Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
File:                     3134332e302e3234312e302f32342d3234203d3e20323731323137.roa (raw, json)
Hash identifier:          iMI3tCFWosH/c6ZSEcHyBsZzr2RGyt8Ekj2avBLW++w=
Subject key identifier:   54:17:5D:7F:21:B8:7F:7A:FB:A4:00:DF:D3:02:93:54:27:3B:FA:EA
Certificate issuer:       /CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
Certificate serial:       6C387FF503139C1AE7E84B07D75BBEDD3EA95245
Authority key identifier: 84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa
Signing time:             Thu 23 Apr 2026 16:47:46 +0000
ROA not before:           Thu 23 Apr 2026 16:42:46 +0000
ROA not after:            Thu 22 Apr 2027 16:47:46 +0000
asID:                     271217
IP address blocks:        143.0.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl
                          rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 08:54:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:38:7f:f5:03:13:9c:1a:e7:e8:4b:07:d7:5b:be:dd:3e:a9:52:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8434BF9DA91DE0828DA937403DB8B94230696BE8
        Validity
            Not Before: Apr 23 16:42:46 2026 GMT
            Not After : Apr 22 16:47:46 2027 GMT
        Subject: CN=54175D7F21B87F7AFBA400DFD3029354273BFAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:b9:30:f1:7d:9c:d9:95:0d:1e:df:ce:5e:
                    fd:6c:57:9c:72:46:12:1b:a9:bc:35:72:ac:6f:67:
                    95:01:8c:21:8d:6e:35:f5:30:dc:31:60:b0:43:fd:
                    c0:26:d3:c9:25:28:4e:08:59:0b:0c:11:38:c0:84:
                    e1:ee:0e:cc:e7:23:d0:ee:b7:13:b8:04:11:bf:ea:
                    e5:91:44:24:28:3d:4e:31:5a:63:36:57:90:11:bf:
                    ec:d0:6f:b0:8f:5c:c6:24:fb:a1:fc:a0:79:99:d3:
                    15:5b:44:0b:32:66:22:72:40:df:b1:20:b0:00:af:
                    b1:27:dd:0b:dc:5e:9f:3e:20:0d:35:80:8f:96:27:
                    dd:45:71:5b:5f:fe:43:bd:52:2b:c0:0a:37:9b:83:
                    16:fb:19:84:e4:cf:9d:62:83:1f:82:11:ab:ad:b7:
                    8c:d9:61:fe:84:01:7b:b2:51:fa:9d:44:62:ba:cc:
                    70:6e:07:7f:d7:b5:c6:9c:70:24:ff:07:45:e6:4d:
                    27:4e:ac:d3:09:c1:6c:b1:96:3b:8f:d2:6f:1f:b4:
                    98:31:7e:3d:94:3f:10:84:b8:00:3f:4b:fc:f5:a5:
                    ee:e2:12:75:8b:a0:bd:e2:3d:f9:a6:66:03:5c:36:
                    c1:41:45:dc:e7:14:af:a5:be:9c:ce:7e:a8:4a:7d:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:17:5D:7F:21:B8:7F:7A:FB:A4:00:DF:D3:02:93:54:27:3B:FA:EA
            X509v3 Authority Key Identifier:
                keyid:84:34:BF:9D:A9:1D:E0:82:8D:A9:37:40:3D:B8:B9:42:30:69:6B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/8434BF9DA91DE0828DA937403DB8B94230696BE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8434BF9DA91DE0828DA937403DB8B94230696BE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7eZqL4V3WrjCPb95BaZs6PYhr8EQ5GaRwrP6gypyQs1L/0/3134332e302e3234312e302f32342d3234203d3e20323731323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:aa:be:9e:6b:05:ca:17:01:9b:64:39:e4:db:8b:07:7b:22:
         94:89:ee:db:0a:40:36:b8:a9:09:07:15:2e:b3:b7:c9:cb:37:
         f2:b0:1d:93:92:9f:39:3a:bc:76:67:a5:3e:91:56:62:e1:80:
         c8:ab:98:af:67:f8:f4:ef:1a:db:53:d6:1e:75:01:c6:51:c5:
         88:3a:83:ad:64:03:b4:13:ab:04:b7:b6:58:e4:c3:8d:b4:e0:
         81:fd:8c:d7:99:5c:03:5f:84:54:3e:77:70:5a:66:9f:f2:bb:
         ca:7c:b4:c4:78:f7:0e:c1:6d:f4:74:fd:2e:40:8f:05:c9:74:
         30:46:69:ce:a9:05:bf:c9:03:d8:6c:a9:f3:6b:32:6b:57:2b:
         a0:29:f9:7e:e6:0d:85:4c:7e:68:63:f7:4a:3e:1f:1d:31:d0:
         09:ca:03:ef:39:e9:c1:3c:c1:2c:c3:0e:12:2e:01:4d:d1:e3:
         a5:2c:69:6f:6a:81:db:81:cd:d3:ae:32:2e:98:28:16:7c:e3:
         e6:b9:81:07:d6:6e:ec:31:45:74:ba:3c:71:90:1b:9b:3a:40:
         4c:d5:5b:af:6e:9a:d3:e7:0d:09:44:f0:bb:88:d7:7c:f6:7f:
         0a:5c:4f:35:13:42:79:ad:18:a6:ed:69:a9:38:6d:65:1c:b3:
         74:f1:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:38:11 2026 by rpki-client