Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa
File:                     3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa (raw, json)
Hash identifier:          WdOMStptAdVLAzgy7We6y6mJMb+I+1NkOHMJgdA6NYU=
Subject key identifier:   A7:AC:3E:2F:5C:51:A3:5F:58:CE:FC:D8:DE:8B:AF:19:47:27:AA:1C
Certificate issuer:       /CN=9D44FBF1856C3F2357A868EC86B6E77183228583
Certificate serial:       5984650690ECA9FEB39817D7F7152841FD690F70
Authority key identifier: 9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa
Signing time:             Thu 19 Mar 2026 14:38:46 +0000
ROA not before:           Thu 19 Mar 2026 14:33:46 +0000
ROA not after:            Thu 18 Mar 2027 14:38:46 +0000
asID:                     265139
IP address blocks:        143.255.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl
                          rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:84:65:06:90:ec:a9:fe:b3:98:17:d7:f7:15:28:41:fd:69:0f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D44FBF1856C3F2357A868EC86B6E77183228583
        Validity
            Not Before: Mar 19 14:33:46 2026 GMT
            Not After : Mar 18 14:38:46 2027 GMT
        Subject: CN=A7AC3E2F5C51A35F58CEFCD8DE8BAF194727AA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8e:0b:73:5e:a9:c2:3d:20:7c:fe:e1:d8:3c:
                    ca:10:74:f0:fd:f3:f7:99:63:9d:01:ac:03:96:a8:
                    b8:41:5f:9f:b0:0b:87:d4:67:50:39:8f:01:e9:5f:
                    d2:eb:5d:7c:e6:dd:65:a7:49:2e:e8:08:72:44:62:
                    1d:d3:89:a7:8a:6f:44:25:44:ea:de:45:a5:86:4d:
                    ee:54:c6:74:c8:b3:25:52:96:fb:5a:a2:d4:7f:71:
                    85:29:09:04:30:d2:c8:20:6b:33:1a:56:1b:39:28:
                    ae:dd:f9:c8:eb:f6:4e:c1:da:ac:8b:b7:e2:fa:11:
                    37:39:60:d4:6c:34:c4:13:15:fb:fa:4f:92:27:b7:
                    de:59:df:67:d7:93:84:78:d8:6d:28:d8:fd:8f:dd:
                    ad:c9:2d:3c:2b:2b:5a:5c:d4:14:34:6e:f7:97:d1:
                    47:bb:64:a9:99:2d:83:04:a9:51:aa:c4:35:d4:15:
                    6c:b9:07:75:dd:67:89:19:6e:02:b4:c1:57:37:a3:
                    81:7c:a3:94:28:90:5b:fe:95:44:ae:5a:8a:87:02:
                    e6:cb:b2:c3:85:71:51:08:0f:e6:2b:1a:71:5f:94:
                    91:13:e8:ca:33:f0:40:34:76:79:99:65:79:1b:de:
                    d2:72:00:06:08:4c:92:fb:35:98:17:97:ef:55:4c:
                    38:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AC:3E:2F:5C:51:A3:5F:58:CE:FC:D8:DE:8B:AF:19:47:27:AA:1C
            X509v3 Authority Key Identifier:
                keyid:9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35342e302f32332d3233203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ab:10:2f:43:bf:6e:5c:f4:38:d0:26:ed:fa:bc:58:ef:b4:a5:
         91:cc:73:b0:2f:77:60:df:b2:90:d3:47:33:9d:1b:d0:b6:a6:
         71:a4:36:1a:12:6a:26:e8:53:15:00:e4:f6:92:17:a4:21:29:
         d6:90:9f:38:72:41:ea:2e:46:18:47:1d:c2:37:62:75:37:bc:
         e6:26:5b:95:83:fc:c8:cf:6c:54:8a:76:bd:45:9d:6f:8c:3e:
         04:24:aa:e0:35:cf:04:1e:8d:ca:05:8e:1a:4b:37:39:29:33:
         48:63:93:48:6f:50:a5:0b:cf:f3:a0:8f:77:2c:25:02:77:95:
         f5:2a:44:4f:1d:4f:1b:08:c8:15:5e:ee:1e:c3:b8:03:f6:97:
         1b:22:17:ab:a5:5d:e9:ba:fa:db:6e:ce:41:ca:d5:e0:6a:96:
         49:37:72:2d:42:e7:58:40:0b:1b:7a:38:d9:a1:d8:49:b1:e8:
         5c:4b:37:e1:50:21:75:9e:e5:e8:db:6e:2f:5c:14:44:2b:76:
         c0:bc:4c:83:ab:c6:1f:69:ce:5e:7f:6a:84:28:ab:a2:63:a8:
         e6:e8:b8:c9:46:ec:97:23:bf:f0:08:0c:55:70:d2:09:79:cc:
         d6:dd:09:f0:9e:3c:b8:fb:78:2c:bc:4b:bb:8b:33:5c:0c:90:
         96:fa:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:02:46 2026 by rpki-client