Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS264074.roa
File:                     AS264074.roa (raw, json)
Hash identifier:          66VsAky3I8vOVO8CEZAWqBxw2E1ByrPcMjhHe8E8DQE=
Subject key identifier:   F4:35:0A:11:5A:E9:0A:1F:7D:B2:BE:09:20:12:07:96:CA:52:26:10
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       66871B8EB82049CE4F7BA654820A379A518F85FE
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS264074.roa
Signing time:             Tue 22 Sep 2026 05:17:20 +0000
ROA not before:           Tue 22 Sep 2026 05:12:20 +0000
ROA not after:            Tue 21 Sep 2027 05:17:20 +0000
asID:                     264074
IP address blocks:        143.202.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 18:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:87:1b:8e:b8:20:49:ce:4f:7b:a6:54:82:0a:37:9a:51:8f:85:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Sep 22 05:12:20 2026 GMT
            Not After : Sep 21 05:17:20 2027 GMT
        Subject: CN=F4350A115AE90A1F7DB2BE0920120796CA522610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2b:13:bc:d3:5f:80:54:1a:31:ea:65:16:36:
                    a5:90:48:46:34:96:0d:0d:fd:46:e2:16:63:3b:c3:
                    bc:0e:fe:f2:33:53:bd:c6:f7:9c:10:e0:b4:e6:52:
                    c8:8b:c0:d5:09:ba:de:47:19:d0:4c:cd:98:31:71:
                    77:a4:5e:1f:de:60:3a:97:38:50:a6:76:8d:f7:09:
                    3d:93:49:4b:39:25:48:93:90:fa:81:c6:64:25:f6:
                    39:d9:00:c7:e5:f0:d8:f0:4e:52:eb:8b:95:59:e2:
                    c3:6b:a9:1c:01:29:c2:9a:f8:9f:82:04:7c:41:25:
                    8c:58:77:8c:c1:95:12:56:47:f3:f1:f9:3a:44:d1:
                    d4:47:ef:cc:1d:93:3c:7d:b4:82:8a:b4:27:fd:88:
                    96:f2:ef:68:3a:aa:3f:39:34:ec:9e:d1:8f:d3:0a:
                    a7:ea:4a:fd:6c:a9:9b:c0:a5:30:70:1a:b4:5d:ea:
                    97:2c:af:29:31:a8:be:01:c2:9b:b3:ac:7d:3d:4a:
                    6d:c7:18:e5:19:6f:ed:40:69:1d:63:a8:fc:c2:8e:
                    35:70:08:e3:76:98:70:cc:42:f5:1d:88:18:71:13:
                    76:c2:00:1d:da:8f:21:e8:cb:46:2a:4b:0f:00:6f:
                    a3:19:73:dc:50:9f:75:87:13:3b:3d:de:8a:0d:75:
                    f3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:35:0A:11:5A:E9:0A:1F:7D:B2:BE:09:20:12:07:96:CA:52:26:10
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS264074.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:8d:80:00:51:fd:4c:99:f0:67:96:e7:6c:5f:3d:cd:3b:e1:
         dd:25:f9:5a:f1:b4:4d:de:0c:c5:39:c1:b3:f8:dd:a3:eb:11:
         76:56:7c:f0:c2:7b:2a:7c:e5:99:4f:2c:06:bb:41:45:92:57:
         41:3d:7f:44:3b:c3:87:ef:16:92:eb:1b:1c:25:d9:45:19:2c:
         58:12:85:5a:62:0a:3a:c7:b4:09:3f:09:fb:36:41:27:d0:e0:
         9f:64:d8:32:c9:ca:13:08:5e:24:bc:66:cd:fe:3b:78:7a:bf:
         fd:b5:76:88:da:87:c6:55:38:9c:e1:f7:cf:94:65:25:bd:26:
         8a:c0:35:e8:92:ff:5e:0c:34:da:06:26:e0:59:a1:60:81:a8:
         bd:f6:6e:a0:69:fe:5f:a6:da:fb:ec:e0:a3:e6:f8:ee:9e:52:
         d3:46:7c:fe:5e:af:31:8b:d6:56:cb:50:e4:ed:00:c1:7e:85:
         17:3c:ec:62:88:bb:83:a6:8f:82:18:5a:fe:83:1e:0b:f5:3f:
         3b:38:f7:47:41:4f:eb:88:4f:bb:36:c8:03:9d:6b:01:87:f0:
         5e:87:de:67:a5:36:f0:e9:c5:3c:af:d5:8a:e7:9d:16:8c:fe:
         ec:94:d6:bd:c8:0d:5e:2b:63:07:f8:23:37:1d:3a:8f:4a:17:
         ec:f9:7c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:43:22 2026 by rpki-client