Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3134332e302e3137382e302f32332d3233203d3e20323634323934.roa
File:                     3134332e302e3137382e302f32332d3233203d3e20323634323934.roa (raw, json)
Hash identifier:          vniUWjtkN7sDJKf9yodE4aarCiq2tlRfkKB2zBaXAaE=
Subject key identifier:   71:82:35:13:32:7E:EB:0B:02:82:2E:68:6F:83:D1:A6:F7:EC:72:06
Certificate issuer:       /CN=29E752800F8BF73453CEA055406DCC5F61330F19
Certificate serial:       43BCF0329D6BCB04C7A2A2D7BC8FC9CB38B04707
Authority key identifier: 29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3134332e302e3137382e302f32332d3233203d3e20323634323934.roa
Signing time:             Wed 25 Mar 2026 13:37:01 +0000
ROA not before:           Wed 25 Mar 2026 13:32:01 +0000
ROA not after:            Wed 24 Mar 2027 13:37:01 +0000
asID:                     264294
IP address blocks:        143.0.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl
                          rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 11:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:bc:f0:32:9d:6b:cb:04:c7:a2:a2:d7:bc:8f:c9:cb:38:b0:47:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29E752800F8BF73453CEA055406DCC5F61330F19
        Validity
            Not Before: Mar 25 13:32:01 2026 GMT
            Not After : Mar 24 13:37:01 2027 GMT
        Subject: CN=71823513327EEB0B02822E686F83D1A6F7EC7206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:03:b8:37:97:51:9c:2f:f4:b8:c0:62:d0:
                    6f:31:70:3a:61:7f:7e:c0:cb:5c:b9:47:10:29:f2:
                    60:91:dd:08:47:05:5a:56:63:ab:e5:d3:83:75:55:
                    45:80:fd:c4:9d:ca:e2:17:3f:5d:26:45:a3:b0:64:
                    8e:16:2c:72:cf:2d:55:d2:32:b1:84:8e:88:df:f4:
                    60:5d:40:4e:de:a6:67:a2:c9:76:31:64:04:b4:fd:
                    34:f5:47:2e:6c:38:2c:4a:12:ce:42:88:51:60:16:
                    7a:0d:ae:5c:46:5e:cf:31:c4:63:9d:e5:db:6b:8c:
                    70:ef:35:87:c9:c8:6a:e3:38:f8:41:05:22:de:0b:
                    9d:24:ee:45:a1:2b:54:dc:3f:b3:40:0d:77:76:b7:
                    46:24:71:2c:e9:6a:06:05:60:2a:59:01:12:5e:a8:
                    b4:77:10:3b:e4:55:b4:a1:c8:26:85:89:f6:40:11:
                    10:ae:78:a1:43:a3:86:fa:f4:2b:28:ea:e8:20:6b:
                    1a:49:3b:d2:48:80:0a:06:9b:96:13:28:55:8d:8b:
                    7c:d1:76:00:92:40:ee:45:3e:7c:e0:97:8e:8c:b0:
                    79:2f:b4:64:73:bf:db:40:60:71:fb:69:43:6c:34:
                    45:f1:ce:5c:ca:d8:56:ff:f0:06:1c:39:8f:fb:13:
                    55:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:82:35:13:32:7E:EB:0B:02:82:2E:68:6F:83:D1:A6:F7:EC:72:06
            X509v3 Authority Key Identifier:
