Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa
File:                     3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa (raw, json)
Hash identifier:          8WzWVRlYXsRfc8RYxTRjc9S7Hr/PgyjhoZuC3YKCs+Q=
Subject key identifier:   7B:4C:8B:27:79:B8:11:89:3A:A4:1A:3D:97:DE:F6:88:2A:60:49:72
Certificate issuer:       /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial:       7F108DDB2678EC4F14EE8C71DAC87B8FD1294AE7
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa
Signing time:             Thu 26 Feb 2026 18:54:36 +0000
ROA not before:           Thu 26 Feb 2026 18:49:36 +0000
ROA not after:            Thu 25 Feb 2027 18:54:36 +0000
asID:                     262346
IP address blocks:        143.202.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl
                          rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 15:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:10:8d:db:26:78:ec:4f:14:ee:8c:71:da:c8:7b:8f:d1:29:4a:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
        Validity
            Not Before: Feb 26 18:49:36 2026 GMT
            Not After : Feb 25 18:54:36 2027 GMT
        Subject: CN=7B4C8B2779B811893AA41A3D97DEF6882A604972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:9e:84:43:fd:21:bb:af:8c:5e:a7:59:29:
                    00:aa:2d:89:fe:31:44:0f:15:92:dd:53:aa:80:8d:
                    46:18:ea:c1:9d:cb:8c:13:70:32:34:8a:2d:94:08:
                    f1:eb:b5:1c:c0:72:a5:4d:fa:00:71:e3:ea:81:42:
                    4f:3a:c9:9f:e6:34:4d:97:eb:fd:17:a2:f7:55:10:
                    a1:dc:e8:21:a1:a7:19:6c:d6:a9:0e:4e:b7:7a:42:
                    e0:93:c3:12:fb:b0:18:57:d6:26:ea:66:10:67:fd:
                    e4:2f:fd:e6:22:6d:e1:c0:fc:92:ac:31:65:ac:ee:
                    13:d5:92:02:15:e5:c3:af:b0:33:67:7e:73:bb:4e:
                    d3:cd:11:9a:00:50:2f:47:98:6e:b1:6d:e6:49:4a:
                    0a:eb:30:a8:71:6b:dd:5c:14:59:3c:4a:c4:35:0d:
                    cb:b8:ab:2f:84:7c:c6:55:66:4c:98:64:84:74:67:
                    f4:ce:37:09:46:ec:3d:df:af:3f:60:8d:89:2b:12:
                    35:d7:2b:60:24:ca:af:8f:1d:8d:ed:03:04:12:6e:
                    d0:ce:7f:43:4c:df:68:80:a4:e7:a7:e3:95:2f:fd:
                    17:bb:69:5d:21:92:04:b6:37:4d:5c:00:74:aa:19:
                    69:ec:a2:88:8e:7b:10:07:e1:92:50:6e:86:a2:1b:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4C:8B:27:79:B8:11:89:3A:A4:1A:3D:97:DE:F6:88:2A:60:49:72
            X509v3 Authority Key Identifier:
                keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/3134332e3230322e3232342e302f32322d3234203d3e20323632333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:08:41:60:46:d7:a9:5f:9d:f7:df:a8:c8:f5:e1:95:22:
         9d:cf:35:e8:0c:3d:e4:c2:83:e7:07:b8:59:1d:81:15:b7:cd:
         28:63:40:48:2e:b6:dc:d0:0b:15:17:00:df:13:10:e5:d3:bd:
         08:9b:9d:99:55:bf:44:ea:59:03:8a:14:2c:70:7d:34:10:7e:
         ea:ec:9c:9f:5e:92:d1:d1:93:08:bf:55:97:ec:7d:ab:ce:46:
         af:2e:08:96:c8:ab:d0:6c:5f:f1:d7:a6:e4:76:b6:d3:8c:56:
         fa:1e:ae:a1:60:97:72:40:b7:d2:fd:c2:c9:d5:7e:75:d4:fe:
         29:20:6f:ae:9a:9f:81:3b:5b:9a:95:a3:6f:cc:1a:6c:cd:8c:
         b0:55:30:20:d9:8b:33:4b:03:10:23:84:37:e8:77:a0:f8:f9:
         15:91:01:5c:a7:96:8f:e8:9e:71:c4:46:34:1a:5b:a6:db:5c:
         e0:c1:3f:09:c7:a6:35:6e:46:5e:b8:83:67:8a:6c:3f:e2:9e:
         c4:62:33:c6:56:09:a3:be:bf:a5:b0:e9:b8:72:fa:3d:9a:da:
         85:a7:55:09:aa:72:cc:82:09:e7:0e:d5:d5:aa:e6:d6:28:ca:
         81:4a:b4:37:67:d6:01:e6:39:98:c1:90:1c:d3:87:b8:41:b3:
         98:6c:17:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:17:17 2026 by rpki-client