Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3134332e3230382e302e302f32322d3234203d3e20323638393535.roa
File:                     3134332e3230382e302e302f32322d3234203d3e20323638393535.roa (raw, json)
Hash identifier:          fQrg5hxkSlshjDYiiysgfnMbhRL7tdoG22vv4fdqHMo=
Subject key identifier:   C7:B4:35:B0:B9:A3:A5:CA:92:7F:53:3F:AE:26:48:EA:9F:55:FB:90
Certificate issuer:       /CN=6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3
Certificate serial:       541BE2BFC906203E0A3A753C2F4A928DB5AFD2C0
Authority key identifier: 6E:9A:03:15:72:EE:E6:64:CB:FF:8D:2B:95:6E:FE:DC:6F:50:38:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3134332e3230382e302e302f32322d3234203d3e20323638393535.roa
Signing time:             Wed 08 Apr 2026 20:59:30 +0000
ROA not before:           Wed 08 Apr 2026 20:54:30 +0000
ROA not after:            Wed 07 Apr 2027 20:59:30 +0000
asID:                     268955
IP address blocks:        143.208.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.crl
                          rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 Apr 2026 22:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1b:e2:bf:c9:06:20:3e:0a:3a:75:3c:2f:4a:92:8d:b5:af:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3
        Validity
            Not Before: Apr  8 20:54:30 2026 GMT
            Not After : Apr  7 20:59:30 2027 GMT
        Subject: CN=C7B435B0B9A3A5CA927F533FAE2648EA9F55FB90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:80:e4:20:88:e8:8f:1e:47:dd:ac:af:d7:34:
                    90:6a:f2:fb:d2:f8:cc:2b:6a:61:09:7f:8e:1e:3d:
                    ea:fb:f9:c6:81:c9:c0:df:06:26:eb:77:78:a2:32:
                    2f:85:74:b8:84:b7:79:4b:f9:5d:0c:ab:d1:fc:87:
                    0d:f3:12:b5:c2:ea:8d:eb:44:13:77:b4:f7:d7:e8:
                    ea:88:eb:00:ff:9a:f6:e6:45:3a:87:d9:21:ef:da:
                    93:5f:07:18:e3:d2:84:10:a5:78:90:44:b9:98:96:
                    b7:d0:25:07:fd:ca:2c:3c:3c:a5:db:a0:30:8c:79:
                    9e:bb:42:42:8c:24:37:11:f8:c1:79:4c:66:0f:a2:
                    50:06:2c:ce:58:72:95:3b:9a:0b:17:c2:ad:ed:87:
                    15:92:63:aa:b3:76:5d:12:64:39:5b:68:4a:85:7e:
                    c1:2f:d2:12:13:18:e3:53:1b:8c:5d:8e:3d:ec:81:
                    e1:3c:a8:c8:ab:19:24:a1:67:46:84:98:8c:26:15:
                    e5:4b:14:c2:f3:1a:d0:c0:fe:95:86:71:31:d6:8c:
                    f9:2a:f8:09:72:01:8d:46:bc:ff:9f:66:25:6a:d5:
                    f9:69:05:50:d3:b4:98:ef:b0:97:c9:3d:97:7b:dc:
                    81:24:98:b3:8c:2b:5e:45:e7:50:94:ef:a9:19:07:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B4:35:B0:B9:A3:A5:CA:92:7F:53:3F:AE:26:48:EA:9F:55:FB:90
            X509v3 Authority Key Identifier:
                keyid:6E:9A:03:15:72:EE:E6:64:CB:FF:8D:2B:95:6E:FE:DC:6F:50:38:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6E9A031572EEE664CBFF8D2B956EFEDC6F5038C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/PFvTUhBBVwi42Fmj11eEHTZ1TKADtgm4Z3A8NGhrEPK/0/3134332e3230382e302e302f32322d3234203d3e20323638393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:6a:92:51:86:ce:2e:fa:11:01:24:59:2b:3b:75:9b:09:2d:
         07:be:0b:2e:31:cf:36:45:41:9b:92:f1:47:5c:2e:f6:9f:d8:
         aa:e8:66:db:45:26:ac:a4:8a:cd:d4:9e:27:49:c0:da:d5:b1:
         93:d5:fc:c1:f2:7c:33:05:12:3c:55:be:1f:55:05:34:7e:b6:
         e5:0e:5a:80:7f:09:63:3c:3a:c9:f5:ee:85:cc:cb:29:d9:06:
         b4:be:a4:ca:3f:2f:1c:a0:56:db:af:a7:a4:d9:f0:b6:3b:b7:
         de:25:30:ee:1f:4c:67:85:fa:42:c5:9a:9a:17:34:c1:f4:34:
         3b:a9:58:15:b9:9a:aa:c1:bf:56:7c:4b:df:a8:08:43:d9:f9:
         ef:7b:08:dc:23:87:1a:e2:23:7a:ac:ed:7d:d7:8e:33:01:5f:
         7f:6e:c7:1e:d5:fb:b0:61:10:30:64:7a:08:af:0a:36:f7:dd:
         29:93:6d:23:3e:c0:45:e8:fe:26:e1:c1:8e:1c:98:2a:3e:f5:
         6c:68:0a:e4:06:4a:19:84:52:71:61:c8:f6:b7:8f:45:af:bc:
         bc:de:dd:0c:14:a0:dc:85:6e:a4:b2:38:77:a3:45:4d:88:78:
         1a:3c:58:ec:8d:32:e4:0c:dc:08:84:4d:bf:21:04:81:43:f3:
         3b:4b:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 15:41:34 2026 by rpki-client