Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa
File:                     3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa (raw, json)
Hash identifier:          zdHiPYcSZZqZJlGDslnuVqaWXwdscxCEiIuT0N+TsbE=
Subject key identifier:   EB:98:F7:EC:75:D8:EA:A1:47:F5:DB:98:6A:12:94:32:22:FC:90:F2
Certificate issuer:       /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial:       7965D497AA2F95C05CB28AC321FBCFA0D39C4544
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa
Signing time:             Tue 24 Feb 2026 20:37:01 +0000
ROA not before:           Tue 24 Feb 2026 20:32:01 +0000
ROA not after:            Tue 23 Feb 2027 20:37:01 +0000
asID:                     263627
IP address blocks:        143.202.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
                          rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 22:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:65:d4:97:aa:2f:95:c0:5c:b2:8a:c3:21:fb:cf:a0:d3:9c:45:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
        Validity
            Not Before: Feb 24 20:32:01 2026 GMT
            Not After : Feb 23 20:37:01 2027 GMT
        Subject: CN=EB98F7EC75D8EAA147F5DB986A12943222FC90F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:70:67:42:a1:4d:7f:49:ba:fd:98:22:d7:5f:
                    0f:2f:35:69:a1:47:0a:c7:9f:b1:50:c3:14:0a:3b:
                    42:6b:25:72:39:bf:d4:ba:3d:f3:91:01:5d:7c:7c:
                    bd:8d:cd:6b:cb:38:2b:b6:69:e7:66:e9:4e:d6:19:
                    c7:50:06:51:3e:4f:4a:c5:aa:a9:96:6d:37:e1:84:
                    f9:87:9c:86:9b:1c:49:a6:11:71:f3:4d:26:1d:95:
                    fb:62:7c:3e:f2:56:a9:70:50:06:bd:c2:af:cd:46:
                    5c:34:be:3c:78:57:2c:cc:57:f1:de:e5:dd:d4:21:
                    af:ce:14:fa:c5:1c:51:76:9d:9f:7e:61:65:82:e1:
                    70:cd:18:5c:fe:75:77:c6:81:58:d6:ea:44:c4:82:
                    84:b2:c7:1f:1d:18:e4:b9:ce:ba:be:5d:4e:08:2d:
                    df:dd:d6:bb:62:2c:6d:aa:0e:64:de:5e:24:25:bd:
                    e7:83:f7:e7:9d:44:83:ca:d1:fb:cd:52:65:af:db:
                    29:02:a9:50:2e:bb:78:ff:49:0a:0d:4c:c9:79:be:
                    a5:1a:54:20:86:63:fe:5f:47:6b:6d:16:c8:a3:39:
                    f2:e3:ca:97:cc:1b:ea:e1:60:67:ab:a8:81:da:27:
                    25:61:54:21:24:0a:68:e7:47:bb:de:69:f7:55:41:
                    3f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:98:F7:EC:75:D8:EA:A1:47:F5:DB:98:6A:12:94:32:22:FC:90:F2
            X509v3 Authority Key Identifier:
                keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/3134332e3230322e3233392e302f32342d3234203d3e20323633363237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:49:ba:d1:e3:8b:f2:e9:49:f9:c2:bf:e2:e9:e3:52:07:60:
