Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3134332e3230322e35322e302f32322d3232203d3e203631373534.roa
File:                     3134332e3230322e35322e302f32322d3232203d3e203631373534.roa (raw, json)
Hash identifier:          pxnVg1+88Djv5+W8xJ/2yT84ffO3N5qAIEiXWmlH82E=
Subject key identifier:   8C:1E:73:B9:D5:D3:E8:EC:C6:97:05:9D:6F:05:60:5C:C3:BF:21:92
Certificate issuer:       /CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
Certificate serial:       452151B070A21E9DCB7C706BF28B30E2D743F071
Authority key identifier: D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3134332e3230322e35322e302f32322d3232203d3e203631373534.roa
Signing time:             Fri 11 Sep 2026 20:14:25 +0000
ROA not before:           Fri 11 Sep 2026 20:09:25 +0000
ROA not after:            Fri 10 Sep 2027 20:14:25 +0000
asID:                     61754
IP address blocks:        143.202.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl
                          rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 06:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:21:51:b0:70:a2:1e:9d:cb:7c:70:6b:f2:8b:30:e2:d7:43:f0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5
        Validity
            Not Before: Sep 11 20:09:25 2026 GMT
            Not After : Sep 10 20:14:25 2027 GMT
        Subject: CN=8C1E73B9D5D3E8ECC697059D6F05605CC3BF2192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:b4:60:3e:5c:7c:1c:39:06:7a:31:33:31:
                    61:9d:dc:60:bb:e6:56:ca:4e:d8:03:39:b8:7f:7d:
                    2b:ab:88:ec:8a:80:bb:1e:36:92:58:00:db:99:22:
                    cb:3b:0a:ed:a0:dd:90:21:61:d7:8f:88:8a:82:68:
                    89:7e:7d:75:02:ea:1e:36:0b:a9:19:76:07:80:fc:
                    28:62:b2:2f:b0:a2:af:19:c6:aa:e0:45:5b:f5:f8:
                    44:5c:93:cd:f9:53:81:c9:8d:27:66:e2:84:48:93:
                    f5:32:90:0f:31:aa:fb:7e:19:56:4b:c7:1b:54:d1:
                    e9:b1:f9:2b:9c:81:2b:83:86:a7:1a:6c:dd:20:2d:
                    47:66:a8:c9:c4:24:ec:a8:49:4c:4c:e4:03:93:bf:
                    81:61:1a:b2:f9:9e:39:a9:9d:a6:cf:e3:13:19:4f:
                    c4:f4:11:92:f1:18:bf:4e:1c:88:3b:98:77:5d:f1:
                    4d:29:72:c2:28:dc:7f:fb:53:17:96:c2:87:e6:5f:
                    2c:77:af:b4:9f:6c:98:34:e1:79:54:e4:c9:b9:63:
                    77:8b:cb:45:b5:6b:d6:27:f6:c7:91:47:0c:fc:2c:
                    d8:0c:53:33:fd:4f:aa:61:eb:cc:be:b4:2c:85:63:
                    8a:b5:c0:3c:db:05:ba:9a:04:75:5f:c8:7f:53:5d:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:1E:73:B9:D5:D3:E8:EC:C6:97:05:9D:6F:05:60:5C:C3:BF:21:92
            X509v3 Authority Key Identifier:
                keyid:D9:BD:8E:48:A9:B1:3E:FE:BA:F6:0D:AF:4D:75:C5:47:DE:14:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9BD8E48A9B13EFEBAF60DAF4D75C547DE140BC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EmnRjasb6GbVw57qDqCDcdDvCv5XeXhuFJgi43rNbDdB/0/3134332e3230322e35322e302f32322d3232203d3e203631373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:1f:ca:04:ba:3f:82:57:72:6a:0b:ca:d8:9a:86:c3:64:dd:
         8f:28:f4:5c:4e:cd:0c:93:40:e1:d2:62:c9:80:db:d5:6d:a1:
         6f:39:81:a4:f3:ad:f1:51:24:3c:66:68:1c:00:97:13:80:2e:
         e4:5d:34:89:50:cd:bc:28:6e:1d:e2:7d:cb:97:af:9b:51:4a:
         26:8d:21:7e:0e:2c:a8:4b:cc:26:9a:cf:9a:2b:e5:a4:25:c9:
         eb:31:d2:9d:60:2f:22:40:7c:ca:27:d8:86:d8:d8:ff:d6:4a:
         d4:15:10:af:dc:f2:a3:13:fe:46:30:be:d1:b4:cb:51:6f:60:
         46:f9:d3:94:95:8b:83:36:24:b2:57:c8:89:fe:06:94:5b:1b:
         84:01:1a:e3:c4:91:a0:27:6c:36:09:97:73:83:8a:1f:07:f9:
         45:0f:3d:86:a0:6e:95:b6:ef:07:ec:38:11:b0:74:1f:29:19:
         c8:58:39:91:61:a5:6b:19:d3:9d:c5:aa:f0:c4:32:4b:86:31:
         f8:91:42:4a:2a:0f:55:88:b2:2b:c4:e9:ae:52:f6:a3:01:78:
         e9:f6:3a:c2:b1:b1:b1:e1:86:99:9c:5c:17:fc:ae:d3:9d:4c:
         05:d3:a2:06:9c:a4:54:8e:d2:d4:3c:64:ca:4b:06:55:26:d6:
         3a:17:4c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:51:19 2026 by rpki-client