Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3134332e3230322e3136342e302f32322d3332203d3e20323638393736.roa
File:                     3134332e3230322e3136342e302f32322d3332203d3e20323638393736.roa (raw, json)
Hash identifier:          Sfwr1QEXPh/mkR2E7lsO8gwyFp2BM3oE7G0ULPzUz0A=
Subject key identifier:   AD:55:AC:7A:FA:F4:BC:ED:AC:3B:4F:C8:98:BB:84:3B:2C:FF:4E:16
Certificate issuer:       /CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
Certificate serial:       1B11205A9F5FE78B6D5C72A8BF54A2B4B928EAA6
Authority key identifier: 13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3134332e3230322e3136342e302f32322d3332203d3e20323638393736.roa
Signing time:             Mon 11 May 2026 17:47:21 +0000
ROA not before:           Mon 11 May 2026 17:42:21 +0000
ROA not after:            Mon 10 May 2027 17:47:21 +0000
asID:                     268976
IP address blocks:        143.202.164.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl
                          rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:11:20:5a:9f:5f:e7:8b:6d:5c:72:a8:bf:54:a2:b4:b9:28:ea:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=134699DE05FA0114D9EBD9657A4AC646F0601BB1
        Validity
            Not Before: May 11 17:42:21 2026 GMT
            Not After : May 10 17:47:21 2027 GMT
        Subject: CN=AD55AC7AFAF4BCEDAC3B4FC898BB843B2CFF4E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:66:88:84:97:a8:b8:c9:d3:05:6c:df:2d:
                    4f:84:71:af:cb:34:a7:0c:c4:c1:1d:40:39:86:c7:
                    85:52:ec:6d:9f:23:82:82:81:4a:0a:f7:f8:7a:06:
                    72:2e:28:00:95:df:94:b1:b5:e1:f8:d0:fe:51:06:
                    a4:1f:d9:dd:fe:1b:48:4e:0c:db:eb:3b:a8:ca:d7:
                    a6:fe:90:89:12:5e:b7:9e:8e:e0:ed:12:6c:2c:01:
                    cb:09:c8:40:b0:4d:8b:82:11:5f:04:27:6d:91:ef:
                    b3:44:f0:ab:6b:0c:ff:8c:a1:07:18:61:91:1b:d2:
                    3b:df:1a:a7:5e:9f:79:4e:90:0b:56:bc:4c:32:f7:
                    c6:17:b2:e8:c4:3f:fa:75:eb:37:83:9a:ea:be:38:
                    c6:ad:41:1e:96:1d:af:ec:91:fb:5d:e1:52:17:5d:
                    18:d2:52:55:fb:e3:09:d3:d3:b8:af:90:75:f1:95:
                    e0:1c:7e:53:69:f1:7c:88:ef:55:1d:e4:ef:16:17:
                    5c:80:08:b8:d4:33:49:48:7b:24:f8:99:58:6c:3c:
                    a2:70:c1:60:27:dd:04:04:12:7a:dc:98:37:63:34:
                    29:af:11:b2:ef:d6:a9:7f:60:bd:f9:35:ac:e6:71:
                    58:86:7d:4d:85:4c:b3:df:1c:63:5b:ea:63:74:d2:
                    ef:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:55:AC:7A:FA:F4:BC:ED:AC:3B:4F:C8:98:BB:84:3B:2C:FF:4E:16
            X509v3 Authority Key Identifier:
                keyid:13:46:99:DE:05:FA:01:14:D9:EB:D9:65:7A:4A:C6:46:F0:60:1B:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/134699DE05FA0114D9EBD9657A4AC646F0601BB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/134699DE05FA0114D9EBD9657A4AC646F0601BB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WEAFNKYDFJRuknemPY95rVRabR76yWZqTXUJ3y6Ad7T/0/3134332e3230322e3136342e302f32322d3332203d3e20323638393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:ee:8d:ad:27:8a:e0:98:36:d2:b8:c8:2f:f0:1e:b4:3b:c8:
         e9:75:b8:1f:5a:70:54:b3:80:01:75:19:a4:36:77:90:50:c0:
         cc:c5:54:76:93:7d:73:0b:a4:5f:82:db:35:9f:0c:81:6a:a9:
         0c:9c:88:f8:16:f3:02:38:e1:64:d3:54:96:e0:37:ee:20:0f:
         52:00:4f:ba:3a:f6:d7:dc:7e:5a:94:f8:2f:7e:bb:e6:bd:32:
         9c:52:ca:b5:c4:23:66:c2:32:20:0e:0f:4f:ee:06:41:88:9e:
         bf:0f:3e:9c:94:a5:35:6a:48:7e:52:ea:93:ae:4d:60:e0:36:
         1d:dd:09:76:e2:f8:00:71:38:4d:ba:19:f7:0f:0b:e9:af:fe:
         07:1b:41:fa:29:cd:fd:80:e8:79:86:b7:77:cb:1f:92:f0:b7:
         f7:e8:0c:9a:fd:e5:b4:a7:89:03:84:d5:fd:4a:2c:ae:ab:2d:
         1f:f7:08:fa:76:a9:eb:ed:f2:48:34:5b:52:16:22:04:06:33:
         c3:c4:2d:24:05:11:1c:55:4b:97:48:7c:5f:de:ef:c0:5b:e2:
         27:7c:08:cf:bc:0a:7a:75:1b:33:83:12:1b:b3:a9:79:a5:db:
         ad:ad:95:9e:63:4f:28:62:75:55:a4:d9:8e:51:43:be:d7:c4:
         12:b9:1f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:33:31 2026 by rpki-client