Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234302e302f32342d3234203d3e20323731323137.roa
File:                     3134332e302e3234302e302f32342d3234203d3e20323731323137.roa (raw, json)
Hash identifier:          ZOPzS2vU2BrWN7fOpL6DiqTzqg7Uu8Ot/bbECl/BFTI=
Subject key identifier:   3A:AF:66:31:68:9C:D6:90:36:EB:68:BD:26:95:FD:7A:D8:B0:EC:29
Certificate issuer:       /CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
Certificate serial:       243181CF2924B022DA26012B91E031BAB9816F8F
Authority key identifier: 84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234302e302f32342d3234203d3e20323731323137.roa
Signing time:             Thu 23 Apr 2026 16:47:46 +0000
ROA not before:           Thu 23 Apr 2026 16:42:46 +0000
ROA not after:            Thu 22 Apr 2027 16:47:46 +0000
asID:                     271217
IP address blocks:        143.0.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:31:81:cf:29:24:b0:22:da:26:01:2b:91:e0:31:ba:b9:81:6f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
        Validity
            Not Before: Apr 23 16:42:46 2026 GMT
            Not After : Apr 22 16:47:46 2027 GMT
        Subject: CN=3AAF6631689CD69036EB68BD2695FD7AD8B0EC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:fa:87:86:e7:be:c7:2d:50:ee:db:7a:fb:
                    13:e3:f7:19:ee:09:c2:17:3a:ca:f9:12:0f:d2:fe:
                    d6:56:f3:1b:3b:91:75:de:a2:2c:e0:d3:b3:82:0f:
                    a9:2e:61:e5:77:9e:f8:fd:06:59:c4:d6:48:3d:6f:
                    77:01:eb:3b:b3:c6:01:b3:c5:61:2b:fe:72:6a:85:
                    6f:44:b3:55:4d:e3:42:f9:c7:fc:99:bd:bc:86:61:
                    dc:cd:a5:59:38:14:57:3d:94:b3:4d:b3:d8:6d:21:
                    c8:55:22:8c:be:34:89:97:47:c3:f0:28:99:8b:1c:
                    fd:50:35:bf:6d:69:29:37:7d:40:e7:62:04:58:97:
                    c1:78:77:11:fa:45:7a:25:16:4e:09:8a:2d:09:e3:
                    a3:2d:76:e2:50:a9:1d:56:89:42:a1:cf:2a:ff:96:
                    5c:25:8a:f8:65:6e:01:46:a1:4e:d5:16:ad:9f:a4:
                    2b:93:9d:53:02:1e:26:ee:18:d0:20:6d:8b:24:be:
                    9b:4a:b5:af:46:7a:2d:75:c6:f1:2a:8a:75:e5:9b:
                    90:cc:a3:d0:80:0b:69:ef:5c:92:8c:40:a8:f6:24:
                    33:7f:24:19:15:e7:bc:9d:47:45:2d:1b:98:a8:9b:
                    a1:fd:96:99:db:c5:a1:db:bc:e1:b2:e3:3f:53:1f:
                    fd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:66:31:68:9C:D6:90:36:EB:68:BD:26:95:FD:7A:D8:B0:EC:29
            X509v3 Authority Key Identifier:
                keyid:84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234302e302f32342d3234203d3e20323731323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:ba:09:e8:5a:1d:18:bb:ab:69:90:67:2b:db:c1:48:27:10:
