Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32332d3233203d3e20323635313431.roa
File:                     3134332e3235352e31322e302f32332d3233203d3e20323635313431.roa (raw, json)
Hash identifier:          Q4qs1MdNnTpU6DKVwg4ehoPs86Wj04PDYGejD7ZCxkg=
Subject key identifier:   F4:BC:84:9A:F1:69:69:52:20:61:7A:22:FA:BF:2E:CB:1D:13:18:8F
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       66842428360298C513D433E94BB65837D2E37D13
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32332d3233203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:19 +0000
ROA not before:           Mon 27 Apr 2026 18:30:19 +0000
ROA not after:            Mon 26 Apr 2027 18:35:19 +0000
asID:                     265141
IP address blocks:        143.255.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:84:24:28:36:02:98:c5:13:d4:33:e9:4b:b6:58:37:d2:e3:7d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:19 2026 GMT
            Not After : Apr 26 18:35:19 2027 GMT
        Subject: CN=F4BC849AF169695220617A22FABF2ECB1D13188F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:8a:6b:d4:57:27:03:a0:35:82:80:57:8c:
                    bd:ed:9e:1c:08:e2:45:cc:fb:0d:dc:1b:0c:05:f8:
                    d4:46:5f:62:8d:5b:33:e8:65:67:9e:84:42:d6:54:
                    ad:d6:49:d1:a1:b2:e9:9e:cc:34:1f:ee:2b:9f:a9:
                    b8:42:54:27:ee:d6:86:81:32:6a:f4:a9:90:33:65:
                    bf:3f:0d:6b:a3:4a:2b:ed:a4:f3:34:0c:bf:e9:21:
                    cf:d7:46:6e:8d:f5:e8:02:fb:56:91:53:7d:b4:bf:
                    b2:5b:d4:ff:43:aa:bb:0c:f3:33:99:53:1d:18:3f:
                    62:ec:28:9b:e8:9f:e6:ac:05:6d:db:73:8b:f9:3a:
                    99:65:f5:a9:8b:2d:2f:2c:66:d8:28:21:79:e6:3b:
                    bf:da:d7:21:3e:b3:03:5e:ad:f6:10:9b:8d:dc:dd:
                    bd:63:2c:95:12:b4:1b:ef:b4:a5:01:b0:fd:66:bf:
                    dd:61:7f:9f:90:c6:2c:0d:be:16:e0:0a:81:b3:0b:
                    1f:2d:0b:95:6b:ca:9a:a9:6d:45:be:40:61:e7:1a:
                    27:a9:a9:0b:c7:fc:37:28:c9:4c:80:bf:5a:b9:7f:
                    ea:0f:60:6c:37:d7:20:62:7f:83:2b:1d:ed:f0:f1:
                    81:d5:25:c4:d4:5c:f7:10:86:3a:b4:ec:10:d8:11:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BC:84:9A:F1:69:69:52:20:61:7A:22:FA:BF:2E:CB:1D:13:18:8F
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31322e302f32332d3233203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:70:1d:37:2d:55:6f:71:a8:70:31:c3:b9:fc:d0:81:e7:e4:
         ce:bf:96:ae:e9:d3:3f:0b:63:1a:62:f3:00:a5:f6:cb:8f:14:
         dd:9e:9e:43:f1:c8:ae:38:46:02:05:72:74:8f:28:a8:37:dc:
         76:44:cf:a5:f6:39:0b:2d:14:0e:82:b0:dc:41:90:0e:34:9b:
         51:6e:f7:e4:ad:6c:ea:ad:e1:dc:b4:84:a8:54:92:aa:44:f1:
         76:70:1c:82:4c:bc:8d:54:4c:22:6d:27:76:15:7e:1b:40:ce:
         41:80:c4:4e:1b:5c:59:30:bc:d8:1c:c6:2b:6f:cd:91:b5:15:
         05:d8:f5:85:99:36:6f:75:e4:05:50:62:07:8c:c7:30:4c:de:
         22:f2:9e:8e:72:cb:8f:87:0a:1e:00:12:72:58:30:70:e0:fb:
         6f:48:8d:e3:7d:e5:69:8d:1a:a1:3b:b1:0c:b3:2f:e8:a0:4f:
         13:64:a3:87:53:1d:0a:8c:eb:2f:01:ec:d8:cd:cf:c7:0e:48:
         c3:56:4c:28:33:bc:f8:2a:c0:19:bf:a9:27:51:3f:54:ad:fa:
         4c:1d:68:fc:ce:73:bd:37:29:f4:c8:7c:81:60:e6:62:4f:06:
         82:45:73:0f:50:66:a0:bd:e9:34:8f:fc:40:23:93:96:a0:36:
         cc:fb:a1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:27 2026 by rpki-client