Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/2/3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa
File:                     3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa (raw, json)
Hash identifier:          8uQz/5x9C6IxiodW0KNjgpBWVfaCvi7sSLB0wAUArkM=
Subject key identifier:   F8:FC:82:43:BF:A1:6E:BD:F3:F9:46:E7:1D:D4:DE:87:31:7E:47:F2
Certificate issuer:       /CN=4612639A521006F8E53F0AB09022248B8009E23E
Certificate serial:       7316CDD155FEB6C546E98DC967256D88407F5101
Authority key identifier: 46:12:63:9A:52:10:06:F8:E5:3F:0A:B0:90:22:24:8B:80:09:E2:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4612639A521006F8E53F0AB09022248B8009E23E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/2/3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa
Signing time:             Wed 25 Mar 2026 03:19:34 +0000
ROA not before:           Wed 25 Mar 2026 03:14:34 +0000
ROA not after:            Wed 24 Mar 2027 03:19:34 +0000
asID:                     264074
IP address blocks:        143.202.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/2/4612639A521006F8E53F0AB09022248B8009E23E.crl
                          rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/2/4612639A521006F8E53F0AB09022248B8009E23E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4612639A521006F8E53F0AB09022248B8009E23E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Mar 2026 05:19:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:16:cd:d1:55:fe:b6:c5:46:e9:8d:c9:67:25:6d:88:40:7f:51:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4612639A521006F8E53F0AB09022248B8009E23E
        Validity
            Not Before: Mar 25 03:14:34 2026 GMT
            Not After : Mar 24 03:19:34 2027 GMT
        Subject: CN=F8FC8243BFA16EBDF3F946E71DD4DE87317E47F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b4:03:44:30:18:9e:20:a0:cc:9c:10:37:d1:
                    c0:52:8a:59:0a:25:18:a9:67:25:5e:6c:1a:ab:1b:
                    db:73:b8:e5:45:a7:69:ee:af:20:30:2b:ec:25:f2:
                    fe:90:87:7e:10:7a:fb:f3:27:fb:1c:e6:c4:de:87:
                    21:af:e7:d5:1b:32:d3:75:f4:aa:9f:08:42:1e:24:
                    e1:20:de:b1:2f:fa:f6:0e:af:24:c4:5d:47:3a:8c:
                    fd:b2:bf:2b:37:c8:a1:07:8e:c0:2c:0d:24:66:bf:
                    85:5d:00:98:86:e2:23:ea:ae:f3:08:bc:69:2b:de:
                    19:12:a8:59:27:ab:f8:2e:9e:c1:50:13:e4:48:c8:
                    4a:a0:f8:f0:63:18:a5:b0:47:0f:bf:54:e7:74:77:
                    c9:39:50:ff:f3:bc:94:0a:04:bd:01:54:4e:b5:93:
                    81:ad:38:59:38:b3:55:a5:04:e2:b0:34:d4:b8:54:
                    48:2c:d3:28:78:22:b1:ec:5c:4c:75:f8:c5:d4:76:
                    13:77:e7:30:06:bb:7b:68:7a:88:52:1d:f6:c5:25:
                    1b:af:31:df:4d:91:41:36:c3:fc:b6:47:1c:75:5a:
                    f5:e8:93:8d:1e:df:66:04:f4:a3:ca:46:3f:24:e3:
                    75:3c:ab:dd:0e:cd:df:1c:28:e0:0d:33:d4:74:d1:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FC:82:43:BF:A1:6E:BD:F3:F9:46:E7:1D:D4:DE:87:31:7E:47:F2
            X509v3 Authority Key Identifier:
                keyid:46:12:63:9A:52:10:06:F8:E5:3F:0A:B0:90:22:24:8B:80:09:E2:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/2/4612639A521006F8E53F0AB09022248B8009E23E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4612639A521006F8E53F0AB09022248B8009E23E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKjR1CZec79ecdEbeWQ7N3pEXg9Fivz4aMboxZXuqjvm/2/3134332e3230322e3231362e302f32322d3234203d3e20323634303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:5f:1d:fb:6a:ea:1c:96:1b:ba:a4:17:44:7a:a0:29:fa:41:
         0a:00:e4:30:a3:b0:8d:fa:bf:b8:8f:21:c7:b9:96:c3:65:bb:
         86:1a:89:8b:7d:7b:e9:2f:d2:be:dc:3c:21:e8:e6:86:c8:6e:
         60:95:82:2f:32:c2:b6:00:28:49:96:47:c8:40:d3:0c:21:cc:
         df:2e:9b:54:31:67:71:1a:63:e5:32:9f:8a:be:4e:7b:4e:5b:
         67:d0:bb:5b:7e:c9:24:17:cc:43:1a:3b:d2:66:6d:0b:46:6f:
         4d:ed:00:e5:35:9b:59:8a:d5:c9:ba:39:aa:8a:4b:ce:eb:60:
         f0:57:8f:53:ad:81:db:d9:81:85:e4:0c:c8:e8:a6:88:68:ee:
         43:31:75:ca:1f:79:23:c6:ce:b9:21:c1:0b:7b:cf:64:bc:a8:
         0f:a4:89:e5:a0:f7:42:81:e5:0b:76:f3:7d:ad:d6:a5:e5:25:
         a3:ff:f3:d7:1c:a3:90:15:78:22:93:61:b4:a2:f4:f8:7e:d2:
         cc:68:eb:00:73:cd:81:45:25:a0:7b:c3:21:cd:14:40:6e:cf:
         eb:6f:2c:f9:e1:65:cd:c4:11:e3:ff:38:39:fd:a6:47:66:f5:
         b1:c6:2a:58:7d:5b:a1:b5:98:6a:3e:4c:88:f8:43:41:16:14:
         13:86:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:15:29 2026 by rpki-client