Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa
File:                     3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa (raw, json)
Hash identifier:          f4drL7A2BBuE1mL0hhVWBrMdW0DP/rV4MpqhQ/LX3aQ=
Subject key identifier:   0F:BE:60:9E:A4:30:9D:5B:61:2A:7A:DE:73:E1:29:CB:F3:57:60:93
Certificate issuer:       /CN=B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE
Certificate serial:       29B8630D36540C3A0F91A76F4AAB99E3D4706F88
Authority key identifier: B3:E4:2A:DE:F1:FC:5A:82:DA:19:33:D4:CA:C4:6B:23:B6:F9:AF:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa
Signing time:             Fri 02 Oct 2026 12:46:08 +0000
ROA not before:           Fri 02 Oct 2026 12:41:08 +0000
ROA not after:            Fri 01 Oct 2027 12:46:08 +0000
asID:                     265122
IP address blocks:        143.208.92.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.crl
                          rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 04 Nov 2026 16:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b8:63:0d:36:54:0c:3a:0f:91:a7:6f:4a:ab:99:e3:d4:70:6f:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE
        Validity
            Not Before: Oct  2 12:41:08 2026 GMT
            Not After : Oct  1 12:46:08 2027 GMT
        Subject: CN=0FBE609EA4309D5B612A7ADE73E129CBF3576093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:01:55:d4:da:68:85:e0:33:00:9c:f0:66:
                    4b:d0:c7:f2:1b:ea:45:ef:e7:e6:eb:15:6c:43:8a:
                    7b:7f:f0:dc:85:22:04:e0:32:54:d5:6b:5b:f9:04:
                    e9:d5:7f:b9:65:be:d9:78:ed:05:88:b0:50:2a:82:
                    61:95:ec:65:a3:fb:d2:2a:95:ff:fc:cf:bb:a8:83:
                    9e:5c:67:0a:13:61:9e:4c:e6:c3:c2:81:7a:89:d9:
                    05:21:5c:42:39:b1:12:01:84:45:ca:03:75:74:a2:
                    c8:cb:4f:d4:2b:ff:46:43:93:e6:4b:01:73:d6:5c:
                    07:94:65:79:50:4d:83:a8:8d:33:73:68:56:1f:e3:
                    04:73:b9:b7:65:7d:92:d7:3c:56:4c:fd:72:18:09:
                    97:ae:24:bf:c3:5f:b7:79:10:82:e0:b1:3b:1a:f6:
                    7c:c1:e7:67:7a:63:a9:96:ce:a5:0d:d7:69:64:d5:
                    df:fd:e6:20:19:9c:1c:1c:96:54:a8:74:94:68:ab:
                    22:f3:97:a7:37:e5:84:d5:08:2a:fb:3d:de:82:39:
                    0c:48:d1:12:ea:21:be:ea:1f:98:59:f8:c5:3f:e4:
                    68:d0:de:e5:11:7c:5c:8f:81:ab:58:a6:c5:9a:eb:
                    21:fb:6d:be:b2:18:21:f9:1f:fc:82:19:39:74:3b:
                    d6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:BE:60:9E:A4:30:9D:5B:61:2A:7A:DE:73:E1:29:CB:F3:57:60:93
            X509v3 Authority Key Identifier:
                keyid:B3:E4:2A:DE:F1:FC:5A:82:DA:19:33:D4:CA:C4:6B:23:B6:F9:AF:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3E42ADEF1FC5A82DA1933D4CAC46B23B6F9AFAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4RF99GTSkE4YuY7hFCjtyysoLAUUuJCNvhvDrdBYXue/0/3134332e3230382e39322e302f32322d3332203d3e20323635313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:6a:c0:43:2c:06:05:18:5b:53:c8:f7:4d:49:9c:b9:88:24:
         df:8c:72:98:6a:fe:04:ff:78:fc:75:af:2e:12:f6:fb:83:c7:
         ba:54:c6:78:85:08:0f:46:7d:9a:fd:80:1b:90:c3:ba:f8:c9:
         f0:10:98:b0:40:09:5d:43:65:0c:b4:2e:be:7d:e9:5a:68:67:
         22:9d:22:52:75:70:e9:a3:e0:fe:76:06:91:b2:1b:3e:29:a1:
         9c:2f:91:83:d2:31:7b:5c:3e:19:30:d2:7e:7b:07:38:12:9f:
         f9:8e:16:37:5e:f1:f7:d3:d1:32:b1:60:9b:74:1c:52:3d:db:
         d3:0a:32:a2:46:c4:36:02:82:51:be:29:72:8f:92:cc:1f:0e:
         aa:ab:5c:bb:8f:be:67:da:5a:6c:c6:9e:08:cd:3b:e1:8a:b7:
         ba:29:5c:c5:fb:08:ee:76:6e:60:4b:3c:b7:94:83:2f:81:6b:
         4d:ea:23:b2:ee:33:68:e0:4f:a2:74:cc:43:ca:04:67:db:aa:
         52:18:04:ca:f9:57:a2:21:fe:56:b4:70:4b:bb:f0:42:a3:1a:
         75:4a:9b:17:13:dc:cd:29:5a:79:60:be:36:c3:7d:cd:1d:af:
         53:ae:dc:66:0d:7b:9b:f5:2a:e4:0c:9f:6f:74:51:6d:d0:0f:
         6c:fa:df:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:29:24 2026 by rpki-client