Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3134332e3230322e36342e302f32342d3234203d3e20323634303632.roa
File:                     3134332e3230322e36342e302f32342d3234203d3e20323634303632.roa (raw, json)
Hash identifier:          w9zrXZ2CYtewiLUTczvkjWQUR2Mabi5ITzPQf5roSAU=
Subject key identifier:   3E:B9:F5:AE:9F:0A:64:39:DD:4A:46:14:4B:43:8C:F8:18:FE:88:C3
Certificate issuer:       /CN=90B8CFE07E0E706628884AF9D5AACFAD47FE4D31
Certificate serial:       3DF0A0BD794CC2288E5D276077DBCD1374E97899
Authority key identifier: 90:B8:CF:E0:7E:0E:70:66:28:88:4A:F9:D5:AA:CF:AD:47:FE:4D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3134332e3230322e36342e302f32342d3234203d3e20323634303632.roa
Signing time:             Wed 08 Jul 2026 13:26:49 +0000
ROA not before:           Wed 08 Jul 2026 13:21:49 +0000
ROA not after:            Wed 07 Jul 2027 13:26:49 +0000
asID:                     264062
IP address blocks:        143.202.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.crl
                          rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f0:a0:bd:79:4c:c2:28:8e:5d:27:60:77:db:cd:13:74:e9:78:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B8CFE07E0E706628884AF9D5AACFAD47FE4D31
        Validity
            Not Before: Jul  8 13:21:49 2026 GMT
            Not After : Jul  7 13:26:49 2027 GMT
        Subject: CN=3EB9F5AE9F0A6439DD4A46144B438CF818FE88C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:02:3c:35:ee:5f:da:6d:3a:e7:e9:8a:19:
                    26:7b:d1:b7:7c:4f:4e:69:43:84:8f:98:96:c0:aa:
                    ce:93:a5:6f:92:99:fd:e8:b3:6a:ad:8d:82:51:94:
                    48:ed:4e:78:03:bc:c7:59:2e:87:0f:bf:5a:9d:d8:
                    86:d6:f7:db:3f:8c:3a:b2:19:b9:01:53:87:29:2a:
                    27:de:9b:5f:c4:25:17:c1:1d:95:17:2b:5a:33:d5:
                    7a:87:04:52:dd:02:97:38:4c:f3:84:ed:90:af:1d:
                    3d:4b:b3:26:8c:2e:ad:01:91:f5:fd:9d:6d:61:eb:
                    0d:92:88:43:12:61:6d:ee:89:e4:80:95:75:d6:3b:
                    9e:7a:d0:6f:b0:b2:79:37:f8:90:b3:e1:26:f0:8e:
                    5a:d6:1f:3b:8b:8f:fc:3c:3b:8f:2e:ae:8d:5b:f8:
                    8c:0c:c7:94:5e:bd:ab:51:6e:1d:a8:69:9d:46:67:
                    95:58:42:1e:15:44:a1:41:5d:7b:87:61:e7:1d:64:
                    33:dd:b2:6e:50:58:7a:29:b2:00:36:d9:8e:46:ba:
                    65:db:bf:14:1e:26:61:13:9d:0c:ad:b4:b1:3b:7b:
                    84:3f:9e:85:35:f4:07:f4:2a:a4:d0:74:94:48:3b:
                    44:1a:36:70:b6:84:36:7c:60:b8:c1:c8:0b:18:2f:
                    ca:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B9:F5:AE:9F:0A:64:39:DD:4A:46:14:4B:43:8C:F8:18:FE:88:C3
            X509v3 Authority Key Identifier:
                keyid:90:B8:CF:E0:7E:0E:70:66:28:88:4A:F9:D5:AA:CF:AD:47:FE:4D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3134332e3230322e36342e302f32342d3234203d3e20323634303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:89:d4:9a:00:2a:5e:f0:90:82:d1:16:7f:89:70:b5:52:
         79:79:5f:b7:07:50:b0:1b:a3:89:20:8f:6d:fa:2a:61:38:5a:
         99:fa:16:7c:87:b3:66:31:16:c1:b1:bd:0b:30:76:45:d3:71:
         80:21:a9:2c:d9:e4:26:2f:87:49:47:71:df:ff:1b:11:40:03:
         b7:12:46:5f:96:14:83:c8:84:90:81:ed:7c:a9:1d:23:00:c8:
         2a:c9:f4:99:96:91:c1:fc:93:69:bd:d0:46:7f:3a:8e:b9:61:
         c5:4f:52:b3:ba:99:a0:82:bc:47:66:01:ac:13:5c:6b:f1:f2:
         9b:37:30:f1:a6:21:d7:97:43:a5:88:6e:42:82:bb:9f:0a:fe:
         0c:7a:34:c4:42:a1:70:0a:cd:7a:fe:d5:1c:f1:af:12:b9:19:
         4d:f3:48:f0:ea:31:ff:ea:1d:4c:a9:62:a5:37:d8:05:bb:b7:
         34:8f:fd:21:e4:a1:a2:40:ea:06:28:9f:0b:8d:95:89:2c:64:
         ca:b1:5f:aa:71:74:22:c5:3a:ae:93:1f:49:03:b7:f2:b4:9e:
         54:7f:b8:a1:be:89:79:2b:d4:e9:73:cf:b7:6f:ea:17:5f:1a:
         da:a5:a2:9e:7f:c4:2c:9e:7b:ae:ee:bd:29:7f:5e:12:6a:5d:
         b3:31:8e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:54:37 2026 by rpki-client