Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3332203d3e20323634303635.roa
File:                     3134332e3230322e302e302f32322d3332203d3e20323634303635.roa (raw, json)
Hash identifier:          meRvkcPhAd/NtixxO6eagDL0NrsDnujjOufK1VS1mSA=
Subject key identifier:   46:03:41:3F:F6:B3:F7:76:EE:AB:41:ED:89:5C:72:9A:2C:8B:92:1C
Certificate issuer:       /CN=1753C7A1A8FB4DFD63862ED1AA2511AA151B1109
Certificate serial:       2421766B78AF34182F64023282C64B2F7D2684E6
Authority key identifier: 17:53:C7:A1:A8:FB:4D:FD:63:86:2E:D1:AA:25:11:AA:15:1B:11:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3332203d3e20323634303635.roa
Signing time:             Thu 16 Jul 2026 18:03:44 +0000
ROA not before:           Thu 16 Jul 2026 17:58:44 +0000
ROA not after:            Thu 15 Jul 2027 18:03:44 +0000
asID:                     264065
IP address blocks:        143.202.0.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.crl
                          rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 24 Jul 2026 14:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:21:76:6b:78:af:34:18:2f:64:02:32:82:c6:4b:2f:7d:26:84:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1753C7A1A8FB4DFD63862ED1AA2511AA151B1109
        Validity
            Not Before: Jul 16 17:58:44 2026 GMT
            Not After : Jul 15 18:03:44 2027 GMT
        Subject: CN=4603413FF6B3F776EEAB41ED895C729A2C8B921C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:09:60:c3:88:a0:fd:13:62:ca:a2:9b:f5:
                    6b:bc:a3:0c:55:3a:da:13:dc:87:ce:2a:33:68:48:
                    5d:68:dd:a4:6a:f9:6f:a2:e9:1e:61:0e:30:f9:4c:
                    f8:9b:76:6b:f9:ab:f3:b1:c4:95:75:d8:56:60:59:
                    b1:25:d4:1d:e2:f1:8f:7a:74:33:80:c0:b9:e1:c6:
                    26:e5:e7:05:3a:64:73:44:63:81:e8:bd:23:b9:fb:
                    08:ae:f9:89:08:38:08:52:a7:90:61:59:05:ef:d6:
                    2d:77:1b:09:e7:96:e2:00:f4:3a:8a:09:33:b1:a4:
                    70:42:a1:ca:52:8b:6a:05:64:00:0b:10:24:30:23:
                    eb:c7:dc:3e:af:7b:c4:c6:0b:87:94:7d:c1:72:4f:
                    ee:86:af:6a:63:48:25:98:5c:5f:66:57:58:dd:4f:
                    92:38:e1:ea:c9:f5:54:70:0d:20:db:a5:89:84:4b:
                    21:d0:40:32:ac:d6:34:b1:19:8e:a4:68:66:28:01:
                    32:39:84:37:40:89:fb:56:9a:bd:15:d0:d0:04:5c:
                    ff:2b:a6:c0:b9:06:ea:65:4b:77:4a:bc:e1:6d:44:
                    22:5f:de:8d:29:77:ed:c9:d1:b7:1b:42:c4:be:c9:
                    7f:f7:9c:9e:ef:50:0d:dc:0c:28:a2:83:d5:c1:71:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:03:41:3F:F6:B3:F7:76:EE:AB:41:ED:89:5C:72:9A:2C:8B:92:1C
            X509v3 Authority Key Identifier:
