Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3231312e302f32342d3234203d3e20323634303732.roa
File:                     3134332e302e3231312e302f32342d3234203d3e20323634303732.roa (raw, json)
Hash identifier:          b4sz9n0viOdaQJvP+/qcOXce3XtJO2fTIRsFf/k+CjE=
Subject key identifier:   14:59:79:04:42:43:0C:DA:C8:B7:C8:61:F7:93:CF:A0:81:6C:43:1A
Certificate issuer:       /CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
Certificate serial:       74F3B025BB65BA9458D1A01C80D85EDAB3FB7AF8
Authority key identifier: 68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3231312e302f32342d3234203d3e20323634303732.roa
Signing time:             Wed 04 Mar 2026 13:09:12 +0000
ROA not before:           Wed 04 Mar 2026 13:04:12 +0000
ROA not after:            Wed 03 Mar 2027 13:09:12 +0000
asID:                     264072
IP address blocks:        143.0.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl
                          rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 27 Mar 2026 20:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f3:b0:25:bb:65:ba:94:58:d1:a0:1c:80:d8:5e:da:b3:fb:7a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B41BBED51EE048421EC599A4F5A1921313EE8A
        Validity
            Not Before: Mar  4 13:04:12 2026 GMT
            Not After : Mar  3 13:09:12 2027 GMT
        Subject: CN=1459790442430CDAC8B7C861F793CFA0816C431A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:3f:d8:e9:fa:c2:56:fe:1d:8c:93:02:30:
                    e5:c1:ba:76:cf:bf:ef:38:3c:77:80:c2:50:a4:60:
                    96:be:dc:15:d9:39:a3:8d:3c:e5:af:3e:74:ef:2c:
                    ee:6c:c9:0c:73:e5:bf:c7:e5:8a:31:2b:ee:df:61:
                    a0:3b:98:11:ea:48:4d:86:68:f4:68:98:0e:3c:15:
                    f8:0a:80:b6:f0:60:dc:e3:6a:2a:a2:8e:a5:86:9d:
                    8e:b1:d4:23:c8:72:55:e6:cd:38:61:2d:10:8c:1e:
                    52:74:d5:29:2f:77:36:b6:ff:5f:d4:d6:73:73:ef:
                    b8:4c:df:4e:34:b8:57:01:31:fc:d3:58:f3:20:92:
                    26:a9:bb:dc:42:26:0a:29:a7:f9:ff:5d:22:36:5c:
                    4c:d6:34:54:d0:c2:ad:72:13:f5:21:15:55:76:27:
                    30:98:5f:40:87:e6:46:e4:c9:e3:08:da:a2:6b:13:
                    9f:63:51:ff:8c:e7:f7:17:7f:ce:6b:11:ae:ac:7b:
                    f9:ea:a9:aa:ca:89:fb:82:6f:6e:e3:a9:67:e8:47:
                    17:b8:e9:5c:87:0e:03:24:02:6b:87:c0:9d:64:d3:
                    e8:1f:93:cc:a5:43:11:d3:62:b7:f7:28:c4:e4:78:
                    8f:88:23:6f:e5:58:33:0c:ac:bc:f4:f1:57:c4:8c:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:59:79:04:42:43:0C:DA:C8:B7:C8:61:F7:93:CF:A0:81:6C:43:1A
            X509v3 Authority Key Identifier:
                keyid:68:B4:1B:BE:D5:1E:E0:48:42:1E:C5:99:A4:F5:A1:92:13:13:EE:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/68B41BBED51EE048421EC599A4F5A1921313EE8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68B41BBED51EE048421EC599A4F5A1921313EE8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4KXSHo82bh2osyWiHQobDNWc6xFtoHgD1qfV4f2WEtq/0/3134332e302e3231312e302f32342d3234203d3e20323634303732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:75:fa:54:6b:5d:4f:a3:03:d9:79:6b:30:91:47:0a:d2:e4:
         b5:f1:9e:92:f0:67:2e:d1:48:a5:eb:3e:4e:a0:21:9d:f2:54:
         1f:d6:87:de:73:3a:2f:cb:0e:1b:b8:4a:b2:a7:40:e4:24:e2:
         ff:f3:1f:a6:05:33:d2:f0:77:c9:e2:95:42:75:33:97:99:1a:
         23:bc:e7:df:8c:16:21:da:8b:5d:69:68:c9:08:c4:19:c8:f6:
         eb:14:5f:38:ef:d9:98:e5:63:3b:60:58:da:e3:53:bb:3d:af:
         b5:11:a5:c3:ee:35:1b:2b:1d:fa:13:77:05:3f:16:90:a0:0e:
         68:81:b2:ec:98:28:50:88:a4:f0:65:45:32:74:b6:3a:99:e6:
         2a:58:04:53:89:93:c8:e2:3f:55:df:0e:03:40:a7:88:19:2b:
         7e:81:13:03:9b:55:6f:11:17:d0:38:1b:5a:c0:45:8b:b4:0e:
         ab:6f:7d:82:45:8f:50:f4:bb:f7:a7:c3:c8:f9:2f:36:58:a3:
         a7:23:81:51:fa:0f:06:5a:4d:c9:eb:1c:65:91:a7:1d:7f:2d:
         5f:d5:64:89:60:81:3a:85:03:8d:1b:cb:a7:99:69:f8:70:3c:
         13:b7:3d:3e:82:72:8b:b3:7c:5d:57:fc:9b:e9:ce:ea:d4:1a:
         36:3a:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:25:49 2026 by rpki-client