Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3135302e302f32342d3234203d3e20323632383638.roa
File:                     3136342e3136332e3135302e302f32342d3234203d3e20323632383638.roa (raw, json)
Hash identifier:          z9WHQM+TrbxunmGBma0SGVNgvfoaf72BdvyvztaydBc=
Subject key identifier:   46:66:01:52:E6:DC:EC:A3:2D:27:E4:F0:C8:30:E2:7D:7A:FC:13:49
Certificate issuer:       /CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
Certificate serial:       1428F6719E395E5C0D634D2FF4EB44B6DE824997
Authority key identifier: BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3135302e302f32342d3234203d3e20323632383638.roa
Signing time:             Sat 04 Oct 2025 21:51:07 +0000
ROA not before:           Sat 04 Oct 2025 21:46:07 +0000
ROA not after:            Sat 03 Oct 2026 21:51:07 +0000
asID:                     262868
IP address blocks:        164.163.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl
                          rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:09:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:28:f6:71:9e:39:5e:5c:0d:63:4d:2f:f4:eb:44:b6:de:82:49:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAE2D54D6C1793B7DCD774699216D316E8C75351
        Validity
            Not Before: Oct  4 21:46:07 2025 GMT
            Not After : Oct  3 21:51:07 2026 GMT
        Subject: CN=46660152E6DCECA32D27E4F0C830E27D7AFC1349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:a7:9f:e2:c6:f9:e6:2d:e2:fb:c6:b9:6f:
                    18:44:de:9f:d7:56:17:ad:14:ec:d1:00:a6:d9:07:
                    00:c1:01:63:63:75:dc:70:ad:c4:a7:91:a2:5d:19:
                    33:6d:e7:7c:26:f5:2d:09:ba:a7:8e:f4:45:ae:cc:
                    f1:ad:bc:20:81:29:a1:bc:24:47:39:c2:a3:51:4f:
                    5d:f6:9f:33:c5:20:1d:cf:0c:d5:0b:c1:5d:5e:8c:
                    5e:ff:25:17:46:a8:75:5d:17:0c:20:a3:36:3a:c3:
                    e2:09:eb:9f:0c:92:54:c0:0c:6f:a0:c5:5a:aa:f1:
                    c3:89:92:cb:b7:8c:9e:0c:ee:2a:b0:19:77:77:c5:
                    2c:e5:d8:cf:1f:59:46:54:9f:3c:99:0b:27:59:ab:
                    6a:0e:3c:5a:c2:24:97:41:29:7f:5e:91:7f:fb:d0:
                    78:44:67:85:9f:bf:39:8a:de:58:64:e1:c7:3b:da:
                    20:55:17:ed:20:de:3a:09:a7:01:86:f4:f6:5c:d6:
                    5e:83:ee:6d:ef:95:93:ce:44:98:16:72:c3:42:76:
                    75:95:73:ee:d7:7a:b4:43:e8:fd:bd:ce:81:3f:19:
                    7e:9c:54:90:a9:56:78:99:72:67:6b:d0:17:81:17:
                    77:ba:e5:6a:a3:11:10:ff:3d:21:9a:88:d0:1d:54:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:66:01:52:E6:DC:EC:A3:2D:27:E4:F0:C8:30:E2:7D:7A:FC:13:49
            X509v3 Authority Key Identifier:
                keyid:BA:E2:D5:4D:6C:17:93:B7:DC:D7:74:69:92:16:D3:16:E8:C7:53:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAE2D54D6C1793B7DCD774699216D316E8C75351.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/64TWQ84Swgi5q85Jt7XdESE16VPzvbpNtujHV6yzzKwA/1/3136342e3136332e3135302e302f32342d3234203d3e20323632383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:3d:ec:ab:a9:f3:ff:31:c3:62:0a:5a:b5:d1:a0:29:7f:
         67:86:d8:3d:bd:82:74:d6:a3:6c:02:f0:61:ca:a3:1c:a0:a7:
         3f:df:56:bc:58:f7:b1:c5:9e:6f:f1:e2:56:be:b9:6f:99:1f:
         ca:a4:3b:7f:4f:c7:75:33:e3:a0:eb:43:12:a0:39:52:4d:bb:
         67:07:53:16:0f:18:80:08:ef:2c:e1:22:25:0b:4e:da:97:a8:
         20:1b:c1:01:4e:b4:bb:16:a6:a9:c2:da:87:d2:c4:31:f6:2c:
         2f:fc:6c:18:1a:a5:06:af:98:c7:79:8c:75:15:94:ff:89:24:
         63:e8:cc:a9:a0:e7:3b:93:04:d2:ae:c1:41:e1:5d:17:ae:ed:
         d3:6c:83:27:21:7f:ab:85:c5:87:b0:8f:22:c1:92:fd:fb:86:
         4a:0d:eb:30:a1:cd:e8:bb:ea:05:3f:de:2a:a9:bc:e6:b1:7a:
         22:8f:13:72:64:68:37:7e:c4:2e:f4:34:8e:13:3f:e6:7a:ad:
         1e:fc:39:54:cb:ff:55:c4:77:0a:04:ea:b0:b0:ef:7b:63:ee:
         80:f7:b6:65:b6:3f:75:48:ac:7c:c8:b3:d0:23:58:b1:f8:0e:
         22:8d:29:94:58:04:cb:00:f8:26:b7:d6:63:17:9a:93:82:b3:
         33:4f:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:40:22 2025 by rpki-client