                keyid:17:53:C7:A1:A8:FB:4D:FD:63:86:2E:D1:AA:25:11:AA:15:1B:11:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1753C7A1A8FB4DFD63862ED1AA2511AA151B1109.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fc99dqVeQW26eSoW87ho6AcTGgatndcEFXaokMps5mFV/0/3134332e3230322e302e302f32322d3332203d3e20323634303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:e2:3b:fc:0f:33:42:19:03:e6:0c:9a:8f:f3:6a:1d:03:fc:
         93:08:ca:cc:97:09:92:22:a6:42:5d:fe:74:29:dc:eb:46:0b:
         15:ce:37:0a:ff:94:f0:61:dc:44:2b:8c:6b:aa:be:da:04:57:
         df:19:12:c2:f3:48:3b:9d:76:4e:08:5f:b4:af:81:53:0e:51:
         1c:26:e7:c0:5e:b0:34:aa:91:71:70:4d:2f:7c:a7:df:18:4f:
         1d:55:32:66:14:23:49:b6:9d:9b:77:b6:5f:ce:d9:a2:8c:d3:
         94:e0:03:7b:68:81:a7:69:3b:79:d7:c1:8a:16:bc:a8:c5:09:
         43:bf:15:f6:28:4d:c5:80:b5:93:29:5f:23:cf:b2:b6:eb:78:
         9b:23:3f:88:8a:24:9a:99:68:5d:a3:2d:0d:59:ae:d9:12:15:
         f2:d1:86:f5:49:90:7f:3f:05:6a:c1:0d:51:cd:c3:38:6b:41:
         c6:a9:37:3a:f7:b5:7f:1c:36:96:33:25:78:0c:10:e0:98:d8:
         e7:5d:16:6e:3b:a0:28:6b:4b:f6:21:32:bf:90:2d:f2:7b:e9:
         5f:ae:90:92:3a:bb:50:12:de:55:fe:af:a7:95:2a:1f:72:a3:
         4f:e0:49:cc:f7:47:7d:57:20:3b:f7:f6:c2:cf:3c:b2:91:95:
         8d:4a:75:b1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUJCF2a3ivNBgvZAIygsZLL30mhOYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTc1M0M3QTFBOEZCNERGRDYzODYyRUQxQUEyNTExQUEx
NTFCMTEwOTAeFw0yNjA3MTYxNzU4NDRaFw0yNzA3MTUxODAzNDRaMDMxMTAvBgNV
BAMTKDQ2MDM0MTNGRjZCM0Y3NzZFRUFCNDFFRDg5NUM3MjlBMkM4QjkyMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTCglgw4ig/RNiyqKb9Wu8owxV
OtoT3IfOKjNoSF1o3aRq+W+i6R5hDjD5TPibdmv5q/OxxJV12FZgWbEl1B3i8Y96
dDOAwLnhxibl5wU6ZHNEY4HovSO5+wiu+YkIOAhSp5BhWQXv1i13GwnnluIA9DqK
CTOxpHBCocpSi2oFZAALECQwI+vH3D6ve8TGC4eUfcFyT+6Gr2pjSCWYXF9mV1jd
T5I44erJ9VRwDSDbpYmESyHQQDKs1jSxGY6kaGYoATI5hDdAiftWmr0V0NAEXP8r
psC5BuplS3dKvOFtRCJf3o0pd+3J0bcbQsS+yX/3nJ7vUA3cDCiig9XBccHdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURgNBP/az93buq0HtiVxymiyLkhwwHwYDVR0j
BBgwFoAUF1PHoaj7Tf1jhi7RqiURqhUbEQkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmM5OWRxVmVRVzI2ZVNvVzg3aG82QWNUR2dhdG5kY0VGWGFva01wczVt
RlYvMC8xNzUzQzdBMUE4RkI0REZENjM4NjJFRDFBQTI1MTFBQTE1MUIxMTA5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE3NTNDN0ExQThGQjRERkQ2
Mzg2MkVEMUFBMjUxMUFBMTUxQjExMDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZjOTlkcVZlUVcyNmVTb1c4N2hvNkFjVEdnYXRuZGNFRlhhb2tNcHM1bUZWLzAv
MzEzNDMzMmUzMjMwMzIyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM0
MzAzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCj8oAMA0GCSqGSIb3DQEBCwUAA4IBAQAh4jv8DzNC
GQPmDJqP82odA/yTCMrMlwmSIqZCXf50KdzrRgsVzjcK/5TwYdxEK4xrqr7aBFff
GRLC80g7nXZOCF+0r4FTDlEcJufAXrA0qpFxcE0vfKffGE8dVTJmFCNJtp2bd7Zf
ztmijNOU4AN7aIGnaTt518GKFryoxQlDvxX2KE3FgLWTKV8jz7K263ibIz+IiiSa
mWhdoy0NWa7ZEhXy0Yb1SZB/PwVqwQ1RzcM4a0HGqTc697V/HDaWMyV4DBDgmNjn
XRZuO6Aoa0v2ITK/kC3ye+lfrpCSOrtQEt5V/q+nlSofcqNP4EnM90d9VyA79/bC
zzyykZWNSnWx
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:40:20 2026 by rpki-client