Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa
File:                     3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa (raw, json)
Hash identifier:          vws2+DybfpOXaWdg5Xmq8ouIHu7JBsplMfHAgnGqbrs=
Subject key identifier:   5B:C4:7A:20:12:1A:50:81:F3:66:1E:00:89:16:CD:68:73:92:F6:EE
Certificate issuer:       /CN=9D44FBF1856C3F2357A868EC86B6E77183228583
Certificate serial:       39D99F2E194938AF25B7457BF026F94F76CE2AE0
Authority key identifier: 9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa
Signing time:             Thu 19 Mar 2026 14:38:25 +0000
ROA not before:           Thu 19 Mar 2026 14:33:25 +0000
ROA not after:            Thu 18 Mar 2027 14:38:25 +0000
asID:                     265139
IP address blocks:        143.255.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl
                          rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d9:9f:2e:19:49:38:af:25:b7:45:7b:f0:26:f9:4f:76:ce:2a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D44FBF1856C3F2357A868EC86B6E77183228583
        Validity
            Not Before: Mar 19 14:33:25 2026 GMT
            Not After : Mar 18 14:38:25 2027 GMT
        Subject: CN=5BC47A20121A5081F3661E008916CD687392F6EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:d2:a4:2e:eb:61:d7:3c:3e:9e:e9:d1:81:
                    96:8a:1b:cd:fe:da:d7:d4:cb:39:ff:86:ba:1c:68:
                    02:d1:d9:98:4f:e6:6f:62:6e:d0:0b:fe:ab:c9:b8:
                    a1:d2:85:bb:80:87:02:b3:39:58:35:c2:fe:90:b3:
                    48:28:b9:03:e9:ed:9d:4f:4a:1a:44:b2:fd:68:1f:
                    a5:ac:97:e4:6c:e7:42:d7:92:50:da:42:0e:fd:65:
                    54:13:e4:61:fe:09:7d:78:a9:55:a4:17:0f:1e:29:
                    32:ad:e5:30:18:f4:c5:75:88:56:8f:06:85:34:e9:
                    f4:be:34:d5:7d:2e:d6:c1:83:2c:00:ac:bc:22:4d:
                    50:10:f8:04:0a:26:1f:ec:43:e3:d2:3f:51:38:d5:
                    25:9e:4c:d1:b3:f5:2b:0b:3e:4d:8f:9d:00:96:1f:
                    ee:21:67:60:12:df:7d:45:01:1e:97:f1:74:f1:f5:
                    9e:02:c6:19:da:fd:3b:f7:4b:2f:77:49:c4:5e:46:
                    d5:b1:94:f9:a7:bc:76:96:b8:ed:d9:9d:1a:fb:31:
                    bb:72:f8:3a:35:12:7b:29:0c:5f:84:c1:16:41:16:
                    ec:3a:42:cb:15:ea:93:cc:e8:2c:d3:90:e3:cb:bf:
                    33:a1:ed:7b:f5:34:67:f4:d7:f4:d6:a1:6b:71:ec:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C4:7A:20:12:1A:50:81:F3:66:1E:00:89:16:CD:68:73:92:F6:EE
            X509v3 Authority Key Identifier:
                keyid:9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35322e302f32322d3232203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:73:89:90:82:e7:86:b8:77:34:2a:c0:95:fc:19:da:29:65:
         50:f3:ca:8e:fe:ad:2c:30:e3:5e:9c:e2:91:fa:9e:d6:0d:88:
         b3:f4:3b:7b:d4:be:9a:f4:bb:65:1f:c4:10:ec:33:29:8f:ee:
         68:be:3e:50:b6:c1:62:75:91:22:d7:5c:21:99:63:ed:ed:02:
         68:68:84:74:88:5a:3e:41:5b:8e:82:20:3f:43:c4:df:43:66:
         cf:c2:82:77:96:4e:28:92:7e:ea:28:dc:98:4e:b6:de:ff:a8:
         a6:9a:3d:a7:6a:83:07:28:87:23:60:14:fb:07:47:52:c4:64:
         94:58:d6:3e:e3:77:b6:c4:f3:9d:6b:50:92:0f:52:25:b4:2c:
         ea:a8:32:04:03:d4:3f:84:26:39:91:29:1e:08:82:c4:bb:cd:
         e4:05:19:b6:5d:42:d6:f1:72:84:43:1f:95:f7:e4:72:6b:5b:
         e1:ab:cb:ff:ec:c7:1b:aa:49:4e:c7:ec:9f:24:7a:f1:c6:38:
         69:18:e3:b2:8a:26:92:47:05:0a:97:ca:53:89:f2:47:e8:f7:
         7b:9f:0d:41:27:65:27:91:e2:d9:48:fc:49:f3:e8:3f:ae:7d:
         ac:a8:57:61:52:51:51:7f:79:17:3b:3d:b3:91:01:38:5d:21:
         0f:59:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:07:40 2026 by rpki-client