Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32322d3232203d3e203532393136.roa
File:                     3134332e3235352e31362e302f32322d3232203d3e203532393136.roa (raw, json)
Hash identifier:          7GzhRRv+3GRUk16KqccgdZ1yoAxgpPuiRCaE52IPHqY=
Subject key identifier:   2A:4C:0C:4C:DD:3C:B3:26:61:D0:8B:A3:1E:52:F1:E0:2B:3F:14:B4
Certificate issuer:       /CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
Certificate serial:       2B9A1E02FD1C6B472E1FCA4E45C1193C547DD372
Authority key identifier: 10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32322d3232203d3e203532393136.roa
Signing time:             Sun 05 Jul 2026 15:35:57 +0000
ROA not before:           Sun 05 Jul 2026 15:30:57 +0000
ROA not after:            Sun 04 Jul 2027 15:35:57 +0000
asID:                     52916
IP address blocks:        143.255.16.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl
                          rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 01:57:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:9a:1e:02:fd:1c:6b:47:2e:1f:ca:4e:45:c1:19:3c:54:7d:d3:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1028F93DB730D91DC0091DF98C6F0229EDA69CEE
        Validity
            Not Before: Jul  5 15:30:57 2026 GMT
            Not After : Jul  4 15:35:57 2027 GMT
        Subject: CN=2A4C0C4CDD3CB32661D08BA31E52F1E02B3F14B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:21:d6:0a:95:83:19:58:e2:e6:57:f0:06:
                    de:72:dd:02:62:37:01:2c:7e:51:59:df:70:8f:6c:
                    e1:c9:d1:74:03:21:49:a1:7b:54:33:88:44:eb:0e:
                    38:0d:15:8e:52:fc:b5:50:31:ab:7d:a5:aa:39:b3:
                    c5:1d:12:2c:08:b9:fa:c1:66:1f:8d:14:6e:56:ee:
                    05:34:bb:f7:7b:f1:78:cf:86:10:58:2a:10:7b:9c:
                    a8:b1:65:1f:37:5f:7d:13:ef:b9:e6:35:ab:8e:71:
                    3c:ce:ee:bb:f6:ca:20:86:ff:a3:22:94:00:51:26:
                    6e:be:3d:d2:97:19:1b:66:41:dc:63:77:85:41:07:
                    ff:ef:57:86:39:f3:81:b7:e5:ab:79:c3:45:33:b0:
                    9c:7f:3c:08:cc:de:4d:23:c2:98:f1:bd:59:a4:6b:
                    90:71:03:84:03:45:38:ff:61:12:02:9a:a6:95:c6:
                    65:26:d8:35:7d:45:77:eb:0b:08:77:18:f8:e9:c0:
                    d7:e0:52:f4:7b:87:e3:a9:82:d7:49:a5:d5:48:60:
                    14:66:28:37:8a:cf:56:f6:9f:04:27:e0:7a:d2:ac:
                    a6:44:2b:31:b6:ba:f9:77:8a:f4:ca:6e:14:03:a5:
                    b3:02:6e:9b:df:f5:fe:4d:05:73:3f:52:3e:d8:89:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4C:0C:4C:DD:3C:B3:26:61:D0:8B:A3:1E:52:F1:E0:2B:3F:14:B4
            X509v3 Authority Key Identifier:
                keyid:10:28:F9:3D:B7:30:D9:1D:C0:09:1D:F9:8C:6F:02:29:ED:A6:9C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1028F93DB730D91DC0091DF98C6F0229EDA69CEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/3134332e3235352e31362e302f32322d3232203d3e203532393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:01:d7:8d:7c:db:38:7f:e2:02:d6:e0:e0:3a:58:93:83:de:
         f8:13:0d:bf:32:df:3e:0a:7a:a0:c2:b3:32:99:bb:8a:cf:9e:
         a2:6d:6f:db:fe:af:31:5f:3b:82:71:c2:e0:38:39:ec:cd:7d:
         dc:e1:b9:73:a8:ee:d6:a5:86:d0:a3:ba:8c:3b:d7:52:2c:f6:
         89:ae:73:1e:7a:05:f3:18:52:f8:03:f1:ba:7d:ea:ee:5a:69:
         05:ac:6a:f2:e1:1f:10:92:7b:83:eb:91:ba:f0:30:d6:ed:7f:
         ac:27:aa:15:0c:2a:8f:5b:de:3b:4b:7d:a0:f8:2d:29:0f:6b:
         81:90:9f:24:e9:40:8e:21:50:95:ea:b1:98:e3:2f:ac:f5:8b:
         39:b9:6e:b8:b5:fe:38:c3:ad:0b:fd:e5:21:42:84:33:5a:89:
         f0:e2:7e:c9:44:8d:10:4c:cd:33:93:98:7d:02:08:09:8f:c9:
         77:ad:be:7a:21:fe:2a:58:d5:f1:90:bd:67:27:2b:65:33:b6:
         56:4e:99:92:50:92:0d:36:5f:9a:31:68:53:58:85:c4:2a:36:
         75:55:59:5b:d6:80:8d:47:4a:de:92:58:89:76:07:0a:07:bf:
         99:8e:6a:01:90:d5:91:74:4f:3b:a2:dc:c1:e8:20:2a:52:46:
         99:df:7e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:08:13 2026 by rpki-client