Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa
File:                     3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa (raw, json)
Hash identifier:          yYxjUHUN8aoECQHwYATCewxHHH1EokMh2GmQZc2wqaE=
Subject key identifier:   58:12:74:4F:48:CA:F9:21:EF:5B:0B:62:15:54:26:B1:D1:66:B7:00
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       0532EC48D3EA791432E38384765DCE20CD1F5C46
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:22 +0000
ROA not before:           Mon 27 Apr 2026 18:30:22 +0000
ROA not after:            Mon 26 Apr 2027 18:35:22 +0000
asID:                     265141
IP address blocks:        143.255.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:32:ec:48:d3:ea:79:14:32:e3:83:84:76:5d:ce:20:cd:1f:5c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:22 2026 GMT
            Not After : Apr 26 18:35:22 2027 GMT
        Subject: CN=5812744F48CAF921EF5B0B62155426B1D166B700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:cc:c0:81:8c:2e:49:91:e5:7e:28:2c:ae:
                    c2:ff:ca:63:4a:ab:ae:79:91:50:aa:4a:77:1a:f5:
                    52:14:fc:95:e7:dc:5c:d3:c7:7f:b0:37:d9:79:f4:
                    de:62:0d:8d:d0:11:23:8d:a4:f9:f9:93:8e:70:2c:
                    86:af:9f:e1:79:08:2f:92:30:29:61:9c:23:3c:b6:
                    d8:c7:93:97:ed:da:56:b5:0d:e7:4a:a1:9d:7e:47:
                    70:07:15:5d:2b:72:20:e1:59:36:f5:53:67:80:5f:
                    b2:f9:94:1f:7b:d5:4b:32:6f:be:b0:6c:fd:0f:34:
                    4d:4e:5e:72:6e:55:7e:77:0c:07:b4:05:53:55:83:
                    3a:cf:fc:15:e8:d6:cf:97:13:53:d9:47:dc:87:fe:
                    cd:03:24:05:4e:64:d6:1a:61:7a:05:26:03:c6:9b:
                    f4:6c:15:e2:6e:07:6a:30:50:de:4a:02:63:25:6a:
                    37:fc:dd:98:f0:b8:64:1b:bd:b9:f3:33:e1:9e:c8:
                    c6:02:29:8b:cd:38:29:15:0e:51:7e:f3:e5:91:83:
                    e7:76:0b:26:e8:19:f8:ae:0b:39:fd:1e:06:a2:9b:
                    ba:9a:49:c1:7a:45:f5:fd:09:80:b2:92:1d:b8:e0:
                    26:82:3c:13:04:0a:e5:d5:f4:1b:0c:01:bd:97:61:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:12:74:4F:48:CA:F9:21:EF:5B:0B:62:15:54:26:B1:D1:66:B7:00
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32322d3232203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:d5:a4:23:d0:c4:1e:6f:1b:34:ab:49:ea:28:ff:af:6c:17:
         7f:29:03:ac:c8:ec:f9:85:d4:a1:e2:b9:1f:07:cd:2f:c8:d1:
         05:42:6d:3f:4b:68:6b:83:36:a5:6a:82:c5:19:4a:ae:ce:df:
         a3:82:ac:73:06:be:f2:ed:51:69:87:e8:b0:09:6a:87:04:7e:
         20:9d:d4:3a:4d:c2:16:be:84:2d:7d:27:67:0b:4a:f1:99:50:
         ca:33:81:10:2e:31:6e:48:02:36:79:b6:3d:19:6b:b6:98:06:
         db:a2:a6:43:72:0b:f6:34:77:13:33:48:9e:0b:02:f1:a5:4c:
         be:d3:3a:15:10:7a:14:d9:60:fe:42:c3:3d:d3:77:cb:fd:49:
         16:07:c8:0c:31:65:89:82:37:ac:7f:06:36:97:65:b1:25:74:
         9d:61:5b:48:b3:53:fb:8d:57:d1:36:eb:07:39:1f:22:a0:34:
         3c:9d:59:98:21:19:7a:0f:c2:1e:73:0a:b0:18:38:30:36:76:
         94:93:18:35:66:3b:a5:f0:00:22:b2:8f:c2:31:d3:ea:5b:c1:
         14:fa:60:de:0c:31:ac:36:3b:83:3a:dd:47:0b:73:44:e6:4e:
         4e:1c:9f:fc:60:81:29:38:98:60:41:dc:fe:67:93:98:36:69:
         37:b9:47:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:22 2026 by rpki-client