Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3234203d3e20323634303838.roa
File:                     3134332e3230382e342e302f32322d3234203d3e20323634303838.roa (raw, json)
Hash identifier:          xSUgqwaN/juQSsYdMarhGm69Ug1WaVbFcrMGdhLSDSo=
Subject key identifier:   62:0C:13:3C:1C:10:86:10:6E:66:F4:FA:68:6E:00:80:6C:D4:81:77
Certificate issuer:       /CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
Certificate serial:       08D400DA6259B75989EB19172B5C9414EA15B24D
Authority key identifier: CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3234203d3e20323634303838.roa
Signing time:             Tue 20 Oct 2026 15:39:12 +0000
ROA not before:           Tue 20 Oct 2026 15:34:12 +0000
ROA not after:            Tue 19 Oct 2027 15:39:12 +0000
asID:                     264088
IP address blocks:        143.208.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl
                          rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 02 Nov 2026 05:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:d4:00:da:62:59:b7:59:89:eb:19:17:2b:5c:94:14:ea:15:b2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6F99F9682706C80D859CB7FE1E40B07EBB0998
        Validity
            Not Before: Oct 20 15:34:12 2026 GMT
            Not After : Oct 19 15:39:12 2027 GMT
        Subject: CN=620C133C1C1086106E66F4FA686E00806CD48177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:df:f5:6f:f6:a6:99:ff:4a:b3:4d:a7:92:74:
                    e9:21:a8:18:98:50:7f:a7:c7:94:dc:d7:74:50:72:
                    65:b5:a0:88:c2:b2:d0:85:30:cc:09:74:82:f2:9c:
                    f4:85:d7:72:07:62:a2:7b:82:16:4c:8e:db:23:e6:
                    d5:72:ad:0c:ed:4a:40:80:af:1b:2f:d9:bb:6e:0f:
                    2f:ac:7a:84:f8:2e:fc:16:b1:88:c1:18:57:ee:fa:
                    d2:0c:7f:e8:57:15:97:67:53:e3:a5:a0:49:90:4b:
                    e2:d2:ab:84:33:39:ab:d3:52:3e:62:06:8e:9d:ad:
                    80:cb:ab:8f:39:d3:fd:0e:32:1b:63:fe:13:0d:8d:
                    a3:5e:e2:ed:5f:33:8e:1a:65:23:ae:b4:dd:24:59:
                    ff:0c:33:f0:44:1d:9a:8b:93:53:08:33:c2:22:ba:
                    95:a9:7a:34:f0:2c:72:36:be:e8:fb:48:e9:14:59:
                    4d:71:f4:40:eb:7f:39:4b:18:90:9d:55:dd:70:13:
                    2d:16:e1:78:8f:5c:62:fa:9e:77:96:14:80:8f:6d:
                    c4:69:09:77:be:21:f8:6a:2f:80:cf:b8:70:a5:bd:
                    a2:46:02:be:92:46:5e:52:4c:8a:a4:34:25:b7:37:
                    7f:e6:3b:8e:de:88:89:2d:19:19:9b:59:95:10:0b:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0C:13:3C:1C:10:86:10:6E:66:F4:FA:68:6E:00:80:6C:D4:81:77
            X509v3 Authority Key Identifier:
                keyid:CD:6F:99:F9:68:27:06:C8:0D:85:9C:B7:FE:1E:40:B0:7E:BB:09:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD6F99F9682706C80D859CB7FE1E40B07EBB0998.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/3134332e3230382e342e302f32322d3234203d3e20323634303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:69:89:62:7f:ce:5e:ea:61:81:32:c2:a6:11:d1:73:2b:bb:
         02:de:aa:ad:39:3e:bc:a2:58:59:d9:9c:2a:89:74:53:7a:72:
         73:82:10:dc:50:49:33:ac:6f:a3:07:aa:3f:cf:78:2b:cf:a6:
         8f:04:4b:e6:07:f1:31:d3:77:50:60:d3:fe:6a:a7:f2:b7:87:
         5a:88:8e:0e:2b:d0:18:58:f9:7d:c8:a1:42:ec:4a:bb:5c:d4:
         ae:40:2c:4c:72:42:87:6e:04:5d:21:7f:7c:be:07:75:60:e7:
         af:8d:77:a7:25:9f:a2:8d:93:5d:57:71:32:0f:08:8e:90:9d:
         8a:ff:67:6f:c5:4b:3c:0d:7e:66:67:1d:16:54:2f:b3:2f:39:
         79:9a:75:ae:e0:6e:ec:7a:07:d5:7a:d4:9e:ca:fb:89:e3:a4:
         2d:ec:04:82:78:06:f1:54:c6:d5:20:8b:a5:a9:07:f5:93:68:
         18:be:f5:11:19:7c:04:84:cf:10:65:aa:35:e4:ad:2c:2f:1a:
         4e:e8:30:5f:1d:f4:57:40:54:91:ce:5a:79:9b:c0:b9:44:80:
         84:92:1b:cd:60:65:68:8a:ba:35:98:3e:e5:a4:b3:20:b6:47:
         5a:06:6c:92:6f:67:cc:52:cd:cb:73:4f:89:c7:34:ca:69:70:
         87:37:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:43:40 2026 by rpki-client