Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32342d3234203d3e20323634303732.roa
File:                     3134332e302e3230382e302f32342d3234203d3e20323634303732.roa (raw, json)
Hash identifier:          Zzhw+XxTzHQ/UX9R7g24DO/SLqsavmh8vXRkUvCM5tg=
Subject key identifier:   24:A8:33:09:1B:41:31:88:25:EE:56:C8:B0:82:26:D3:EA:9F:86:DC
Certificate issuer:       /CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
Certificate serial:       077BEDFB83DEB188C15CB80DB648A416B1DFA398
Authority key identifier: 68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32342d3234203d3e20323634303732.roa
Signing time:             Wed 04 Mar 2026 13:09:06 +0000
ROA not before:           Wed 04 Mar 2026 13:04:06 +0000
ROA not after:            Wed 03 Mar 2027 13:09:06 +0000
asID:                     264072
IP address blocks:        143.0.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl
                          rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:ed:fb:83:de:b1:88:c1:5c:b8:0d:b6:48:a4:16:b1:df:a3:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
        Validity
            Not Before: Mar  4 13:04:06 2026 GMT
            Not After : Mar  3 13:09:06 2027 GMT
        Subject: CN=24A833091B41318825EE56C8B08226D3EA9F86DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:17:8b:71:e2:28:31:bc:54:c7:28:9c:21:e9:
                    17:d0:49:b7:cd:b9:a7:8a:22:f0:2d:3b:05:ac:b2:
                    56:db:fb:25:42:fb:f0:ec:0f:84:6e:51:fe:3f:c7:
                    51:4b:73:85:b1:b7:20:ee:b6:56:43:02:19:0a:dd:
                    4b:bc:b3:de:ac:b4:07:76:ee:d7:a8:e4:53:b6:32:
                    90:60:fe:bb:d9:38:d0:2b:51:c4:a1:2f:ff:a4:8f:
                    43:fb:b2:fb:99:57:8f:72:f0:18:09:1c:5d:6e:ab:
                    c8:36:4c:7c:d2:5c:20:0c:45:28:b9:ca:9d:41:85:
                    f7:4f:ce:17:be:dd:f3:e7:54:44:b1:8e:35:9d:30:
                    5f:88:11:f0:4d:2f:6e:53:4f:e4:65:df:bd:53:a2:
                    fb:d8:20:f4:5b:7b:62:11:a6:00:51:ef:1e:84:a2:
                    93:02:c0:87:88:7a:c9:7d:a8:c9:ee:f1:58:fc:c0:
                    64:78:d1:fa:f7:c9:ef:af:bd:a8:88:20:56:09:93:
                    de:a8:e7:22:cb:81:31:ae:ae:ef:57:64:15:d9:e6:
                    4c:f6:f4:82:ff:20:22:34:dd:c1:16:76:6e:cf:3c:
                    21:9e:a4:d3:f5:14:d9:f0:58:c3:c5:74:7f:4d:ae:
                    dc:6d:9d:25:7b:16:1b:45:bd:97:1e:b3:27:5d:f4:
                    07:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:33:09:1B:41:31:88:25:EE:56:C8:B0:82:26:D3:EA:9F:86:DC
            X509v3 Authority Key Identifier:
                keyid:68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3230382e302f32342d3234203d3e20323634303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:53:88:9f:8e:94:b8:ef:3a:99:ec:d9:16:6a:20:c8:00:4b:
         3c:d0:3b:9a:c0:d1:ae:1f:bc:e5:d3:db:14:48:d2:8d:72:af:
         18:f9:43:87:03:a0:87:a8:04:1d:b4:c2:ae:ca:1d:b7:b9:14:
         f3:3b:78:76:f4:4b:45:88:21:17:35:93:52:15:39:03:8c:b7:
         b9:39:0e:86:50:36:2f:51:0c:96:ac:dd:26:92:57:32:ed:1b:
         66:b0:ac:41:06:d5:99:3e:2f:c1:8a:69:e4:46:9b:4c:4f:84:
         be:7c:c7:99:21:0a:91:2e:7a:19:a1:76:1a:d4:83:f5:c4:a5:
         08:6d:cd:b3:c1:3b:88:00:f0:b6:4b:57:1b:f4:74:c1:37:22:
         96:9c:b5:19:51:08:6f:73:2e:93:ef:e7:1c:c5:7f:b9:c2:2d:
         67:f2:bd:5c:9b:00:21:59:2e:5d:32:36:56:0f:a4:fc:4f:8c:
         38:05:77:10:a4:80:28:6e:cc:6c:67:92:1a:0f:0e:8b:07:98:
         85:9f:42:77:b2:ee:ed:d3:bb:f9:77:03:81:05:78:07:3c:e7:
         7e:ca:7f:c5:d4:6c:fd:c0:80:78:1b:cc:15:63:bd:96:f6:f4:
         f7:54:86:9c:04:42:ca:58:57:30:d4:42:83:4f:ce:14:fd:38:
         9a:4e:12:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:25:53 2026 by rpki-client