Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa
File:                     3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa (raw, json)
Hash identifier:          floEL2Mr3ywDTHlJNqT4wuyHoqXyswbLX5EoCVJA77Y=
Subject key identifier:   2F:59:92:A0:25:DD:5C:87:72:68:5D:55:51:52:90:56:46:90:9F:CE
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       05068B49277A502A8CED2BE52E5F7C85E36DA736
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa
Signing time:             Mon 18 May 2026 15:08:00 +0000
ROA not before:           Mon 18 May 2026 15:03:00 +0000
ROA not after:            Mon 17 May 2027 15:08:00 +0000
asID:                     262729
IP address blocks:        143.208.194.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 14:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:06:8b:49:27:7a:50:2a:8c:ed:2b:e5:2e:5f:7c:85:e3:6d:a7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: May 18 15:03:00 2026 GMT
            Not After : May 17 15:08:00 2027 GMT
        Subject: CN=2F5992A025DD5C8772685D555152905646909FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:0c:40:2b:09:a0:42:b6:1a:1c:fb:f1:35:
                    7a:91:5c:22:e2:aa:f6:be:f8:88:ac:a4:bb:55:52:
                    57:14:6a:6c:0f:7e:4e:31:49:1a:ec:f4:b9:fd:64:
                    09:72:19:bc:9a:a7:57:08:90:4d:51:36:3a:fa:50:
                    5a:56:a9:34:dd:d4:20:52:73:91:e7:bc:30:02:9c:
                    ac:84:9b:11:39:bf:a2:60:28:87:37:fb:62:ae:6f:
                    39:46:12:2a:d7:2a:1c:28:53:38:78:40:30:63:4e:
                    2d:f3:2b:0e:c4:13:c4:d3:5a:ff:46:ad:67:33:6a:
                    b6:2c:0c:ab:58:db:b9:c2:79:a1:11:42:b0:dd:f7:
                    4c:9f:07:b1:d6:b8:2b:0d:6f:41:17:14:7c:a8:40:
                    ca:9f:89:e0:54:2b:d8:7a:35:be:95:c0:cf:17:18:
                    66:ee:13:48:c1:76:69:5f:b0:7b:a4:16:46:60:14:
                    32:72:4a:9d:48:1f:46:35:67:b9:f4:e3:72:10:e7:
                    41:c8:40:9b:a6:10:ae:c2:f1:a1:f7:ed:8b:87:de:
                    91:75:7a:e7:55:68:13:21:8d:6e:d9:12:cf:5d:47:
                    76:7c:c6:58:b1:12:f2:aa:88:66:91:a5:e5:d3:d2:
                    34:4a:53:89:d2:11:69:c4:13:30:76:18:04:14:2b:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:59:92:A0:25:DD:5C:87:72:68:5D:55:51:52:90:56:46:90:9F:CE
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139342e302f32332d3233203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:62:c7:a3:83:69:95:9e:d4:bc:69:35:bf:0c:c9:f3:1c:c1:
         f5:b6:c0:e3:50:f5:02:d1:71:47:fb:3d:88:47:c1:5a:76:14:
         ae:36:c1:45:23:8f:80:a0:5d:f5:88:aa:c5:d7:f5:f7:a0:a3:
         8e:11:14:9d:14:e8:7a:b5:b9:2e:9c:79:e2:6e:25:68:71:e1:
         9a:33:44:24:c1:a6:c6:84:24:ed:05:48:99:7e:da:57:5d:ba:
         85:9f:d6:bd:10:45:65:b6:09:4e:6f:b7:a8:f7:79:72:74:1a:
         d8:f6:ef:a0:a1:78:54:76:39:17:11:0e:e4:3d:d5:6f:a6:11:
         49:ed:a4:20:1d:35:4c:bf:21:9c:bc:3a:fa:4c:0c:4a:57:5c:
         77:19:a2:5d:68:ab:df:8f:0d:57:d8:15:ef:ae:f6:a3:4b:a2:
         dc:b0:7e:ad:66:e4:92:42:50:0e:d0:b1:11:81:2d:ff:0c:63:
         03:a2:34:79:e0:a2:cc:c9:a8:ca:22:73:ee:8a:b1:bc:bf:72:
         13:be:54:7c:38:f4:81:f6:48:67:7f:bf:a8:fd:9a:a4:3a:46:
         80:77:47:1a:ba:bb:3e:50:4b:38:bf:88:7d:9d:dd:ca:85:16:
         e9:7d:4a:e7:63:8a:ba:9a:e5:49:6f:a8:74:c7:42:b0:ff:a3:
         83:03:e7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 15:30:18 2026 by rpki-client