Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3133372e3137362e302f32322d3234203d3e203532353733.roa
File:                     3134332e3133372e3137362e302f32322d3234203d3e203532353733.roa (raw, json)
Hash identifier:          OYutcfzXmfkL+VCJfqWRwFJHu4NIE+Zha8Vwh2AVLeo=
Subject key identifier:   17:47:3C:75:B1:68:35:8C:6C:51:48:E2:AA:C4:00:DB:7F:1E:FC:C2
Certificate issuer:       /CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
Certificate serial:       67245E968AE5A7C2549B127CC72FF7260CED10D1
Authority key identifier: D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3133372e3137362e302f32322d3234203d3e203532353733.roa
Signing time:             Tue 24 Feb 2026 21:28:02 +0000
ROA not before:           Tue 24 Feb 2026 21:23:02 +0000
ROA not after:            Tue 23 Feb 2027 21:28:02 +0000
asID:                     52573
IP address blocks:        143.137.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl
                          rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:24:5e:96:8a:e5:a7:c2:54:9b:12:7c:c7:2f:f7:26:0c:ed:10:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7
        Validity
            Not Before: Feb 24 21:23:02 2026 GMT
            Not After : Feb 23 21:28:02 2027 GMT
        Subject: CN=17473C75B168358C6C5148E2AAC400DB7F1EFCC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:ac:ef:0a:eb:9e:6f:03:85:1d:74:78:89:
                    f3:eb:b2:2e:a5:42:99:a9:67:6b:c8:7a:90:00:28:
                    10:4c:d5:38:bd:e1:65:7d:7f:54:e9:29:58:b4:f5:
                    ac:16:51:32:f3:9d:71:db:83:fc:61:26:e8:17:1c:
                    73:ab:6a:13:67:9d:31:5e:03:54:1b:12:e8:e0:82:
                    31:ff:89:0e:8d:14:a4:36:58:bf:46:20:d4:76:b4:
                    fc:af:3d:a1:5d:58:31:f3:e4:37:45:e6:19:e6:0d:
                    69:20:55:c0:f9:0e:a3:23:80:65:df:46:0b:be:ba:
                    f8:1e:f0:99:70:5f:b0:5e:62:77:70:88:23:5a:50:
                    de:f3:6f:8a:d3:fa:45:24:cf:15:44:5a:c4:fb:c2:
                    2d:8b:d4:48:75:d0:e1:87:76:76:a4:6a:07:39:f4:
                    3f:ce:93:69:4e:ff:c4:44:e3:a2:ed:d2:e1:50:a8:
                    e1:0a:4f:52:2f:57:3e:25:33:8b:b2:24:a7:e0:7f:
                    60:50:47:0c:7b:77:ef:4d:33:4a:de:ab:9e:9f:b8:
                    44:20:16:e4:0e:22:06:11:dc:59:75:b2:11:06:b1:
                    c4:79:26:c0:f4:d8:9b:39:e6:47:ed:e9:35:f8:ca:
                    82:02:8b:94:f0:59:97:f6:13:f5:1e:89:e5:8b:11:
                    3a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:47:3C:75:B1:68:35:8C:6C:51:48:E2:AA:C4:00:DB:7F:1E:FC:C2
            X509v3 Authority Key Identifier:
                keyid:D6:86:F2:D1:C8:D6:F0:E1:82:00:D7:BA:3B:4E:13:8A:86:7E:25:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D686F2D1C8D6F0E18200D7BA3B4E138A867E25C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2JfybCh4P1fahviQCP8NLH9hh4qSKu4GjBCVGe8ZvEeZ/0/3134332e3133372e3137362e302f32322d3234203d3e203532353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:02:66:4f:19:7f:84:db:83:e3:51:59:9e:76:1d:7c:e7:60:
         52:30:fc:03:18:1f:c1:80:c3:bf:9b:85:c3:fb:6b:d2:cf:03:
         44:4e:ac:de:5e:46:57:02:86:b4:05:b1:47:76:78:79:fb:a8:
         74:90:c2:82:b3:c3:9c:a8:38:19:a3:2d:9d:69:57:81:b5:ac:
         fe:3f:43:c3:7e:a7:03:4a:a7:d0:31:00:40:1b:dd:71:65:f0:
         44:5a:d7:ba:93:6d:56:8b:db:11:0b:0b:da:4d:8b:9b:9f:59:
         37:82:aa:b4:85:35:52:00:1f:84:68:ce:c3:5d:a5:a5:bf:72:
         1f:4a:16:a8:7f:21:a8:7f:52:2d:b8:c6:ff:1d:77:8f:4f:53:
         c6:58:04:1b:16:79:c4:57:2c:ea:87:8b:5e:81:c2:91:c1:82:
         a1:20:5f:9e:fb:97:16:ef:63:52:6c:61:0a:69:2c:c1:b2:6f:
         04:f6:58:bd:fb:3e:f1:f1:f8:9f:16:73:09:ec:85:4d:dc:b8:
         ef:b9:92:ad:c6:6e:6b:1d:32:58:f7:90:c9:d7:e0:3b:0b:74:
         af:6a:c2:a3:b5:70:00:07:70:dd:51:11:4d:62:17:39:32:69:
         24:3b:f6:2d:09:88:36:d1:a7:56:e5:e8:28:b4:c3:07:59:35:
         e6:81:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:44:12 2026 by rpki-client