Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS265974.roa
File:                     AS265974.roa (raw, json)
Hash identifier:          VUfUx9miVFeqH3W8fnJzunJPVnO2Jf1wXr4kTmPqA9k=
Subject key identifier:   1D:C6:02:56:62:3A:21:1C:7D:0A:15:05:BD:88:D7:1E:BD:8B:4F:DD
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       17F6F7C83C2D481063E5DBC31FD44969C698EA08
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS265974.roa
Signing time:             Mon 29 Sep 2025 11:46:40 +0000
ROA not before:           Mon 29 Sep 2025 11:41:40 +0000
ROA not after:            Mon 28 Sep 2026 11:46:40 +0000
asID:                     265974
IP address blocks:        164.163.212.0/22 maxlen: 24
                          2804:40ac::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:f6:f7:c8:3c:2d:48:10:63:e5:db:c3:1f:d4:49:69:c6:98:ea:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:40 2025 GMT
            Not After : Sep 28 11:46:40 2026 GMT
        Subject: CN=1DC60256623A211C7D0A1505BD88D71EBD8B4FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:ce:0f:90:7a:7f:27:cd:4e:77:34:80:c8:
                    f7:c2:94:39:61:cc:c5:d7:30:bc:2e:14:80:2a:bd:
                    c1:a8:4f:f3:ea:2c:f3:1f:a3:2c:1d:a1:19:c6:73:
                    c3:83:7c:3a:b7:f9:bc:a5:04:36:d8:b4:e5:76:67:
                    04:fe:e4:14:9e:60:cb:89:c5:3b:81:24:a3:1c:2a:
                    fc:c6:18:93:fe:6b:d1:04:af:6c:0b:59:08:68:7c:
                    dc:b3:48:c3:85:d5:d6:59:58:f7:67:9b:0c:61:3c:
                    ae:c3:39:0f:5a:76:f6:bf:07:e3:b4:77:8f:87:92:
                    67:a7:3f:25:97:c0:63:40:63:55:9d:14:05:72:f0:
                    26:ee:c3:fe:ba:a2:ab:53:68:a9:34:cc:c3:89:b4:
                    f1:3e:da:3d:55:3a:cc:17:e1:90:87:81:ff:b0:7f:
                    b7:25:e9:09:2a:5b:fe:af:8c:92:e7:76:1f:de:19:
                    db:52:ab:86:00:17:d3:12:a9:d3:06:ec:97:a6:52:
                    0a:2d:9f:ac:3f:58:f6:44:9b:79:59:39:5a:17:37:
                    a7:9b:73:1f:a3:1a:c8:da:d1:0c:69:78:b7:29:2e:
                    e2:f1:62:3e:57:35:89:b6:1f:c6:f1:6a:96:ef:a5:
                    86:02:18:61:93:9b:b6:5a:b0:71:a0:e0:61:52:5a:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C6:02:56:62:3A:21:1C:7D:0A:15:05:BD:88:D7:1E:BD:8B:4F:DD
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS265974.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.212.0/22
                IPv6:
                  2804:40ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:d1:ed:e5:3f:5b:d5:f4:4d:ea:40:ce:c7:72:b2:b2:fb:01:
         10:91:73:c9:f0:ff:10:47:e6:27:d1:32:4e:3f:c2:8a:67:13:
         d6:d8:d8:de:d6:e5:e9:76:cf:58:63:d0:36:cb:49:af:8f:6c:
         28:7c:cb:9a:99:bd:36:82:51:b1:80:aa:b3:35:b4:99:20:61:
         c0:23:c7:49:04:2d:e6:71:a8:1f:c8:62:38:67:89:eb:dc:c1:
         44:a0:77:d2:79:1b:81:03:03:2f:dd:b8:92:42:f3:57:6f:40:
         25:a9:0d:c9:d6:4a:cc:89:6e:54:c8:45:09:45:51:57:a6:30:
         9d:4c:1a:e6:a2:81:47:52:f1:0c:3a:91:7c:67:e2:12:fa:38:
         3f:32:23:6b:16:ea:1d:61:de:61:16:0a:3f:a2:c7:45:e7:d6:
         16:b4:6c:b5:e8:6f:69:b8:84:cf:0a:94:24:1c:8b:2c:0d:fd:
         25:83:c3:ad:a6:d3:0a:50:4a:c9:59:36:a1:5c:ed:12:a1:46:
         a1:bd:ec:0f:4c:c5:a3:b7:54:94:7d:06:7e:a7:d5:82:29:1b:
         02:0f:17:3e:e1:dc:f6:b2:25:29:9d:cc:29:32:7a:30:7f:fd:
         50:d9:0c:50:36:d7:2e:33:cd:5e:e5:33:75:25:75:03:bb:3b:
         aa:51:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:25 2025 by rpki-client