         4a:b5:a5:0f:2b:9d:48:c8:4e:5b:f4:0c:ab:c6:cd:fe:19:71:
         a3:f2:99:6f:86:48:01:0c:78:da:b9:1e:91:90:2d:dd:68:2a:
         7d:09:f4:3c:e9:f1:a6:44:78:65:f5:69:44:58:ad:6d:67:4a:
         8b:92:1c:7d:89:43:5a:83:2a:57:e9:91:ec:e9:62:52:49:1e:
         39:1a:35:58:ab:09:01:64:95:e8:7b:c8:a4:39:fc:c8:f3:24:
         76:d5:c6:39:36:f4:0e:15:00:02:bb:10:74:17:14:3c:fb:21:
         9e:53:ed:fe:a3:0a:d9:b6:29:60:5c:f5:16:1f:c0:f2:34:0e:
         f9:58:7a:40:f1:ba:ae:fd:ee:c5:34:8b:94:7f:8d:78:4d:85:
         9a:0f:cc:4a:6c:cf:3e:ac:3f:a0:4c:b5:18:81:f7:de:84:5d:
         f5:cb:94:5f:2c:17:e0:53:22:36:46:f0:fe:05:28:54:16:96:
         0c:16:fa:7d:be:8c:d2:f0:e7:32:a3:e8:99:5e:de:4a:08:f9:
         c1:a7:94:05:74:13:92:ab:c0:f7:b6:bd:2e:a3:29:92:04:89:
         c1:90:5a:67:23:58:f3:ce:e4:a9:aa:09:90:55:33:77:48:47:
         c8:b4:b3:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJDGBzykksCLaJgErkeAxurmBb48wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQzNEJGOURBOTFERTA4MjhEQTkzNzQwM0RCOEI5NDIz
MDY5NkJFODAeFw0yNjA0MjMxNjQyNDZaFw0yNzA0MjIxNjQ3NDZaMDMxMTAvBgNV
BAMTKDNBQUY2NjMxNjg5Q0Q2OTAzNkVCNjhCRDI2OTVGRDdBRDhCMEVDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMvqHhue+xy1Q7tt6+xPj9xnu
CcIXOsr5Eg/S/tZW8xs7kXXeoizg07OCD6kuYeV3nvj9BlnE1kg9b3cB6zuzxgGz
xWEr/nJqhW9Es1VN40L5x/yZvbyGYdzNpVk4FFc9lLNNs9htIchVIoy+NImXR8Pw
KJmLHP1QNb9taSk3fUDnYgRYl8F4dxH6RXolFk4Jii0J46MtduJQqR1WiUKhzyr/
llwlivhlbgFGoU7VFq2fpCuTnVMCHibuGNAgbYskvptKta9Gei11xvEqinXlm5DM
o9CAC2nvXJKMQKj2JDN/JBkV57ydR0UtG5iom6H9lpnbxaHbvOGy4z9TH/3zAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUOq9mMWic1pA262i9JpX9etiw7CkwHwYDVR0j
BBgwFoAUhDS/nakd4IKNqTdAPbi5QjBpa+gwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2VacUw0VjNXcmpDUGI5NUJhWnM2UFlocjhFUTVHYVJ3clA2Z3lweVFz
MUwvMC84NDM0QkY5REE5MURFMDgyOERBOTM3NDAzREI4Qjk0MjMwNjk2QkU4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg0MzRCRjlEQTkxREUwODI4
REE5Mzc0MDNEQjhCOTQyMzA2OTZCRTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdlWnFMNFYzV3JqQ1BiOTVCYVpzNlBZaHI4RVE1R2FSd3JQNmd5cHlRczFMLzAv
MzEzNDMzMmUzMDJlMzIzNDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzIzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAjwDwMA0GCSqGSIb3DQEBCwUAA4IBAQB1ugnoWh0Y
u6tpkGcr28FIJxBKtaUPK51IyE5b9Ayrxs3+GXGj8plvhkgBDHjauR6RkC3daCp9
CfQ86fGmRHhl9WlEWK1tZ0qLkhx9iUNagypX6ZHs6WJSSR45GjVYqwkBZJXoe8ik
OfzI8yR21cY5NvQOFQACuxB0FxQ8+yGeU+3+owrZtilgXPUWH8DyNA75WHpA8bqu
/e7FNIuUf414TYWaD8xKbM8+rD+gTLUYgffehF31y5RfLBfgUyI2RvD+BShUFpYM
Fvp9vozS8Ocyo+iZXt5KCPnBp5QFdBOSq8D3tr0uoymSBInBkFpnI1jzzuSpqgmQ
VTN3SEfItLOx
-----END CERTIFICATE-----
Generated at Wed May 13 17:37:52 2026 by rpki-client