Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS265974.roa
File:                     AS265974.roa (raw, json)
Hash identifier:          cjCQj8pKRHnXtj/N7T1SW1OKhUE1/zoO5hc4wu/OfAg=
Subject key identifier:   D5:49:65:56:93:AA:C7:9E:EE:2B:EE:12:5C:A0:18:0F:91:24:23:85
Certificate issuer:       /CN=135830443F9F0628207359060862957206FBE517
Certificate serial:       5A3C0F4E67CAA9AABE064728CE7A2264D80649F1
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS265974.roa
Signing time:             Wed 29 Apr 2026 19:45:53 +0000
ROA not before:           Wed 29 Apr 2026 19:40:53 +0000
ROA not after:            Wed 28 Apr 2027 19:45:53 +0000
asID:                     265974
IP address blocks:        164.163.212.0/22 maxlen: 24
                          2804:40ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3c:0f:4e:67:ca:a9:aa:be:06:47:28:ce:7a:22:64:d8:06:49:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135830443F9F0628207359060862957206FBE517
        Validity
            Not Before: Apr 29 19:40:53 2026 GMT
            Not After : Apr 28 19:45:53 2027 GMT
        Subject: CN=D549655693AAC79EEE2BEE125CA0180F91242385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3e:07:b7:64:32:1d:8d:49:3a:81:cd:92:6d:
                    60:03:e3:88:47:e4:74:af:36:c4:ef:6b:28:e9:9c:
                    34:c9:44:ef:69:5b:bb:ad:ea:3d:15:18:a2:b6:e1:
                    15:74:e9:a5:6d:dd:22:32:54:3d:98:ad:18:de:e9:
                    be:f9:62:bb:15:d5:90:2b:3b:42:c1:76:96:b5:8b:
                    ab:a5:6b:ec:fe:d3:ac:83:40:79:52:4b:74:10:ef:
                    ac:b5:c1:ca:24:d9:3d:db:17:63:cd:dc:74:89:58:
                    4c:5d:dd:8c:77:b8:44:df:02:48:42:91:50:76:3e:
                    39:3e:98:1c:c1:69:6a:60:60:86:eb:76:40:52:33:
                    58:e9:89:78:88:a2:7d:50:00:24:2e:7a:30:d2:38:
                    de:4d:6e:33:5a:67:e9:a3:46:6f:ae:d0:df:b2:a8:
                    bd:f4:93:dc:98:a1:b0:0b:3f:35:a2:39:b9:9b:8a:
                    fa:f1:1e:bd:1b:35:e7:22:eb:fa:8c:88:2b:22:b1:
                    1e:9f:f6:13:66:29:a2:d9:fe:14:6c:ec:5a:1d:d2:
                    05:a8:bd:76:29:1a:96:b3:64:59:c9:36:3d:fd:08:
                    b6:ec:86:56:ea:03:29:d7:ac:3b:e8:19:dd:a0:2d:
                    bc:45:f2:8b:c6:85:98:01:8f:11:f6:57:d7:ff:23:
                    50:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:49:65:56:93:AA:C7:9E:EE:2B:EE:12:5C:A0:18:0F:91:24:23:85
            X509v3 Authority Key Identifier:
                keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS265974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.212.0/22
                IPv6:
                  2804:40ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:2b:df:10:cf:57:cb:ad:6e:f2:53:18:64:1f:3e:49:24:2c:
         31:c8:57:cb:a9:1e:5e:61:e5:b4:9e:a6:32:ff:90:d0:9a:c0:
         c8:79:90:cf:3d:28:80:0d:08:e9:d9:1e:02:4e:6b:71:d1:cc:
         a3:af:e1:18:70:82:61:43:d4:33:2d:25:0c:40:af:c6:c8:84:
         24:d6:17:8f:f8:c0:92:34:bd:9a:bd:ef:54:c6:36:54:c4:ce:
         cd:09:79:82:a5:3f:a8:3f:b1:ad:00:29:b9:bd:66:ca:45:17:
         9b:f3:2b:e0:f9:6a:b4:72:6f:ab:a9:28:ad:b1:4d:3e:0f:61:
         d8:24:5e:9c:6a:a7:4d:5a:d7:de:c9:ea:ea:73:1b:53:fb:b9:
         bd:9d:ce:db:58:b5:ff:e5:02:30:4c:30:ba:ac:0a:e0:ca:14:
         3c:42:ad:2d:5b:8a:89:c5:05:49:84:47:14:de:92:a8:63:9d:
         0e:26:b7:0e:f5:55:1e:ec:20:c4:68:ac:26:00:3a:73:8b:9a:
         ab:37:8d:96:68:41:d9:93:1c:01:94:8c:36:0a:2e:af:d5:6f:
         f7:80:80:64:49:20:b3:ec:d0:12:ff:04:fe:7a:6e:69:a6:5c:
         ea:a2:55:9d:8f:6f:59:06:c4:cf:3e:34:19:a0:c3:52:83:47:
         e0:03:40:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:32:29 2026 by rpki-client