Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3134332e3230322e36352e302f32342d3234203d3e20323634303632.roa
File:                     3134332e3230322e36352e302f32342d3234203d3e20323634303632.roa (raw, json)
Hash identifier:          WDXuYZrwSvADcE1xzyxn5QhQc9Dwdf/fmnUvJiUz9wg=
Subject key identifier:   28:EB:BF:CC:F9:CD:05:FD:8D:AF:EE:80:2B:C9:A2:8A:37:63:EC:C3
Certificate issuer:       /CN=90B8CFE07E0E706628884AF9D5AACFAD47FE4D31
Certificate serial:       5CA6BB8525A34B8A4398514E922F9A53638AAC62
Authority key identifier: 90:B8:CF:E0:7E:0E:70:66:28:88:4A:F9:D5:AA:CF:AD:47:FE:4D:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3134332e3230322e36352e302f32342d3234203d3e20323634303632.roa
Signing time:             Wed 08 Jul 2026 13:26:53 +0000
ROA not before:           Wed 08 Jul 2026 13:21:53 +0000
ROA not after:            Wed 07 Jul 2027 13:26:53 +0000
asID:                     264062
IP address blocks:        143.202.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.crl
                          rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 16:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a6:bb:85:25:a3:4b:8a:43:98:51:4e:92:2f:9a:53:63:8a:ac:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90B8CFE07E0E706628884AF9D5AACFAD47FE4D31
        Validity
            Not Before: Jul  8 13:21:53 2026 GMT
            Not After : Jul  7 13:26:53 2027 GMT
        Subject: CN=28EBBFCCF9CD05FD8DAFEE802BC9A28A3763ECC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:60:22:30:64:4d:59:00:53:9b:3a:10:3b:
                    3e:c6:12:d0:24:dc:fa:33:b0:c0:74:6f:2c:be:bf:
                    87:d4:b8:28:15:0d:7d:75:2a:f0:6c:cb:d1:b4:e7:
                    57:c1:77:77:6f:e3:f3:02:2b:e5:c5:ba:51:26:ed:
                    f5:7a:6c:7b:fd:65:01:3e:1d:f6:03:e8:25:f9:e7:
                    f3:a7:71:d5:26:ca:b4:a8:35:d9:5e:a3:0b:71:de:
                    89:16:02:17:f1:3f:d5:99:66:f2:f4:09:b8:91:81:
                    b0:bf:17:7f:6b:64:d5:b1:03:c9:bd:56:80:ba:7a:
                    36:ed:77:bb:80:7f:e2:d7:53:a0:ac:e7:36:39:e8:
                    7e:a4:46:f3:27:70:3f:5e:bb:f1:ac:6f:83:15:fd:
                    02:fb:ad:2b:65:93:de:14:4e:a5:7c:b3:86:bb:9e:
                    71:11:2c:ef:00:5e:54:d2:ca:51:2b:e1:2f:2e:fe:
                    d1:94:f4:dd:f8:d3:a4:76:3a:2f:74:a3:49:23:3a:
                    19:f4:d2:7a:0b:62:9c:8c:8f:67:f2:93:7a:37:d4:
                    3f:25:f0:f4:55:b0:bd:ef:9c:05:55:e2:68:85:f5:
                    d5:df:7d:06:83:80:ef:ba:5b:2e:a5:1c:86:75:83:
                    70:a1:95:56:c7:c0:17:2b:ac:02:9b:5d:31:a0:9d:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EB:BF:CC:F9:CD:05:FD:8D:AF:EE:80:2B:C9:A2:8A:37:63:EC:C3
            X509v3 Authority Key Identifier:
                keyid:90:B8:CF:E0:7E:0E:70:66:28:88:4A:F9:D5:AA:CF:AD:47:FE:4D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/90B8CFE07E0E706628884AF9D5AACFAD47FE4D31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvYdhhdFJG1FL1AhR6PrJjStTXu1qnDozyZDk71QPZ7D/0/3134332e3230322e36352e302f32342d3234203d3e20323634303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:09:f5:82:97:17:bd:d6:25:e8:23:b2:c6:48:e8:af:04:47:
         e5:cd:43:75:35:07:4e:3a:0b:4e:eb:fa:65:30:a3:97:a1:db:
         fc:a5:e5:f0:c3:90:40:d7:13:2e:b6:f1:04:47:8e:a8:1b:1d:
         75:54:a5:80:01:ed:9a:b0:10:7a:8b:b5:2e:d1:83:ea:f4:72:
         78:cc:1b:6a:50:47:b4:b4:91:f8:b8:be:ea:ee:38:b8:57:cd:
         3e:cf:75:7b:e4:93:c6:3d:1d:54:8c:40:25:7f:72:c8:ee:1a:
         c4:07:63:61:58:d7:47:2c:a9:09:fc:e8:04:7b:d5:d9:d4:9f:
         ce:62:af:59:62:17:c7:2f:51:57:dc:98:21:37:be:9c:67:54:
         71:48:a7:83:a8:ae:c5:7b:32:89:fd:41:93:77:69:07:da:f5:
         70:81:a9:4e:a3:0a:ed:71:9d:5e:cb:f1:ac:2c:77:23:d2:4f:
         7b:5a:c5:fb:72:92:85:12:c6:8c:5e:df:9b:1f:c1:17:d8:27:
         a6:7d:ba:67:b0:e9:d1:70:72:d7:84:79:46:02:9f:ba:7d:83:
         09:53:98:91:d1:08:aa:45:1d:96:bd:ee:b3:f2:83:11:99:4a:
         6e:7a:75:f0:90:3e:01:c9:20:f6:be:ba:66:e9:28:bd:04:08:
         98:fe:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:54:37 2026 by rpki-client