Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa
File:                     3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa (raw, json)
Hash identifier:          +xGwVAzlq04CKXK/H9hh34Lf7XdiuxB0/lJyyIQvAXQ=
Subject key identifier:   75:98:5A:57:E3:CE:E9:0F:4F:95:7B:3D:C3:02:D5:44:57:E5:A0:FC
Certificate issuer:       /CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
Certificate serial:       5C87B80B61C1B8C39FAC0513D8F03851299B28DE
Authority key identifier: 8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa
Signing time:             Thu 25 Jun 2026 12:00:04 +0000
ROA not before:           Thu 25 Jun 2026 11:55:04 +0000
ROA not after:            Thu 24 Jun 2027 12:00:04 +0000
asID:                     262784
IP address blocks:        143.202.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl
                          rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 05:11:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:87:b8:0b:61:c1:b8:c3:9f:ac:05:13:d8:f0:38:51:29:9b:28:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CD2E74C0B51414825F95C9D3D432ADD56896751
        Validity
            Not Before: Jun 25 11:55:04 2026 GMT
            Not After : Jun 24 12:00:04 2027 GMT
        Subject: CN=75985A57E3CEE90F4F957B3DC302D54457E5A0FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8a:3c:54:16:5f:86:b3:e4:39:a2:4e:7e:82:
                    a7:c4:62:6c:6f:62:db:12:c1:8d:35:69:43:ff:45:
                    a5:75:04:85:ec:d2:76:e8:c7:b5:06:b2:e2:90:51:
                    99:0b:1e:30:db:f2:b0:96:26:bc:c2:c2:a8:45:ca:
                    26:d8:cb:64:ba:24:7c:7e:11:f6:5a:58:b7:77:05:
                    54:36:f9:95:41:67:93:c0:a3:6f:0f:ce:03:e2:98:
                    2b:93:4b:6d:07:52:b8:4e:4a:8d:8b:13:c7:a6:27:
                    a0:b0:04:f0:b6:af:58:1c:a6:3f:00:9e:c9:72:20:
                    33:1b:87:3e:a5:98:bd:1b:3c:25:ae:98:57:63:f7:
                    44:2d:5d:10:db:aa:cc:1e:a1:ca:c8:b8:d9:78:79:
                    44:f3:48:8a:23:23:a7:23:02:83:74:70:e1:80:ba:
                    96:8c:5b:b7:55:9a:7e:e3:36:f6:26:d9:1f:eb:fb:
                    a3:02:e9:1c:94:b3:95:ab:07:a3:d5:65:64:a1:4a:
                    79:ff:1c:c5:12:07:f5:8f:42:45:90:a5:ec:8f:07:
                    9b:a9:a4:49:b5:54:21:14:57:0e:4b:45:bb:f4:85:
                    01:b1:1b:1c:9f:f8:83:7a:7b:94:7a:d8:89:a4:cb:
                    ca:28:e0:77:16:f7:33:0b:27:f2:35:c6:4b:9d:2c:
                    1d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:98:5A:57:E3:CE:E9:0F:4F:95:7B:3D:C3:02:D5:44:57:E5:A0:FC
            X509v3 Authority Key Identifier:
                keyid:8C:D2:E7:4C:0B:51:41:48:25:F9:5C:9D:3D:43:2A:DD:56:89:67:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CD2E74C0B51414825F95C9D3D432ADD56896751.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uENiHDYwVy4DAAeQgxL4nLtsrqnHafPDVw3KYwuwJL5/1/3134332e3230322e3130342e302f32322d3234203d3e20323632373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:25:e1:a6:06:a6:a5:d7:b9:16:6b:4d:1f:e1:3e:fb:4f:52:
         87:bf:17:34:d4:fe:c2:9d:ac:b4:d5:0e:0a:87:57:e6:a4:c2:
         df:4d:fd:3f:aa:93:73:0f:20:4a:03:14:f5:86:c1:b4:86:17:
         a0:4e:19:34:34:38:c7:e4:4f:d2:f9:0b:64:fc:31:90:d3:03:
         54:3b:74:4b:7f:45:bb:3c:2c:29:e2:87:62:df:62:e3:d8:d4:
         a5:f0:c5:1b:e2:17:5e:0a:46:0c:56:c2:87:9d:3c:05:71:98:
         19:47:80:4d:08:1f:0f:14:9a:40:cf:9f:0a:88:fe:28:d1:7c:
         dd:1b:30:5f:98:99:01:d1:10:86:d7:c3:46:a6:3f:8e:c1:52:
         68:55:f9:6a:dd:a7:60:87:55:32:0b:cf:00:8c:bd:61:91:de:
         15:41:ec:92:fd:10:b5:c6:01:4d:51:ec:b1:26:c6:76:2f:f1:
         e6:66:e2:85:7b:24:9d:41:a2:5e:ef:ca:b8:49:f5:ba:f3:22:
         b3:43:d8:14:44:4a:e8:b4:00:c9:eb:68:36:9f:7d:a0:cd:ea:
         64:83:ea:5b:50:bf:94:18:7c:74:8f:86:73:08:84:9e:e4:fa:
         10:2d:ff:33:0a:ee:bf:66:0c:7d:89:89:50:5c:c8:73:04:0b:
         ce:47:e9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:21:00 2026 by rpki-client