Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa
File:                     3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa (raw, json)
Hash identifier:          rnobmDKHrogtQi6AqepHHveoEcKcEJMTBBwVUJ3hGOM=
Subject key identifier:   50:DB:46:C7:C8:43:3F:78:FE:08:D6:23:B1:34:E0:C8:E7:94:F4:1E
Certificate issuer:       /CN=2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB
Certificate serial:       6883822F556C2D17885835AF8D7BD9DA8AABC8A7
Authority key identifier: 27:68:82:6F:0F:52:C8:2E:2E:52:DB:6D:C6:A2:CC:E0:2A:9C:8D:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa
Signing time:             Wed 15 Jul 2026 12:29:30 +0000
ROA not before:           Wed 15 Jul 2026 12:24:30 +0000
ROA not after:            Wed 14 Jul 2027 12:29:30 +0000
asID:                     265157
IP address blocks:        143.255.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB.crl
                          rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:82:2f:55:6c:2d:17:88:58:35:af:8d:7b:d9:da:8a:ab:c8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB
        Validity
            Not Before: Jul 15 12:24:30 2026 GMT
            Not After : Jul 14 12:29:30 2027 GMT
        Subject: CN=50DB46C7C8433F78FE08D623B134E0C8E794F41E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:12:04:3f:ba:63:34:94:29:ba:2e:18:6f:f5:
                    1d:65:f9:bf:67:ab:bc:61:4e:53:20:2b:1c:9a:88:
                    ed:02:36:9e:e8:58:70:51:84:3f:04:1c:b0:e7:e3:
                    d3:74:4e:c7:98:b5:01:f7:c3:0d:55:52:77:1d:3b:
                    b9:2c:63:79:7b:4f:e8:41:4c:f2:94:52:20:d3:dc:
                    ef:c9:e2:94:73:71:58:b8:63:71:3d:02:bf:44:95:
                    ee:5b:5c:dd:11:6b:7b:3d:4d:28:29:b4:74:e5:39:
                    c4:5c:f9:7f:4a:a6:b0:39:ed:9c:c8:31:db:1f:dd:
                    48:60:ce:0c:7a:d5:58:fa:89:84:b5:15:89:8c:62:
                    5c:5e:c7:1a:26:d0:7c:88:a6:bc:7d:1c:4a:41:49:
                    c7:85:ee:65:0b:6b:cd:ea:36:e7:1e:6f:c7:89:70:
                    b5:d8:7b:d0:1c:eb:60:0d:cf:be:3c:6c:74:86:67:
                    1a:1f:5e:13:3a:50:24:18:96:20:95:57:fa:26:71:
                    ce:49:d5:53:17:6d:4e:4d:4b:5e:af:18:9d:62:7c:
                    4b:45:dc:65:08:91:c9:6b:0a:15:30:03:1c:d5:fa:
                    71:1b:31:94:20:00:6e:ba:5d:05:2a:a9:ca:92:69:
                    86:74:40:73:a7:fb:18:a4:c7:5f:81:de:fd:cd:8c:
                    f6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DB:46:C7:C8:43:3F:78:FE:08:D6:23:B1:34:E0:C8:E7:94:F4:1E
            X509v3 Authority Key Identifier:
                keyid:27:68:82:6F:0F:52:C8:2E:2E:52:DB:6D:C6:A2:CC:E0:2A:9C:8D:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2768826F0F52C82E2E52DB6DC6A2CCE02A9C8DCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/3134332e3235352e3234302e302f32322d3234203d3e20323635313537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:20:88:f8:7c:11:bf:86:3b:fb:4c:33:77:45:89:79:a3:5f:
         77:50:c5:37:20:51:de:cf:e4:2c:c7:6e:19:1b:18:04:76:74:
         e8:3b:72:e3:56:a2:0f:ad:e9:73:03:28:26:07:cb:67:0b:5e:
         fc:66:91:19:53:ed:59:df:6e:65:21:2d:1b:4f:93:a7:32:b1:
         48:6a:5a:f9:86:5d:26:9c:23:04:52:73:dd:a9:45:31:4a:23:
         c5:99:c8:dc:05:82:5e:f7:9e:ff:6d:88:57:88:8d:46:a2:9d:
         01:b0:59:df:bd:ae:15:d2:8d:5a:5a:96:98:61:d3:f5:a9:cb:
         80:7a:67:fa:7f:84:19:83:d1:52:ce:ac:1f:55:71:69:88:5a:
         49:47:14:8f:1d:29:2d:f6:f2:36:51:b5:7e:00:fb:6b:b3:ac:
         1c:38:17:ab:8e:d9:24:92:c2:8a:3c:b8:64:10:c6:51:a4:e7:
         6c:78:27:b2:f7:17:b9:1e:b7:6b:a2:ff:66:89:26:ee:14:2d:
         33:dd:aa:7b:c4:b1:e5:72:db:1f:c2:d6:f4:2c:94:cd:6f:7b:
         1c:e4:41:c8:df:6a:c5:08:67:60:14:f5:5e:52:69:64:d8:46:
         91:29:2a:d2:ea:2b:d9:3c:69:af:e0:25:08:14:fa:0e:19:1f:
         96:c5:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:54:33 2026 by rpki-client