                keyid:29:E7:52:80:0F:8B:F7:34:53:CE:A0:55:40:6D:CC:5F:61:33:0F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/29E752800F8BF73453CEA055406DCC5F61330F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29E752800F8BF73453CEA055406DCC5F61330F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86x48xLj26turkTUhqXzcBSas2xnEQohzqVdaKdDQKAv/0/3134332e302e3137382e302f32332d3233203d3e20323634323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:75:79:1b:59:96:71:51:29:66:17:3f:31:5f:0e:75:30:06:
         b6:cf:77:02:a1:1a:c3:9f:f0:c3:40:20:20:1f:d0:27:14:aa:
         4d:1a:f8:5d:2b:f5:df:86:00:93:b2:84:cf:f1:70:91:3a:e5:
         e3:fc:a4:2e:51:df:9b:9b:0c:6a:f6:d0:de:79:47:0f:77:b4:
         d1:37:81:b4:b0:b3:dc:32:ed:2d:ab:60:02:79:32:a1:34:35:
         ae:ca:ff:24:ff:c3:79:f7:23:86:16:83:90:d0:d6:98:22:4a:
         2b:e2:f2:08:c6:53:38:ac:52:f4:7e:44:89:1c:2f:27:e0:b5:
         9b:e8:51:01:3f:47:58:fb:38:5d:ed:58:ea:c5:20:18:ff:c4:
         47:a4:4c:84:ea:46:65:6a:11:30:63:c3:9c:39:67:94:55:57:
         bb:2e:86:4f:0e:1e:5f:0a:2c:13:d6:f0:fb:6c:82:78:62:ca:
         7a:a2:a4:f4:48:18:cd:67:6a:b5:75:61:65:ba:c6:6c:dd:81:
         5f:19:2a:8c:70:a2:a3:4b:7f:bf:fa:3e:ce:c9:57:60:e3:21:
         94:cb:48:0f:79:22:6e:24:4c:7b:d0:87:74:ab:3a:5d:ef:5c:
         e8:5c:f2:23:83:e3:d2:42:2f:49:e3:2d:2f:25:ec:61:18:78:
         ea:5d:62:77
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ7zwMp1rywTHoqLXvI/JyziwRwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlFNzUyODAwRjhCRjczNDUzQ0VBMDU1NDA2RENDNUY2
MTMzMEYxOTAeFw0yNjAzMjUxMzMyMDFaFw0yNzAzMjQxMzM3MDFaMDMxMTAvBgNV
BAMTKDcxODIzNTEzMzI3RUVCMEIwMjgyMkU2ODZGODNEMUE2RjdFQzcyMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNNAO4N5dRnC/0uMBi0G8xcDph
f37Ay1y5RxAp8mCR3QhHBVpWY6vl04N1VUWA/cSdyuIXP10mRaOwZI4WLHLPLVXS
MrGEjojf9GBdQE7epmeiyXYxZAS0/TT1Ry5sOCxKEs5CiFFgFnoNrlxGXs8xxGOd
5dtrjHDvNYfJyGrjOPhBBSLeC50k7kWhK1TcP7NADXd2t0YkcSzpagYFYCpZARJe
qLR3EDvkVbShyCaFifZAERCueKFDo4b69Cso6uggaxpJO9JIgAoGm5YTKFWNi3zR
dgCSQO5FPnzgl46MsHkvtGRzv9tAYHH7aUNsNEXxzlzK2Fb/8AYcOY/7E1VFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUcYI1EzJ+6wsCgi5ob4PRpvfscgYwHwYDVR0j
BBgwFoAUKedSgA+L9zRTzqBVQG3MX2EzDxkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZ4NDh4TGoyNnR1cmtUVWhxWHpjQlNhczJ4bkVRb2h6cVZkYUtkRFFL
QXYvMC8yOUU3NTI4MDBGOEJGNzM0NTNDRUEwNTU0MDZEQ0M1RjYxMzMwRjE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI5RTc1MjgwMEY4QkY3MzQ1
M0NFQTA1NTQwNkRDQzVGNjEzMzBGMTkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2eDQ4eExqMjZ0dXJrVFVocVh6Y0JTYXMyeG5FUW9oenFWZGFLZERRS0F2LzAv
MzEzNDMzMmUzMDJlMzEzNzM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM0
MzIzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBjwCyMA0GCSqGSIb3DQEBCwUAA4IBAQCfdXkbWZZx
USlmFz8xXw51MAa2z3cCoRrDn/DDQCAgH9AnFKpNGvhdK/XfhgCTsoTP8XCROuXj
/KQuUd+bmwxq9tDeeUcPd7TRN4G0sLPcMu0tq2ACeTKhNDWuyv8k/8N59yOGFoOQ
0NaYIkor4vIIxlM4rFL0fkSJHC8n4LWb6FEBP0dY+zhd7VjqxSAY/8RHpEyE6kZl
ahEwY8OcOWeUVVe7LoZPDh5fCiwT1vD7bIJ4Ysp6oqT0SBjNZ2q1dWFlusZs3YFf
GSqMcKKjS3+/+j7OyVdg4yGUy0gPeSJuJEx70Id0qzpd71zoXPIjg+PSQi9J4y0v
JexhGHjqXWJ3
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:20:36 2026 by rpki-client