Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa
File:                     3134332e302e3134342e302f32322d3234203d3e20323634303230.roa (raw, json)
Hash identifier:          zPQon6vlKn9+A3cfAU5rWPgq/940tTdhHsIqTtAcquA=
Subject key identifier:   BF:B3:4F:60:62:65:DF:49:AC:7C:51:AE:15:AB:12:54:F9:D1:E1:47
Certificate issuer:       /CN=931F5C99E6B400BCDEC8414E058500857852272D
Certificate serial:       39D752D9C32326AA763D2B341AFF5FC2A704643E
Authority key identifier: 93:1F:5C:99:E6:B4:00:BC:DE:C8:41:4E:05:85:00:85:78:52:27:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931F5C99E6B400BCDEC8414E058500857852272D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa
Signing time:             Fri 30 Oct 2026 17:05:24 +0000
ROA not before:           Fri 30 Oct 2026 17:00:24 +0000
ROA not after:            Fri 29 Oct 2027 17:05:24 +0000
asID:                     264020
IP address blocks:        143.0.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/931F5C99E6B400BCDEC8414E058500857852272D.crl
                          rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/931F5C99E6B400BCDEC8414E058500857852272D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931F5C99E6B400BCDEC8414E058500857852272D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 13:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d7:52:d9:c3:23:26:aa:76:3d:2b:34:1a:ff:5f:c2:a7:04:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=931F5C99E6B400BCDEC8414E058500857852272D
        Validity
            Not Before: Oct 30 17:00:24 2026 GMT
            Not After : Oct 29 17:05:24 2027 GMT
        Subject: CN=BFB34F606265DF49AC7C51AE15AB1254F9D1E147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:44:71:92:bf:de:44:1c:3e:af:7c:a4:52:
                    53:2e:f7:1f:9c:a6:48:a3:b5:84:f1:ae:2e:63:27:
                    4b:b7:50:36:f1:99:85:6e:c9:da:77:c3:f4:5f:e8:
                    5a:1f:a6:7a:a1:ba:03:36:1d:85:ee:e5:06:a1:78:
                    db:b3:f9:ff:ca:eb:92:08:43:df:f2:e0:a3:e2:bc:
                    a3:0a:0f:93:1f:3b:e2:66:b9:d3:c5:8f:31:cd:18:
                    64:de:69:0c:f1:12:87:d1:65:e2:c0:63:67:38:4f:
                    26:58:84:dd:26:9d:ae:ea:3f:e4:8a:62:75:ba:44:
                    f1:ef:f4:5f:7b:5a:83:d4:d6:8c:33:e7:de:a4:84:
                    a7:27:a5:0a:75:c4:ef:3e:fe:c1:7c:3d:90:d8:19:
                    55:44:1f:71:b2:77:a9:6c:6e:73:5b:06:ad:50:51:
                    86:1e:a3:30:74:82:57:53:39:18:d8:0e:b3:1d:6a:
                    6a:cd:35:8a:b4:7d:e5:49:2d:b6:cd:90:dc:09:76:
                    79:40:34:f4:26:db:6e:04:bb:5e:37:7d:dd:30:42:
                    51:db:c3:a9:8a:75:af:20:78:be:ea:b2:ed:6f:78:
                    e4:97:7d:f6:77:1c:60:de:a7:97:4b:29:31:fc:69:
                    19:f8:fb:2e:19:cb:b5:45:5d:b6:4f:5b:d7:a5:3a:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:B3:4F:60:62:65:DF:49:AC:7C:51:AE:15:AB:12:54:F9:D1:E1:47
            X509v3 Authority Key Identifier:
                keyid:93:1F:5C:99:E6:B4:00:BC:DE:C8:41:4E:05:85:00:85:78:52:27:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/931F5C99E6B400BCDEC8414E058500857852272D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/931F5C99E6B400BCDEC8414E058500857852272D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/0/3134332e302e3134342e302f32322d3234203d3e20323634303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:38:c0:d4:66:15:30:fd:b2:50:aa:e7:8a:57:51:00:c7:31:
         b2:df:b9:fb:2a:13:7a:ec:ac:73:8e:d7:b9:5a:b4:4b:89:21:
         ff:66:24:c1:8b:bf:db:5b:da:76:c9:44:60:95:68:12:b4:cc:
         ed:4d:9f:ed:56:6a:a3:01:0b:71:37:4a:aa:e2:e3:44:c6:fb:
         51:75:11:36:dc:8e:c0:e6:2e:b6:2e:57:ca:e7:54:9f:50:37:
         b6:10:f2:dc:3a:b3:6b:1d:27:79:bf:9f:83:e1:95:56:86:c1:
         df:2a:7f:d6:77:76:c3:52:44:9b:e9:91:67:6e:f1:27:28:56:
         c2:96:49:93:68:18:4a:0c:9a:84:85:04:bd:c8:08:2a:05:52:
         3d:76:b8:b0:dd:1d:5d:80:17:2a:51:09:da:88:f5:22:6b:9c:
         a0:e8:d5:57:92:64:7c:ad:90:76:d3:4f:d8:ce:02:56:4d:3d:
         43:b1:53:24:5e:ee:51:f2:7c:51:95:38:35:e1:70:99:c1:64:
         46:3b:e0:6a:d4:76:65:a7:49:f7:1f:91:3f:79:36:24:0c:b6:
         a8:e5:00:62:1b:9b:ad:10:e0:97:32:e4:53:ee:c2:fe:f5:75:
         d4:46:9e:a7:36:7e:ad:14:9f:72:fe:db:6d:62:16:35:d1:1f:
         73:44:49:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 21:35:12 2026 by rpki-client