Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa
File:                     3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa (raw, json)
Hash identifier:          5y2YBw47A6+6tP6gZiLjIjWF/tM6Ks9y2jvanY0piG0=
Subject key identifier:   BB:94:1B:1B:AE:3C:70:04:5E:52:EB:B8:C8:65:9F:D0:E7:40:5F:0F
Certificate issuer:       /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial:       20F1D0EEE4BABE77DC7BD595D7A3D5645CC99A28
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa
Signing time:             Tue 04 Aug 2026 21:08:01 +0000
ROA not before:           Tue 04 Aug 2026 21:03:01 +0000
ROA not after:            Tue 03 Aug 2027 21:08:01 +0000
asID:                     262729
IP address blocks:        143.208.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
                          rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f1:d0:ee:e4:ba:be:77:dc:7b:d5:95:d7:a3:d5:64:5c:c9:9a:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
        Validity
            Not Before: Aug  4 21:03:01 2026 GMT
            Not After : Aug  3 21:08:01 2027 GMT
        Subject: CN=BB941B1BAE3C70045E52EBB8C8659FD0E7405F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:dc:20:fc:b0:5e:5a:be:72:72:06:df:4b:
                    64:79:e9:46:74:a8:61:db:1c:c1:75:9e:a3:66:7c:
                    9d:55:eb:31:de:c3:9b:09:ac:0e:77:f5:b6:25:eb:
                    74:16:a0:7d:e2:19:9c:c3:43:ec:e3:42:93:2b:b5:
                    31:eb:3d:13:0a:22:80:8d:9a:6b:14:96:e2:60:34:
                    21:af:7e:5c:67:06:00:3b:d4:88:1d:59:49:48:6f:
                    fe:e4:ef:be:1b:d6:ab:e8:c7:91:86:0c:c8:bb:17:
                    06:7c:f2:48:9f:04:f6:c4:f3:8e:ce:ee:47:4f:51:
                    0c:51:7f:a4:6a:53:8a:97:d8:13:f6:a6:b2:54:ea:
                    6c:61:8b:1e:3e:44:6c:9b:f4:4c:97:0e:34:6b:61:
                    d2:7e:32:d6:43:54:6c:d6:2b:55:1f:f2:12:2f:f5:
                    07:8b:09:89:87:6b:e6:b2:4b:7c:fe:a6:43:91:02:
                    24:db:67:7a:81:df:f3:71:66:41:5e:dd:85:df:4d:
                    11:ab:bb:35:70:e7:48:c5:9c:41:55:0b:84:8f:ae:
                    77:0b:60:7e:ff:48:55:41:32:53:a0:61:3b:e3:cf:
                    8d:01:f9:49:e4:38:de:21:ff:b2:3d:7a:82:e0:cf:
                    71:df:42:b6:4f:e7:69:19:b0:49:16:2b:a4:1d:19:
                    8a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:94:1B:1B:AE:3C:70:04:5E:52:EB:B8:C8:65:9F:D0:E7:40:5F:0F
            X509v3 Authority Key Identifier:
                keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/3134332e3230382e3139352e302f32342d3234203d3e20323632373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:57:28:cc:d2:aa:ef:d7:04:07:4d:2c:f9:51:b6:82:81:
         e9:51:28:98:32:e4:f1:5a:b0:27:1d:2b:ee:5a:31:53:0f:68:
         d4:e8:30:37:50:a7:e1:01:c0:8f:44:a1:a6:c9:ef:7c:5e:a5:
         95:57:c4:bb:50:71:40:16:7c:ef:b7:b5:9f:05:5d:62:25:1c:
         82:fa:2c:f5:84:c5:00:6e:be:2d:2b:c6:c6:d1:13:f3:49:d5:
         09:43:f4:75:b5:2e:3a:1e:9e:a4:1c:15:b3:f4:bc:f3:d3:41:
         a5:fb:23:c0:55:09:94:a6:af:dd:fe:aa:5b:4c:08:1d:56:c0:
         32:8a:d7:83:d6:2d:7e:68:35:f9:2a:c4:68:96:c3:64:f0:1b:
         9d:0b:5e:b8:bb:56:f2:2b:1f:30:01:d1:0c:93:0e:5d:f8:2d:
         00:2e:f5:ea:6e:b1:87:b8:86:69:42:16:cb:c6:ef:4b:46:15:
         2f:39:29:db:a9:7b:c6:db:e8:dc:b3:f8:78:aa:7d:73:bd:18:
         6d:c5:34:37:1a:85:75:a7:a7:7e:5d:3c:64:44:57:e2:76:00:
         58:a6:97:e5:8e:7a:a3:02:07:5c:2f:39:a6:fe:c6:7b:0a:98:
         c8:7c:2c:e0:7b:3f:52:93:0b:73:b3:ec:21:7d:f3:f2:6d:93:
         c3:12:fc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 01:55:58 2026 by rpki-client