Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa
File:                     3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa (raw, json)
Hash identifier:          eERLLtubRsgpPkolHWd3fhaLdJt8fdXdBfjaTalaedA=
Subject key identifier:   54:86:B3:E6:04:28:D4:C7:64:96:ED:F6:EB:F9:23:CB:DA:22:12:81
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       2D720EBCC1F3BD1C8794FBA08903CDE8A5968B2E
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa
Signing time:             Mon 27 Apr 2026 18:35:19 +0000
ROA not before:           Mon 27 Apr 2026 18:30:19 +0000
ROA not after:            Mon 26 Apr 2027 18:35:19 +0000
asID:                     265141
IP address blocks:        143.255.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 14:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:72:0e:bc:c1:f3:bd:1c:87:94:fb:a0:89:03:cd:e8:a5:96:8b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: Apr 27 18:30:19 2026 GMT
            Not After : Apr 26 18:35:19 2027 GMT
        Subject: CN=5486B3E60428D4C76496EDF6EBF923CBDA221281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6f:83:cf:70:0d:a2:f5:7d:d3:ff:6c:83:65:
                    e2:27:ee:42:48:41:89:5c:5a:ab:ff:ef:6d:06:11:
                    b1:65:dd:96:05:0c:38:2d:64:c7:35:a9:96:fa:26:
                    7e:75:71:9a:22:19:ff:b4:17:2f:ba:f6:1a:16:24:
                    9a:d9:02:f5:95:8d:af:cd:10:37:64:0e:a7:ef:da:
                    83:da:4d:df:77:65:f7:df:65:d0:45:52:9a:97:e0:
                    5c:4a:d6:fb:e5:14:c6:1e:7f:f4:2a:80:11:29:2a:
                    27:ff:65:45:30:c8:7a:01:42:bf:f4:01:f2:a0:ac:
                    da:f5:9f:ef:c3:3f:f9:b1:12:b0:eb:65:4d:3c:72:
                    00:07:a3:dd:ae:22:74:fa:9f:62:1a:d3:aa:34:31:
                    01:c3:6a:b4:5d:3c:30:73:6b:53:a8:ed:ef:a7:34:
                    20:63:a8:25:42:fb:41:af:f3:e1:74:39:4a:aa:7a:
                    59:b3:9b:24:a0:a5:c1:f3:78:05:15:7e:53:f4:61:
                    f5:f1:1e:d3:ea:9c:6b:d7:5d:82:50:28:81:cd:59:
                    b4:e2:7b:98:c9:f1:18:e1:01:d1:d9:c0:cc:2d:9b:
                    bb:d0:aa:ee:d5:65:4a:3b:64:98:d7:84:71:8c:6e:
                    a6:80:9b:ea:12:d9:a1:d2:33:ba:33:3b:43:5c:38:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:86:B3:E6:04:28:D4:C7:64:96:ED:F6:EB:F9:23:CB:DA:22:12:81
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3134332e3235352e31352e302f32342d3234203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:9f:3a:74:2c:4d:77:9d:a6:38:2a:ea:f9:70:e3:6f:a8:
         55:da:96:76:55:38:6a:d1:33:75:ff:e8:58:34:a1:2b:c9:4a:
         27:02:ca:c8:ce:96:e6:ec:85:a2:c2:73:4a:93:98:a3:a0:a5:
         4e:0a:8d:b9:f7:6f:89:49:06:dc:87:3a:ce:ba:83:6c:1d:00:
         a6:81:f3:63:1c:b4:77:00:eb:2f:8d:bc:95:7a:43:16:34:93:
         a8:0d:65:94:a2:27:53:e2:f3:83:ae:90:ef:6a:41:5e:4b:30:
         9c:12:50:53:59:2a:eb:d8:80:a1:1a:cf:5c:79:d9:e1:24:9c:
         6b:47:1c:6a:2d:2e:54:ac:c8:85:dd:7b:96:98:77:89:63:a9:
         06:a4:ec:46:e5:1f:0e:2e:55:1d:10:62:d7:e9:e3:c9:45:e3:
         af:d7:df:71:cc:89:ba:b5:64:d0:32:1f:61:cf:1d:ea:9c:eb:
         7c:e3:8a:87:98:8f:b4:95:47:75:56:f2:6e:65:81:99:49:80:
         33:4c:6a:46:1e:d3:63:b2:1b:44:7d:05:b9:79:12:41:01:be:
         44:21:29:0d:d8:be:a5:a4:25:32:cb:45:91:0d:7f:bd:22:57:
         75:9a:95:6d:d8:50:00:67:06:cf:e3:ee:aa:43:2e:39:9f:0e:
         c0:6e:b4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:34:20 2026 by rpki-client