Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35352e302f32342d3234203d3e20323635313339.roa
File:                     3134332e3235352e35352e302f32342d3234203d3e20323635313339.roa (raw, json)
Hash identifier:          mHn9A6A9w/QBgKLPvgugar8+FX6KQwG1LEM9Vgts5Po=
Subject key identifier:   0C:E6:8E:8E:51:1A:95:16:0B:0C:B6:B6:59:FD:24:A5:C8:22:18:21
Certificate issuer:       /CN=9D44FBF1856C3F2357A868EC86B6E77183228583
Certificate serial:       5B144ADA26A6C5B384131F4AD8090C5894995D7B
Authority key identifier: 9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35352e302f32342d3234203d3e20323635313339.roa
Signing time:             Thu 19 Mar 2026 14:38:57 +0000
ROA not before:           Thu 19 Mar 2026 14:33:57 +0000
ROA not after:            Thu 18 Mar 2027 14:38:57 +0000
asID:                     265139
IP address blocks:        143.255.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl
                          rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 16:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:14:4a:da:26:a6:c5:b3:84:13:1f:4a:d8:09:0c:58:94:99:5d:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D44FBF1856C3F2357A868EC86B6E77183228583
        Validity
            Not Before: Mar 19 14:33:57 2026 GMT
            Not After : Mar 18 14:38:57 2027 GMT
        Subject: CN=0CE68E8E511A95160B0CB6B659FD24A5C8221821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ae:95:3b:78:8b:ae:49:ba:0c:fd:93:8b:bc:
                    f4:c1:fe:f7:6e:62:c9:72:e6:a5:ba:b1:ad:e4:5f:
                    e2:40:d8:e1:eb:4e:77:95:7a:83:c9:03:21:96:b3:
                    a4:2e:2a:bc:db:71:eb:14:ca:b7:4c:ba:2b:3b:aa:
                    90:40:80:e5:48:d6:67:9d:70:ab:0e:df:2f:c5:12:
                    04:dd:f7:8d:4a:30:04:01:38:58:ab:a9:3b:54:c4:
                    1f:c9:98:68:2c:9f:06:0d:35:d0:38:5b:d9:6e:04:
                    57:6d:31:1b:a7:f6:39:82:a5:93:2f:52:2c:7c:60:
                    b0:07:c1:7c:7c:d8:83:23:6e:a6:5f:51:eb:23:21:
                    40:0c:c7:92:08:cf:01:49:0f:ec:e5:09:80:b4:e0:
                    25:72:e7:5d:8b:48:a0:14:4f:60:e7:89:4f:b6:d4:
                    7b:32:a1:62:d9:73:c5:94:5f:3b:0d:cb:2a:1e:28:
                    6a:06:0d:04:8f:75:cf:a7:ad:1b:fe:63:65:53:1f:
                    d1:95:0b:ef:73:9f:27:c3:c1:6e:32:3a:f7:82:c9:
                    bb:6f:dd:61:0b:ab:e3:35:8a:74:b0:5e:ac:14:32:
                    8c:af:4b:d8:02:19:2e:c5:36:cf:bb:97:97:0f:2b:
                    41:75:e8:03:45:35:36:ee:c2:94:af:da:9a:34:63:
                    0c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E6:8E:8E:51:1A:95:16:0B:0C:B6:B6:59:FD:24:A5:C8:22:18:21
            X509v3 Authority Key Identifier:
                keyid:9D:44:FB:F1:85:6C:3F:23:57:A8:68:EC:86:B6:E7:71:83:22:85:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/9D44FBF1856C3F2357A868EC86B6E77183228583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D44FBF1856C3F2357A868EC86B6E77183228583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYCCovAM3iMVZTC7a1ZXHjEgMEaknJfQ8goP1VTojXoz/0/3134332e3235352e35352e302f32342d3234203d3e20323635313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:e6:57:35:fd:25:53:e7:f8:3e:71:ea:dc:f7:00:e4:ae:
         17:1e:9f:d9:ff:14:71:a8:ff:70:d2:af:75:17:53:3a:9a:35:
         f3:51:5f:46:66:05:eb:76:d2:dc:ba:b5:5e:16:97:a6:7b:40:
         97:4e:e8:15:b7:78:54:0f:11:c7:84:f4:2f:3f:f1:b0:96:00:
         14:ef:7b:32:1c:a9:2d:5b:c4:05:7c:3f:ba:c0:08:19:05:69:
         b4:e1:16:3e:ac:cb:a8:63:d3:69:f8:3d:39:9e:f8:04:7a:d4:
         b1:6f:be:89:b1:63:e6:ee:c9:97:0d:40:52:72:75:7e:17:2c:
         c7:4c:a9:84:f2:8b:03:e5:28:3e:dd:64:ed:c5:34:98:12:bd:
         da:ae:7b:33:28:7f:5f:1c:e1:89:11:dc:99:03:44:ee:29:d5:
         ea:ea:f6:9b:e0:9a:0e:24:26:9e:64:cb:ea:68:71:c7:0e:0f:
         c5:a5:c2:4f:03:7e:29:94:5f:55:a7:03:16:a6:b8:5a:1c:38:
         76:64:bd:1b:3b:de:26:8a:ab:21:48:48:01:bb:93:a7:3e:e1:
         91:89:bb:d1:2a:8c:a4:01:bb:ef:f5:fe:2b:32:be:5c:2c:67:
         40:b3:6a:5e:76:dc:7a:36:17:7a:4e:85:2f:87:43:ab:26:1b:
         44:27:f0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:44:44 2026 by rpki-client