Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/3134332e3230382e3134382e302f32322d3234203d3e20323634303932.roa
File:                     3134332e3230382e3134382e302f32322d3234203d3e20323634303932.roa (raw, json)
Hash identifier:          kSX6YU7UnrMUBUbZWVy3eS+LdLrfz4nY3Gxdb9aCXlQ=
Subject key identifier:   54:7C:62:52:A3:22:3E:D4:42:44:4C:DF:C3:85:63:17:51:85:8A:EE
Certificate issuer:       /CN=5FBCB1EF158A0F369859F4CE22712203039C8002
Certificate serial:       32953682CD6FF157FF4394CCF0D4F66433276D61
Authority key identifier: 5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/3134332e3230382e3134382e302f32322d3234203d3e20323634303932.roa
Signing time:             Tue 28 Apr 2026 20:19:43 +0000
ROA not before:           Tue 28 Apr 2026 20:14:43 +0000
ROA not after:            Tue 27 Apr 2027 20:19:43 +0000
asID:                     264092
IP address blocks:        143.208.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl
                          rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 17:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:95:36:82:cd:6f:f1:57:ff:43:94:cc:f0:d4:f6:64:33:27:6d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FBCB1EF158A0F369859F4CE22712203039C8002
        Validity
            Not Before: Apr 28 20:14:43 2026 GMT
            Not After : Apr 27 20:19:43 2027 GMT
        Subject: CN=547C6252A3223ED442444CDFC385631751858AEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4f:13:27:c5:d8:5b:73:eb:26:30:98:32:66:
                    10:c5:af:82:67:6d:dc:14:c5:a4:4e:05:93:18:71:
                    ec:97:94:d1:0f:65:fb:f5:6e:49:1f:30:b7:32:74:
                    fc:09:50:ff:1a:ed:8e:c8:61:36:7a:0b:0b:54:a2:
                    87:82:cc:21:b8:70:7f:27:f9:b6:17:f1:cc:cd:6f:
                    64:e2:f7:c4:10:6e:40:04:b3:aa:a6:43:fd:07:95:
                    aa:ff:62:e1:31:11:e3:21:07:1e:a8:82:a9:b9:4d:
                    dd:5c:c9:2d:25:63:5e:46:f8:3b:cf:39:4d:96:8e:
                    04:31:04:1b:b2:43:de:ee:36:3c:57:8e:fa:89:88:
                    2a:57:12:0e:90:0b:71:c9:81:42:87:bb:50:a4:13:
                    d3:4d:11:a4:19:e4:dc:6c:09:d9:89:c1:a6:4f:2b:
                    5f:22:ee:7a:4d:db:fa:a3:6f:06:4b:50:f2:6a:e4:
                    37:b1:5c:98:33:6c:3a:97:5e:99:dd:58:74:a5:52:
                    c8:51:01:eb:81:72:05:28:53:8b:48:3d:d9:fc:3e:
                    6c:19:fd:96:5f:02:30:e9:95:c1:3c:e0:5e:c7:1e:
                    d1:bb:d2:b9:b8:10:47:53:08:a0:1e:3d:29:f6:ac:
                    74:87:0b:c9:bc:2a:9e:5a:b3:3a:02:21:46:85:2d:
                    0b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:7C:62:52:A3:22:3E:D4:42:44:4C:DF:C3:85:63:17:51:85:8A:EE
            X509v3 Authority Key Identifier:
                keyid:5F:BC:B1:EF:15:8A:0F:36:98:59:F4:CE:22:71:22:03:03:9C:80:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/5FBCB1EF158A0F369859F4CE22712203039C8002.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FBCB1EF158A0F369859F4CE22712203039C8002.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EYDn7i8ocbgF4HRNnrsYeeB8H9gEfoaYYwWfQMbtJSSy/0/3134332e3230382e3134382e302f32322d3234203d3e20323634303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:22:88:56:9b:19:87:35:af:55:14:93:75:02:d7:e0:67:4f:
         3d:7b:92:29:b6:bd:f1:2a:98:db:da:c1:2b:0c:25:9f:88:a7:
         85:59:11:20:cc:98:41:a2:77:5c:dd:85:13:8b:cc:db:4c:f1:
         cd:ed:89:d6:9f:bc:b1:cb:dc:26:f8:e1:5b:fc:f2:15:9f:20:
         fb:ef:74:67:3a:1c:46:01:f0:ac:61:5f:4f:22:c0:8f:ff:67:
         fc:9c:f0:20:df:31:97:22:dd:4c:99:b7:ac:95:af:b2:df:f6:
         c0:97:6d:d2:59:c6:01:c3:be:5e:16:e3:92:70:80:b0:7f:bf:
         6f:15:9b:9b:de:8f:fa:11:00:b9:45:bf:12:c8:5d:4d:52:b5:
         77:c0:18:54:86:0d:7c:cb:b0:e3:e8:1e:8f:71:79:35:ef:fd:
         48:fb:2d:d3:fa:8f:71:df:b2:f0:89:95:88:29:6e:db:d6:bb:
         71:47:f0:54:b7:e6:7d:ba:3b:05:01:a9:fc:9d:4b:ef:79:f9:
         03:80:0d:38:b4:e3:c7:da:e9:db:16:fe:3b:a8:a8:1b:74:fe:
         46:15:60:c4:c1:9a:6d:c2:1a:c0:34:fd:53:09:6a:65:c3:aa:
         e5:a5:ee:7a:ce:d0:0e:98:c8:a3:ef:29:0c:10:94:8d:cb:c7:
         aa:9a:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:47:53 2026 by rpki-client