Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa (raw, json)
Hash identifier:          8z8DIqHq0HNrgcZTZvc7K4zqj9p4jVUzwMz902uKfb0=
Subject key identifier:   77:AD:29:AF:00:AB:FE:BC:67:7D:1D:74:32:4A:2E:F3:76:FA:42:18
Certificate issuer:       /CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
Certificate serial:       75927278E1DDA00EAAA8C4F8E7157481FC1FE1F0
Authority key identifier: 53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
Signing time:             Tue 03 Mar 2026 22:03:10 +0000
ROA not before:           Tue 03 Mar 2026 21:58:10 +0000
ROA not after:            Tue 02 Mar 2027 22:03:10 +0000
asID:                     61776
IP address blocks:        143.208.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl
                          rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 09:57:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:92:72:78:e1:dd:a0:0e:aa:a8:c4:f8:e7:15:74:81:fc:1f:e1:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4
        Validity
            Not Before: Mar  3 21:58:10 2026 GMT
            Not After : Mar  2 22:03:10 2027 GMT
        Subject: CN=77AD29AF00ABFEBC677D1D74324A2EF376FA4218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:68:a1:56:95:f7:3f:d3:e1:ae:f7:a4:6c:a0:
                    1d:40:6f:53:c9:b2:ef:34:6c:e8:7b:dd:bf:b5:34:
                    2e:4c:93:91:87:75:ad:54:97:9d:bb:ae:bb:f8:bb:
                    ce:39:1c:dd:4e:83:96:74:b9:23:3f:7f:94:de:9e:
                    67:23:58:23:cf:39:62:52:a5:e8:ed:37:27:1d:7e:
                    54:67:41:8b:8e:02:12:b3:0e:d1:1b:b8:e8:8f:85:
                    54:28:d3:51:9e:85:3f:fc:b0:9d:e7:6d:7c:4c:5b:
                    de:4e:c0:bf:f5:83:26:0c:d7:41:f0:b1:82:0f:e0:
                    d1:2f:11:24:e5:3b:c3:aa:85:f6:7a:2d:c2:4f:aa:
                    c6:cc:77:8a:10:bc:5c:2d:c9:6b:ab:03:70:23:ee:
                    59:4e:62:a1:b8:f2:35:00:6d:8e:d5:22:45:d2:5e:
                    d5:ef:f4:14:4c:14:4b:2e:5f:a5:9f:c3:1b:45:6b:
                    2d:ec:9b:0b:1c:83:1e:29:c7:88:4f:43:d1:e5:cb:
                    4d:82:92:46:59:89:ff:e7:3b:eb:35:65:a0:82:d2:
                    2a:f3:ac:59:a1:a0:ae:80:09:e8:ce:9e:96:9b:de:
                    8c:2f:9b:ec:60:3a:51:1e:8c:48:e1:09:ff:40:32:
                    1f:67:19:39:8b:d6:71:b3:49:0b:40:cd:0d:e1:5f:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:29:AF:00:AB:FE:BC:67:7D:1D:74:32:4A:2E:F3:76:FA:42:18
            X509v3 Authority Key Identifier:
                keyid:53:07:2E:0F:22:9B:5D:EC:1E:BC:8B:3B:B5:2B:29:D1:DF:86:A0:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53072E0F229B5DEC1EBC8B3BB52B29D1DF86A0D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:68:14:89:02:9d:68:c6:5b:77:40:54:bc:7a:6d:cf:9e:5d:
         8f:49:d2:2c:09:48:16:96:e9:a0:8c:f2:30:7e:4d:d7:af:21:
         f2:4e:7e:71:2d:57:aa:be:fa:f2:df:3f:28:d7:cc:5e:3b:d9:
         d7:0c:89:c3:24:01:6a:25:17:c2:69:db:03:87:4b:f1:45:9f:
         40:cc:ea:13:f1:86:09:88:43:60:e5:c8:6a:6b:c9:83:8f:5f:
         b6:95:63:55:ec:12:14:6b:f7:b3:9d:16:6e:3e:5f:9c:8b:9d:
         38:6f:e8:02:d8:43:8f:2d:a3:2d:18:e8:e3:29:6e:24:2d:9d:
         cc:14:0b:34:7e:f6:4a:d7:44:f3:71:54:44:c6:25:08:59:a2:
         db:20:96:df:76:de:25:e9:e3:cf:29:96:20:6b:e4:1c:51:b5:
         ee:e0:83:69:1f:b1:0d:7b:2b:41:a0:70:8a:87:18:f9:ca:f8:
         dd:60:49:fc:c3:6c:df:e4:7f:e9:54:b2:d6:03:08:f9:48:3d:
         cf:83:a3:38:6d:7f:3b:f1:65:ea:16:a3:9d:fa:30:85:32:14:
         0b:48:a9:d7:03:4a:51:23:fe:a5:3f:76:8f:e8:8d:99:47:d0:
         71:49:93:71:34:09:89:da:6d:17:7c:b8:19:4e:82:fe:0e:2f:
         9c:cb:5d:46
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdZJyeOHdoA6qqMT45xV0gfwf4fAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMwNzJFMEYyMjlCNURFQzFFQkM4QjNCQjUyQjI5RDFE
Rjg2QTBENDAeFw0yNjAzMDMyMTU4MTBaFw0yNzAzMDIyMjAzMTBaMDMxMTAvBgNV
BAMTKDc3QUQyOUFGMDBBQkZFQkM2NzdEMUQ3NDMyNEEyRUYzNzZGQTQyMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjaKFWlfc/0+Gu96RsoB1Ab1PJ
su80bOh73b+1NC5Mk5GHda1Ul527rrv4u845HN1Og5Z0uSM/f5TenmcjWCPPOWJS
pejtNycdflRnQYuOAhKzDtEbuOiPhVQo01GehT/8sJ3nbXxMW95OwL/1gyYM10Hw
sYIP4NEvESTlO8OqhfZ6LcJPqsbMd4oQvFwtyWurA3Aj7llOYqG48jUAbY7VIkXS
XtXv9BRMFEsuX6WfwxtFay3smwscgx4px4hPQ9Hly02CkkZZif/nO+s1ZaCC0irz
rFmhoK6ACejOnpab3owvm+xgOlEejEjhCf9AMh9nGTmL1nGzSQtAzQ3hX/u7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUd60prwCr/rxnfR10Mkou83b6QhgwHwYDVR0j
BBgwFoAUUwcuDyKbXewevIs7tSsp0d+GoNQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC81MzA3MkUwRjIyOUI1REVDMUVCQzhCM0JCNTJCMjlEMURGODZBMEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUzMDcyRTBGMjI5QjVERUMx
RUJDOEIzQkI1MkIyOUQxREY4NkEwRDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKP0IgwDQYJKoZIhvcNAQELBQADggEBAMNoFIkC
nWjGW3dAVLx6bc+eXY9J0iwJSBaW6aCM8jB+TdevIfJOfnEtV6q++vLfPyjXzF47
2dcMicMkAWolF8Jp2wOHS/FFn0DM6hPxhgmIQ2DlyGpryYOPX7aVY1XsEhRr97Od
Fm4+X5yLnThv6ALYQ48toy0Y6OMpbiQtncwUCzR+9krXRPNxVETGJQhZotsglt92
3iXp488pliBr5BxRte7gg2kfsQ17K0GgcIqHGPnK+N1gSfzDbN/kf+lUstYDCPlI
Pc+DozhtfzvxZeoWo536MIUyFAtIqdcDSlEj/qU/do/ojZlH0HFJk3E0CYnabRd8
uBlOgv4OL5zLXUY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:27:22 2026 by rpki-client