Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3134332e3230322e36302e302f32322d3232203d3e20323633393232.roa
File:                     3134332e3230322e36302e302f32322d3232203d3e20323633393232.roa (raw, json)
Hash identifier:          bK4jNg8vL8VcpEhpLNJF/Pkpz7FH/e3W5+mxTMzsYRA=
Subject key identifier:   9F:E8:0C:19:5E:66:79:4A:B3:60:3F:EE:63:9E:EF:41:91:C9:4F:61
Certificate issuer:       /CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
Certificate serial:       3B8DA8D80BA2FC50BC87381F175F5F8DF3F9DB9D
Authority key identifier: 8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3134332e3230322e36302e302f32322d3232203d3e20323633393232.roa
Signing time:             Mon 22 Jun 2026 13:02:16 +0000
ROA not before:           Mon 22 Jun 2026 12:57:16 +0000
ROA not after:            Mon 21 Jun 2027 13:02:16 +0000
asID:                     263922
IP address blocks:        143.202.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl
                          rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Jul 2026 09:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8d:a8:d8:0b:a2:fc:50:bc:87:38:1f:17:5f:5f:8d:f3:f9:db:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF81DBEF48E51CE5626821BD6BC29DE6C771834
        Validity
            Not Before: Jun 22 12:57:16 2026 GMT
            Not After : Jun 21 13:02:16 2027 GMT
        Subject: CN=9FE80C195E66794AB3603FEE639EEF4191C94F61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:45:57:3c:47:69:b7:9c:3d:30:de:18:34:0d:
                    d7:5a:80:60:fb:e9:75:96:91:a3:31:23:7b:a6:20:
                    b8:b3:5b:26:82:a0:7b:62:16:ab:71:b6:fc:de:dd:
                    93:b5:28:9b:d0:81:36:83:1e:63:c1:aa:f7:69:78:
                    80:44:ae:61:60:1f:7e:6a:d6:7b:7a:5f:77:86:2c:
                    8b:7d:48:35:b7:01:6a:00:71:a4:e2:05:69:e6:1f:
                    e8:bf:bc:8f:ac:23:94:5e:be:58:0e:e7:93:03:dc:
                    c6:67:3d:56:ea:0c:82:18:aa:2a:05:99:cb:40:48:
                    8e:e7:c8:de:11:81:0b:1d:31:8f:76:24:92:72:48:
                    cb:87:97:64:a2:fa:c9:a6:5d:d3:ed:f5:21:02:35:
                    8b:cb:ca:c7:a3:65:16:b9:ba:83:c0:67:80:d1:cc:
                    d7:ca:a0:07:aa:fd:30:20:ab:15:bd:52:a1:b3:74:
                    e7:40:05:49:40:da:d5:16:31:4d:40:bb:df:fd:7d:
                    2e:af:d7:4e:a3:d1:46:f1:70:27:f8:c2:19:bc:2e:
                    05:57:94:10:5b:78:4f:1c:4a:c9:e6:f1:a7:4d:79:
                    d9:1b:af:26:8a:4f:10:54:df:1e:dc:41:07:44:8e:
                    c6:cb:7f:5c:1e:2f:df:9c:10:7f:c8:7b:02:1d:dc:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E8:0C:19:5E:66:79:4A:B3:60:3F:EE:63:9E:EF:41:91:C9:4F:61
            X509v3 Authority Key Identifier:
                keyid:8E:F8:1D:BE:F4:8E:51:CE:56:26:82:1B:D6:BC:29:DE:6C:77:18:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EF81DBEF48E51CE5626821BD6BC29DE6C771834.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JB9ytYGXWUNvVbDwvAjvsAsg1Ta2nWByxAGiWcWXvPV6/0/3134332e3230322e36302e302f32322d3232203d3e20323633393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:a2:8f:b4:1e:a6:d7:22:5a:22:0d:da:5d:c5:79:4a:d0:48:
         5d:e8:08:0a:53:32:43:56:b3:12:2f:33:5b:0f:ee:a4:b9:fc:
         b8:0c:14:d8:f7:7e:b0:f7:22:61:6c:4f:81:24:ab:e8:33:33:
         9f:aa:e4:42:be:ff:e4:d5:50:62:2f:54:18:5c:df:a2:94:60:
         cf:79:5c:75:cb:e0:2f:32:e1:2a:d7:2e:9d:76:ee:80:bc:91:
         77:a1:a2:41:47:dd:3c:ff:8b:37:66:84:b0:0e:ae:b9:27:26:
         c8:51:03:61:82:a2:12:7f:57:8e:fd:c2:8c:de:21:d9:ac:c8:
         9a:47:f8:d8:08:4d:96:85:9d:ae:73:45:c5:d4:88:38:43:12:
         e5:84:c9:ac:11:d3:80:1d:dd:0a:29:14:66:32:6a:87:51:b2:
         08:13:84:21:c4:04:d4:6b:ec:82:e7:75:be:46:c8:ea:43:78:
         19:2d:54:fb:2d:94:06:b9:b4:48:35:d4:22:44:f3:f7:29:dd:
         18:08:28:58:6c:0d:a3:03:dc:ad:1b:fd:70:a2:ec:ba:3b:9f:
         0b:fb:2f:18:2c:42:08:8c:5a:7e:45:ca:9e:7d:e7:7e:0b:5d:
         b6:59:fe:2c:96:a3:81:32:6c:dd:5c:d5:b1:8f:e7:55:20:ac:
         3b:56:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:59:59 2026 by rpki-client