Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3134332e302e3132382e302f32322d3234203d3e20323634353433.roa
File:                     3134332e302e3132382e302f32322d3234203d3e20323634353433.roa (raw, json)
Hash identifier:          VbvfmQNF/Xmm00ZG0kC/3xyMNXkK4Y3A19YZemBUFQE=
Subject key identifier:   F0:2A:06:3C:9C:9E:69:BA:00:14:16:9F:D1:26:38:AE:BF:45:5B:6E
Certificate issuer:       /CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
Certificate serial:       120B32789F5EFB8DE6AD52CE0F8F89C5CE2C3F97
Authority key identifier: 09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3134332e302e3132382e302f32322d3234203d3e20323634353433.roa
Signing time:             Thu 02 Jul 2026 15:21:37 +0000
ROA not before:           Thu 02 Jul 2026 15:16:37 +0000
ROA not after:            Thu 01 Jul 2027 15:21:37 +0000
asID:                     264543
IP address blocks:        143.0.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl
                          rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 07:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:0b:32:78:9f:5e:fb:8d:e6:ad:52:ce:0f:8f:89:c5:ce:2c:3f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0937B5D7436A37FA6239657EB9161F1F8F7565AE
        Validity
            Not Before: Jul  2 15:16:37 2026 GMT
            Not After : Jul  1 15:21:37 2027 GMT
        Subject: CN=F02A063C9C9E69BA0014169FD12638AEBF455B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c5:f4:ee:f2:d9:3a:c5:2b:78:a6:b4:c7:f5:
                    17:eb:a5:c9:1d:28:42:70:de:ac:f2:eb:e3:b7:44:
                    11:51:7b:e7:eb:18:ac:a8:b3:7d:85:d3:59:8c:b9:
                    d5:ee:43:ce:1a:97:b6:f2:ed:d8:ee:0d:ca:46:73:
                    66:56:9c:dc:70:91:f3:86:bd:b6:db:39:4e:04:be:
                    ca:20:fc:fb:8d:ca:1e:99:ea:b1:f9:88:43:1f:51:
                    21:34:71:e7:3d:e7:5f:94:6a:98:f6:b5:3c:8b:61:
                    30:d6:17:f1:5b:b3:37:17:fa:b2:9c:de:34:be:bb:
                    b2:72:1b:a3:1c:41:df:fe:e7:47:69:89:06:53:76:
                    fe:a4:21:c4:69:55:be:02:65:27:60:d0:e9:2f:df:
                    9d:18:ec:32:1f:d2:2b:b5:b5:71:6c:ef:36:20:f3:
                    d5:eb:d8:b8:68:91:ee:a7:10:41:8b:88:0c:2a:c2:
                    36:71:a1:30:be:65:96:96:b4:f8:cd:ec:79:64:71:
                    e9:f7:53:29:2f:c1:c0:f1:73:94:23:6e:c7:5e:77:
                    aa:fb:67:56:56:fd:7a:d6:a5:b9:96:d9:4a:29:48:
                    50:4c:8c:24:04:3c:19:92:e1:6d:ee:86:1a:2d:7f:
                    47:fc:a2:66:63:69:c7:b7:8e:44:15:6c:c7:48:4f:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2A:06:3C:9C:9E:69:BA:00:14:16:9F:D1:26:38:AE:BF:45:5B:6E
            X509v3 Authority Key Identifier:
                keyid:09:37:B5:D7:43:6A:37:FA:62:39:65:7E:B9:16:1F:1F:8F:75:65:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/0937B5D7436A37FA6239657EB9161F1F8F7565AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0937B5D7436A37FA6239657EB9161F1F8F7565AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/rKzhC4HfLPAvS2a4qMXNfEozoz68NiAHxc2mpodxpav/0/3134332e302e3132382e302f32322d3234203d3e20323634353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:38:44:39:8f:39:20:bc:eb:0c:f2:b6:bc:7f:21:4c:d0:48:
         f0:58:79:5b:35:72:71:87:b6:0f:32:48:90:25:ad:bb:08:59:
         75:82:18:31:25:ef:87:4c:83:ec:e1:8c:41:cb:01:61:6f:59:
         cb:2b:45:80:f2:ec:84:88:ae:d1:93:fe:2e:05:3c:42:a6:4e:
         f0:d9:fd:71:b2:b9:fa:b9:4e:2f:d5:df:d9:34:74:13:4d:a7:
         0f:a1:fc:d8:d5:19:85:52:99:8c:17:de:72:27:59:47:47:61:
         38:d6:37:32:2a:28:48:9c:1f:c8:ca:92:a0:77:5b:2f:e8:e3:
         ec:ab:00:b9:8a:b8:4a:40:28:a5:af:19:c0:35:19:ee:22:bb:
         b4:96:4c:c3:aa:31:6c:2d:af:11:19:dd:c9:f5:2c:c9:68:54:
         d6:c7:cf:30:ef:e0:e2:7b:c8:20:8c:2a:8f:6a:89:97:2f:45:
         a8:74:78:2c:b9:25:cf:ca:59:08:42:a4:fe:38:92:2a:f7:60:
         53:51:83:00:92:45:19:57:19:56:40:56:2b:0f:fa:01:a2:da:
         ab:03:28:0e:9f:df:0b:f5:13:90:93:c6:3b:06:b4:cf:03:58:
         93:4d:71:46:e3:d1:9c:67:02:47:02:5f:51:df:4e:45:0c:9c:
         9c:42:60:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:18:02 2026 by rpki-client