         17:0c:d3:b0:01:31:40:f8:fe:74:2e:a4:d4:d7:78:2e:f9:d8:
         10:ea:53:6e:5b:3d:7f:a5:60:5c:25:1d:97:9f:7a:85:eb:d5:
         71:95:95:89:be:82:d3:a7:58:2c:78:8d:46:b4:07:10:a0:a9:
         6a:0d:9b:29:2d:38:a3:8a:c5:25:99:a7:86:ad:7d:45:5a:80:
         e6:57:ed:fc:9e:be:96:be:97:9e:cb:63:9c:ad:6b:56:1f:32:
         0e:47:e8:ac:1f:9b:ad:a1:23:8a:31:f5:16:ee:4c:f5:7d:1b:
         e6:d4:f5:6c:9b:4f:af:0e:d2:f9:d4:a4:84:f3:a2:1f:e4:d1:
         c6:9e:3b:b1:a7:2f:3b:c0:68:ab:ca:0b:41:ca:a7:c1:b6:83:
         98:b0:26:f2:47:80:34:08:ed:37:8f:d6:1e:f1:d7:d7:cc:0a:
         e8:77:1b:e9:1b:8d:a8:d0:fb:8b:96:f6:7c:d0:9a:ff:3e:a2:
         41:93:d5:b6:07:e0:5e:91:95:7b:fd:3d:6f:be:c5:cd:56:34:
         bd:83:c3:f7:e1:fe:26:5c:97:1a:a7:7f:e0:9d:78:5a:0f:71:
         48:1f:b7:36:9a:f4:cf:0c:e2:10:69:f4:04:f2:66:f0:4d:01:
         55:a3:ed:fb
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUeWXUl6ovlcBcsorDIfvPoNOcRUQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFBMDE1MDYyMzE2MTFDODc0NjE0NDI0NzVCMTQwMUFE
NURFMzhEMjAeFw0yNjAyMjQyMDMyMDFaFw0yNzAyMjMyMDM3MDFaMDMxMTAvBgNV
BAMTKEVCOThGN0VDNzVEOEVBQTE0N0Y1REI5ODZBMTI5NDMyMjJGQzkwRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbcGdCoU1/Sbr9mCLXXw8vNWmh
RwrHn7FQwxQKO0JrJXI5v9S6PfORAV18fL2NzWvLOCu2aedm6U7WGcdQBlE+T0rF
qqmWbTfhhPmHnIabHEmmEXHzTSYdlftifD7yVqlwUAa9wq/NRlw0vjx4VyzMV/He
5d3UIa/OFPrFHFF2nZ9+YWWC4XDNGFz+dXfGgVjW6kTEgoSyxx8dGOS5zrq+XU4I
Ld/d1rtiLG2qDmTeXiQlveeD9+edRIPK0fvNUmWv2ykCqVAuu3j/SQoNTMl5vqUa
VCCGY/5fR2ttFsijOfLjypfMG+rhYGerqIHaJyVhVCEkCmjnR7veafdVQT8/AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU65j37HXY6qFH9duYahKUMiL8kPIwHwYDVR0j
BBgwFoAUEaAVBiMWEch0YUQkdbFAGtXeONIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lqR2FYcGpoUG5ERVhoUnE4aDhkUVQ4dTNxYnZDempTbVRWdjN4VEx6
V2kvMC8xMUEwMTUwNjIzMTYxMUM4NzQ2MTQ0MjQ3NUIxNDAxQUQ1REUzOEQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExQTAxNTA2MjMxNjExQzg3
NDYxNDQyNDc1QjE0MDFBRDVERTM4RDIuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5akdhWHBqaFBuREVYaFJxOGg4ZFFUOHUzcWJ2Q3pqU21UVnYzeFRMeldpLzAv
MzEzNDMzMmUzMjMwMzIyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzM2MzIzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAI/K7zANBgkqhkiG9w0BAQsFAAOCAQEAfUm6
0eOL8ulJ+cK/4unjUgdgFwzTsAExQPj+dC6k1Nd4LvnYEOpTbls9f6VgXCUdl596
hevVcZWVib6C06dYLHiNRrQHEKCpag2bKS04o4rFJZmnhq19RVqA5lft/J6+lr6X
nstjnK1rVh8yDkforB+braEjijH1Fu5M9X0b5tT1bJtPrw7S+dSkhPOiH+TRxp47
sacvO8Boq8oLQcqnwbaDmLAm8keANAjtN4/WHvHX18wK6Hcb6RuNqND7i5b2fNCa
/z6iQZPVtgfgXpGVe/09b77FzVY0vYPD9+H+JlyXGqd/4J14Wg9xSB+3Npr0zwzi
EGn0BPJm8E0BVaPt+w==
-----END CERTIFICATE-----
Generated at Tue Mar 3 04:43:39 2026 by rpki-client