Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37342e302f32332d3233203d3e20323634303034.roa
File:                     3134332e302e37342e302f32332d3233203d3e20323634303034.roa (raw, json)
Hash identifier:          5LHKSzZSxPGoPR1XR5og44YiVZIPNeIXetyeQ2wvX2I=
Subject key identifier:   00:17:97:20:59:80:02:64:44:3B:80:BB:29:45:7E:56:C8:2D:5C:F5
Certificate issuer:       /CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
Certificate serial:       7AF2C51A8C97E3EAD9A3F4AAF3710557CD8C777A
Authority key identifier: 9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37342e302f32332d3233203d3e20323634303034.roa
Signing time:             Thu 28 May 2026 18:02:38 +0000
ROA not before:           Thu 28 May 2026 17:57:38 +0000
ROA not after:            Thu 27 May 2027 18:02:38 +0000
asID:                     264004
IP address blocks:        143.0.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl
                          rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 13:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:c5:1a:8c:97:e3:ea:d9:a3:f4:aa:f3:71:05:57:cd:8c:77:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0
        Validity
            Not Before: May 28 17:57:38 2026 GMT
            Not After : May 27 18:02:38 2027 GMT
        Subject: CN=0017972059800264443B80BB29457E56C82D5CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:44:c6:23:03:ea:2d:d2:57:76:1e:29:ff:
                    ed:ce:0a:b6:f2:ff:47:79:f7:7c:80:5c:b0:12:a8:
                    03:2b:3c:cc:8c:ad:f3:06:9f:f5:ef:87:59:1d:ff:
                    f8:b5:6d:aa:5e:ce:c2:7d:88:51:f7:d0:2a:17:77:
                    f8:48:55:2f:47:3c:e7:05:15:5b:d8:1f:c4:96:7e:
                    60:42:c6:ea:95:1d:57:5a:e1:0b:f5:ec:6b:61:cc:
                    70:c7:5b:7e:1e:dc:d4:ee:41:55:95:2f:1d:e4:21:
                    eb:ed:6d:e2:f3:9f:d8:ae:24:7d:ea:65:60:07:12:
                    46:67:08:76:c9:2a:85:fd:b8:c1:61:8a:79:8c:a0:
                    58:a0:8e:30:9d:74:d7:da:45:4c:ed:dd:84:f3:f3:
                    bc:17:7e:8c:ed:17:40:9e:9b:88:98:3c:c1:9a:42:
                    b6:6e:0d:c9:7a:f6:e4:8f:eb:73:1a:b1:57:ef:20:
                    0c:c7:0d:bf:de:c4:85:f8:a5:a7:75:b8:51:3a:d1:
                    20:5f:31:70:f7:70:2a:01:ed:c4:84:03:40:ff:66:
                    c8:fa:1a:65:dd:29:d3:93:35:61:3c:7f:75:b5:87:
                    7b:8d:bb:8d:c4:ce:2a:bd:58:45:16:42:81:ba:b4:
                    e8:92:7d:8c:a6:92:8c:6f:aa:5c:74:ae:fd:d6:8c:
                    57:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:97:20:59:80:02:64:44:3B:80:BB:29:45:7E:56:C8:2D:5C:F5
            X509v3 Authority Key Identifier:
                keyid:9E:0E:FB:55:75:FC:61:F7:69:08:D5:AC:B6:53:9D:3F:8F:C5:F1:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0EFB5575FC61F76908D5ACB6539D3F8FC5F1C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/3134332e302e37342e302f32332d3233203d3e20323634303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d8:39:34:58:d4:dd:71:3f:b2:04:09:8d:bf:e5:08:d8:64:bf:
         9b:b5:f1:13:59:2a:c3:29:53:f6:c9:6e:b6:65:ff:42:b4:d4:
         a7:9b:5e:9d:7b:d9:2e:ad:09:77:0a:0f:7b:59:50:e6:d9:3d:
         c9:53:80:0e:0e:ab:d7:73:92:dd:ed:1a:ed:c2:7b:10:eb:b5:
         fe:98:2f:ca:4b:c2:c8:38:db:ca:70:5b:49:17:d7:64:10:11:
         5b:e1:bd:8f:73:58:cf:22:27:d3:10:2a:03:0f:44:4d:4f:e4:
         60:6c:50:70:b0:db:0a:50:3b:f8:12:ef:af:6f:b1:d3:e7:69:
         3c:fe:3d:28:53:e5:18:66:3e:cb:cb:21:7c:33:9c:6a:9c:e7:
         86:4c:51:5e:99:68:5b:0c:08:ea:42:0f:7c:00:99:ae:45:22:
         1e:7f:5b:4b:42:13:5b:5b:25:8f:0a:0c:b0:bd:ed:e8:97:8f:
         ab:0b:db:d0:3e:e1:4f:73:26:76:02:70:b5:d9:e0:4a:0d:28:
         59:d2:71:19:ff:a3:62:8b:e2:c2:dc:7a:09:d1:e7:a5:e9:2f:
         da:0c:c5:2b:cf:a6:76:7a:d0:cd:f6:7f:02:ca:af:ee:78:07:
         d7:49:bc:b4:9a:45:48:6f:d0:4c:15:95:ad:7d:48:2b:16:bd:
         d9:d1:61:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:28:02 2026 by rpki-client