Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3134332e3230322e3133322e302f32322d3232203d3e203533313637.roa
File:                     3134332e3230322e3133322e302f32322d3232203d3e203533313637.roa (raw, json)
Hash identifier:          TtZY43EzZhu65r37gV5m2WDiWuorC8LHyKSS7uvSVvc=
Subject key identifier:   63:CA:D0:12:B1:21:7D:0A:44:4D:FF:06:35:2F:32:89:EE:C2:0F:36
Certificate issuer:       /CN=B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29
Certificate serial:       4A4FA6094B2DA1CD2BA8454B22F3BD24AEA1F0B6
Authority key identifier: B6:97:FB:59:AE:1E:37:B2:34:3F:7A:E8:4A:ED:BD:1A:73:22:AF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3134332e3230322e3133322e302f32322d3232203d3e203533313637.roa
Signing time:             Fri 25 Sep 2026 17:40:08 +0000
ROA not before:           Fri 25 Sep 2026 17:35:08 +0000
ROA not after:            Fri 24 Sep 2027 17:40:08 +0000
asID:                     53167
IP address blocks:        143.202.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29.crl
                          rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 01:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:4f:a6:09:4b:2d:a1:cd:2b:a8:45:4b:22:f3:bd:24:ae:a1:f0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29
        Validity
            Not Before: Sep 25 17:35:08 2026 GMT
            Not After : Sep 24 17:40:08 2027 GMT
        Subject: CN=63CAD012B1217D0A444DFF06352F3289EEC20F36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4a:6f:ad:85:d3:df:3e:55:4d:78:d8:90:aa:
                    2a:b7:41:53:63:58:39:18:83:6c:a0:29:77:f3:e9:
                    72:78:fa:b8:f6:31:55:69:4d:00:61:50:b9:35:d1:
                    8c:6f:e4:53:92:50:ac:87:bf:e4:4f:2f:06:93:81:
                    78:d0:80:db:3f:7e:ef:84:eb:d4:64:10:ac:52:d8:
                    65:a6:65:17:29:91:86:b6:4a:27:e9:8c:a0:d6:60:
                    56:60:01:70:e3:78:85:f5:91:de:cb:3f:ff:9f:4f:
                    23:44:1e:22:9f:c5:4f:5d:12:6e:74:f0:27:fc:c2:
                    79:76:41:c8:13:90:cd:45:28:b9:dc:67:58:80:5e:
                    c8:d5:e8:7e:99:0f:f4:ba:74:36:1e:92:41:7a:27:
                    d8:f2:cd:b7:28:78:4b:88:f2:b5:fe:b4:3b:1e:02:
                    9b:84:56:33:51:34:0c:d1:7e:95:57:33:5f:90:fd:
                    34:1b:33:b7:25:04:5d:7b:89:b8:a6:9f:08:11:32:
                    f3:49:28:36:a7:33:16:28:aa:c1:c2:a7:c8:22:96:
                    1a:96:e7:9b:4c:34:7c:71:13:82:1f:5a:5e:32:ac:
                    c3:39:75:db:9d:a6:2c:8c:ae:59:ce:d7:22:ae:f8:
                    fe:22:4b:37:39:76:33:d8:44:e3:f3:19:04:38:a6:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CA:D0:12:B1:21:7D:0A:44:4D:FF:06:35:2F:32:89:EE:C2:0F:36
            X509v3 Authority Key Identifier:
                keyid:B6:97:FB:59:AE:1E:37:B2:34:3F:7A:E8:4A:ED:BD:1A:73:22:AF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B697FB59AE1E37B2343F7AE84AEDBD1A7322AF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3134332e3230322e3133322e302f32322d3232203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:fd:8f:d7:56:16:81:ed:05:57:35:1d:83:7b:24:43:d7:be:
         de:c0:04:18:96:b6:3b:ee:53:ff:4c:c6:4b:d1:0c:03:6a:ca:
         d9:95:bf:cd:1e:29:18:41:00:6f:7d:5f:6e:fa:2a:29:d5:cb:
         b9:bf:1e:f0:2b:6f:30:68:89:44:62:d7:39:0b:3b:5e:2c:0e:
         d7:2c:de:13:7a:95:d3:44:92:4c:39:54:16:da:32:7f:f4:99:
         50:dd:e0:94:cd:e6:f4:a7:a2:f9:c6:be:16:46:38:e6:50:2b:
         3f:11:dd:95:69:a9:52:0d:a0:e1:7b:f0:93:0b:c4:c6:10:c0:
         ed:95:66:ab:87:b8:25:6a:18:91:ab:88:0e:4c:5c:0b:83:64:
         81:63:85:f0:7b:53:fd:2a:40:d8:2d:f1:1c:51:0f:23:5e:16:
         31:4f:b0:a8:3f:d4:87:be:c9:4d:46:f5:74:c6:29:95:c6:77:
         1e:08:e2:ae:0c:45:04:d9:bf:9d:6c:9a:04:d9:e0:9c:09:13:
         0b:8b:a9:a9:26:f4:d4:99:0b:bb:93:39:cd:1f:ae:61:2c:3f:
         b1:0b:4c:4f:26:5b:e0:00:c2:e6:93:f9:a2:13:8c:8a:81:b1:
         89:09:c3:9a:38:d9:16:d1:a8:a7:67:ad:97:22:bf:63:b7:89:
         64:1d:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:27:28 2026 by rpki-client