:e7:0e:f8:78:90:b2:
                    68:52:79:fe:52:94:f4:85:00:b1:f0:f6:a9:22:9c:
                    12:db:72:1b:da:af:f5:6d:dd:f9:61:0c:d5:9e:0d:
                    ff:00:c5:e6:f1:9f:2f:bc:37:9d:56:74:9d:95:38:
                    39:c3:db:6c:b9:13:73:79:93:d4:cf:90:d3:03:46:
                    51:16:26:ac:98:07:de:ac:f1:7f:0f:23:9d:68:c7:
                    af:4a:7f:e2:35:08:1c:dd:95:3c:4d:66:20:e9:3c:
                    66:44:26:6b:87:43:ac:c8:5b:cb:37:74:ed:a9:c7:
                    ca:a7:9d:4d:89:00:64:a9:60:52:b0:9a:3e:0c:15:
                    4f:ad:07:f0:51:8e:bc:54:ef:db:d1:5f:b5:e1:1c:
                    c0:30:24:c5:9e:b9:38:f5:e4:f4:fe:c9:3c:ed:7c:
                    bb:08:bc:2c:ff:cb:16:d5:70:ae:4c:30:eb:f3:98:
                    08:66:44:e7:15:7e:fe:b6:1c:1a:22:22:48:a3:d9:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AE:5C:FB:59:9C:95:7D:25:9B:09:18:6E:C5:1A:97:EA:CF:C1:AB
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139322e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:d3:8a:bf:b8:00:96:21:27:c5:04:18:98:82:24:ee:c5:7a:
         a6:e9:74:13:6b:97:6f:c2:e1:f4:df:1d:37:13:69:f6:a2:e4:
         ea:90:d2:0f:27:e2:83:6c:da:a7:66:15:c6:b7:1e:53:70:7c:
         51:f3:f9:cb:83:d2:03:37:c1:ec:be:b5:0a:85:15:d0:08:bb:
         cd:47:58:d8:24:3a:1a:d3:c3:ea:8a:1c:4a:08:61:f8:70:78:
         22:56:02:9d:15:8b:f1:3d:e2:2e:b7:f9:2d:9b:50:99:fc:53:
         eb:3c:c3:a7:87:56:5c:d3:3b:4f:df:c2:3a:fd:25:0f:cc:24:
         1d:39:dd:45:a1:0e:82:66:9f:9b:d2:b5:7e:e7:7b:16:de:d6:
         c8:a4:5a:a3:fd:64:61:2d:87:fe:3e:8d:22:14:14:db:0d:dc:
         e9:10:92:0e:ca:04:5f:f6:01:bb:6e:4c:10:77:83:5c:40:5d:
         6d:7f:45:4e:35:7c:13:c8:81:88:bb:fd:30:11:a6:ab:ff:f5:
         cb:29:de:da:78:eb:6c:c1:80:ab:14:3e:1c:09:24:39:b0:c9:
         fd:3c:60:60:d2:3f:f7:8c:21:88:c9:3d:e8:1f:39:10:e0:ce:
         1a:d1:38:a6:88:3a:2a:28:dd:ad:55:54:18:43:3c:6b:ab:c4:
         04:cd:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:30:31 2026 by rpki-client