Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa
File:                     3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          Ih3MR60veFKB313yJh3J4SZ1V2lnY6oQFXVNZkZ0GOA=
Subject key identifier:   2E:8A:1F:52:C1:5C:8A:2C:E6:2E:91:84:1A:31:32:0B:7B:F1:C5:2A
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       539373705A66B5DC475B4A9A4FBC7E7991E15EE9
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:36:59 +0000
ROA not before:           Tue 24 Feb 2026 20:31:59 +0000
ROA not after:            Tue 23 Feb 2027 20:36:59 +0000
asID:                     263627
IP address blocks:        143.202.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:93:73:70:5a:66:b5:dc:47:5b:4a:9a:4f:bc:7e:79:91:e1:5e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:31:59 2026 GMT
            Not After : Feb 23 20:36:59 2027 GMT
        Subject: CN=2E8A1F52C15C8A2CE62E91841A31320B7BF1C52A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:9f:e0:3c:8d:2c:57:3a:59:5f:08:88:8b:
                    ff:6f:a3:69:28:0d:9c:5f:8c:c5:ef:a1:b7:a9:d0:
                    15:31:aa:42:0e:a5:8e:08:94:f1:02:cf:f4:9d:6e:
                    12:db:4f:a9:fd:b9:7e:2d:64:5b:2a:f4:21:fb:ef:
                    9b:58:43:7b:f5:61:f4:b3:9f:c0:4a:57:54:01:b4:
                    f6:a2:4b:f8:90:b1:8f:bc:6b:65:c8:1c:df:13:8a:
                    2a:f3:b7:63:9a:b5:b7:c6:49:36:dc:90:24:e6:ee:
                    ce:1a:95:0a:7d:b8:d5:48:38:4e:24:4a:14:a4:b5:
                    30:80:c0:af:e1:be:90:43:d9:62:83:fb:a1:3b:8e:
                    5e:cc:b3:2c:38:c0:c0:88:6f:1c:9f:f9:ce:9f:26:
                    9f:eb:54:d1:4d:07:26:21:b1:67:90:5a:68:e5:1e:
                    b1:a0:e7:98:a9:d1:b2:5e:7c:dc:64:cf:b8:4f:7a:
                    cd:37:45:ba:1e:3c:fc:95:ca:b2:68:19:90:30:24:
                    59:f1:1c:c5:ac:9a:77:78:03:0a:f0:37:a4:a7:49:
                    11:ec:20:a3:e7:ac:f7:18:38:fb:2b:67:4f:68:4f:
                    67:51:0b:53:1a:ff:c9:ec:0c:e5:10:fb:33:af:c2:
                    f7:47:bb:3c:38:32:77:6c:ca:0c:6f:a3:4a:2f:27:
                    e1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:1F:52:C1:5C:8A:2C:E6:2E:91:84:1A:31:32:0B:7B:F1:C5:2A
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233362e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:0c:a7:cc:a4:1e:8d:f3:76:1b:da:84:ed:90:a0:8e:51:97:
         c2:0b:01:09:8a:d0:d4:32:9b:db:fc:30:bd:04:fc:68:dd:3b:
         ef:62:96:24:8d:91:31:83:10:a8:3f:a9:90:39:00:93:54:04:
         4a:53:94:ae:ef:1e:80:77:57:5b:0b:a7:6c:af:5b:6c:1c:2b:
         5b:ba:bf:7c:e8:94:55:8b:01:f5:d0:a1:8b:9d:d9:05:f1:43:
         14:90:16:95:ec:39:b1:27:5f:3f:79:d3:34:7c:7d:43:97:0d:
         54:6f:18:6a:6d:3f:87:6e:64:e9:f1:b9:2c:4e:95:94:e6:b8:
         41:aa:9c:95:a1:af:c6:4c:f9:cf:1e:ff:1e:3d:f3:95:8f:b6:
         a0:3c:be:d0:7c:7d:cc:07:20:eb:92:98:a5:13:b9:6a:81:3a:
         74:cc:40:c9:04:5b:d1:dc:ad:82:77:98:9b:a0:5c:ef:29:89:
         09:76:da:ca:95:c8:67:67:e0:3a:84:7d:2f:ef:9a:03:f3:24:
         f7:e3:08:65:32:af:0c:65:dc:0d:a6:f6:6e:2f:8f:3b:8b:4e:
         8d:89:6b:3b:91:95:04:d4:94:2c:25:a4:e2:8c:d0:c5:59:d8:
         7e:40:c0:39:b9:25:3e:e2:73:a4:01:59:96:b9:fa:85:0d:e7:
         d7:06:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:46:03 2026 by rpki-client