Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/3136342e3136332e3234332e302f32342d3332203d3e20323731373534.roa
File:                     3136342e3136332e3234332e302f32342d3332203d3e20323731373534.roa (raw, json)
Hash identifier:          9+zhFQ/enBOucqz2hDW3m3P5Dd12palNZvbgPvqh+RM=
Subject key identifier:   C8:93:CF:A7:95:1F:9C:B9:6C:14:09:45:73:B2:31:C9:A6:72:53:4B
Certificate issuer:       /CN=7065DD43CCADC86120ED24D992F48940CE7C8D5F
Certificate serial:       5D94C54AF3194AB95DD61E7839E259C941F4912F
Authority key identifier: 70:65:DD:43:CC:AD:C8:61:20:ED:24:D9:92:F4:89:40:CE:7C:8D:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7065DD43CCADC86120ED24D992F48940CE7C8D5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/3136342e3136332e3234332e302f32342d3332203d3e20323731373534.roa
Signing time:             Thu 15 Oct 2026 12:27:15 +0000
ROA not before:           Thu 15 Oct 2026 12:22:15 +0000
ROA not after:            Thu 14 Oct 2027 12:27:15 +0000
asID:                     271754
IP address blocks:        164.163.243.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/7065DD43CCADC86120ED24D992F48940CE7C8D5F.crl
                          rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/7065DD43CCADC86120ED24D992F48940CE7C8D5F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7065DD43CCADC86120ED24D992F48940CE7C8D5F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 31 Oct 2026 07:54:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:94:c5:4a:f3:19:4a:b9:5d:d6:1e:78:39:e2:59:c9:41:f4:91:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7065DD43CCADC86120ED24D992F48940CE7C8D5F
        Validity
            Not Before: Oct 15 12:22:15 2026 GMT
            Not After : Oct 14 12:27:15 2027 GMT
        Subject: CN=C893CFA7951F9CB96C14094573B231C9A672534B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:47:00:61:26:36:9f:2a:b2:10:a4:a6:35:
                    3d:76:7a:ad:4a:b2:9c:e0:13:9d:4e:ee:e1:8d:47:
                    17:2b:7c:d9:ce:eb:15:a2:f5:65:dd:29:64:95:ca:
                    28:5d:4a:5d:c9:22:3d:37:ec:6e:ed:8a:39:7b:dd:
                    bb:82:04:21:c6:87:98:0f:a8:68:ef:98:4d:fd:59:
                    d6:1a:bb:6a:18:6f:da:14:34:fd:fa:4c:e5:88:97:
                    5d:4b:c9:98:33:d2:c8:19:d9:52:3b:cb:e1:1a:f1:
                    ad:25:9d:51:64:a8:e9:08:99:1f:eb:61:d0:d7:31:
                    19:b1:62:b4:9c:e5:d4:13:c0:92:49:f1:13:d6:c1:
                    51:20:ce:fb:aa:4c:d8:fe:69:8d:84:b3:66:d3:40:
                    7b:b4:7f:01:50:38:7b:fa:82:47:bc:00:05:9f:a9:
                    3b:09:9f:cd:03:dd:a4:46:e1:59:1d:15:24:a8:a6:
                    7a:1a:c7:81:f3:6f:9d:e8:c7:89:62:bc:9c:5c:4b:
                    07:77:95:57:19:ce:9e:d6:01:d6:36:61:8e:9e:e4:
                    bc:e4:39:f4:0d:bd:cd:a7:d6:5c:4d:45:1e:b8:82:
                    ed:97:32:d0:38:9c:65:3c:d4:1c:38:0f:fd:5f:bf:
                    35:0e:51:92:d1:46:e4:7f:83:51:62:f3:30:1f:48:
                    85:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:93:CF:A7:95:1F:9C:B9:6C:14:09:45:73:B2:31:C9:A6:72:53:4B
            X509v3 Authority Key Identifier:
                keyid:70:65:DD:43:CC:AD:C8:61:20:ED:24:D9:92:F4:89:40:CE:7C:8D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/7065DD43CCADC86120ED24D992F48940CE7C8D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7065DD43CCADC86120ED24D992F48940CE7C8D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bqd4kukKmeNof9XGD2BSchsdqdaBUCtm3x33rSpFLcH2/0/3136342e3136332e3234332e302f32342d3332203d3e20323731373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:4e:8e:5e:97:84:c6:fb:9d:ba:37:d1:3e:46:76:bf:11:c6:
         3e:97:d1:22:1a:3c:4f:42:0d:97:08:1d:48:f8:c3:f1:81:e5:
         a1:7d:60:62:31:80:a3:64:ab:66:b1:40:5c:b3:4b:e8:21:e6:
         e3:d9:46:9d:93:38:4e:1a:b8:76:4e:96:c0:94:5d:b9:91:e5:
         c9:e4:05:53:e5:d7:fc:73:67:de:dc:ef:93:fa:e2:9c:da:05:
         ab:a0:b9:7b:5e:45:24:fb:d1:a8:b8:5d:0e:83:db:6e:3a:e0:
         f3:f9:28:d2:2f:30:7f:1d:18:25:08:b0:78:77:e6:dc:99:de:
         3e:ae:f1:32:91:65:ed:c4:9d:48:c7:32:51:1c:b4:30:d4:9d:
         c8:7c:a5:fa:c2:38:39:eb:47:df:65:77:aa:50:22:37:59:ad:
         1a:2a:5a:cc:29:a5:fd:f4:80:7e:e8:78:09:00:d9:aa:00:02:
         0b:1c:bc:bb:ba:21:3c:f2:77:a9:74:4e:b0:66:de:a9:3b:5b:
         92:64:4b:7c:fd:a4:38:2e:e8:49:19:a4:3c:c0:6e:16:50:3f:
         f7:a2:8b:e1:a2:3a:6c:2a:fc:6c:ba:3e:e5:02:17:fd:e1:54:
         6b:a0:05:0c:d6:7c:6c:b5:a9:e2:1c:b6:97:76:14:42:52:7b:
         62:21:cc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 21:56:38 2026 by rpki-client