Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BCALf6tap7iZp3uGKtwLdb3gtRYFPDpUuw8f6LxsH7X6/0/3136372e3235302e3138382e302f32322d3234203d3e20323635323139.roa
File:                     3136372e3235302e3138382e302f32322d3234203d3e20323635323139.roa (raw, json)
Hash identifier:          q+ViBGVRZtlA1JTcCT3kCDszvauZx5K+FUnR0sEQNu4=
Subject key identifier:   FC:A5:6D:5F:7C:F1:0D:86:ED:D9:BE:69:2C:62:09:0B:FD:0C:96:82
Certificate issuer:       /CN=0B7DC295B6E63EA57A990D11704D2530DE964BE0
Certificate serial:       65533134851AAFA878C08D9234B768A335F6B8D8
Authority key identifier: 0B:7D:C2:95:B6:E6:3E:A5:7A:99:0D:11:70:4D:25:30:DE:96:4B:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7DC295B6E63EA57A990D11704D2530DE964BE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BCALf6tap7iZp3uGKtwLdb3gtRYFPDpUuw8f6LxsH7X6/0/3136372e3235302e3138382e302f32322d3234203d3e20323635323139.roa
Signing time:             Fri 10 Jul 2026 13:31:40 +0000
ROA not before:           Fri 10 Jul 2026 13:26:40 +0000
ROA not after:            Fri 09 Jul 2027 13:31:40 +0000
asID:                     265219
IP address blocks:        167.250.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BCALf6tap7iZp3uGKtwLdb3gtRYFPDpUuw8f6LxsH7X6/0/0B7DC295B6E63EA57A990D11704D2530DE964BE0.crl
                          rsync://rpki-repo.registro.br/repo/BCALf6tap7iZp3uGKtwLdb3gtRYFPDpUuw8f6LxsH7X6/0/0B7DC295B6E63EA57A990D11704D2530DE964BE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7DC295B6E63EA57A990D11704D2530DE964BE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:53:31:34:85:1a:af:a8:78:c0:8d:92:34:b7:68:a3:35:f6:b8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7DC295B6E63EA57A990D11704D2530DE964BE0
        Validity
            Not Before: Jul 10 13:26:40 2026 GMT
            Not After : Jul  9 13:31:40 2027 GMT
        Subject: CN=FCA56D5F7CF10D86EDD9BE692C62090BFD0C9682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:3d:77:23:8f:b5:24:2e:e5:60:17:3e:03:
                    8f:04:9c:f5:d9:28:dd:86:f6:ba:0a:ad:2f:b2:cc:
                    4b:88:62:89:d3:35:c0:32:71:b1:64:4f:e7:7f:7c:
                    a5:c6:67:b4:ca:12:f0:5e:33:8f:79:33:c4:09:c6:
                    f0:f7:0b:83:41:a0:e8:d1:c7:87:14:3f:af:42:60:
                    6e:d4:4d:92:be:4c:c3:63:61:f5:ba:e7:93:4f:db:
                    68:0b:e6:3c:58:34:3b:d5:1b:c3:77:7f:4f:e3:16:
                    3d:13:3f:2e:a2:4d:fa:7c:98:db:17:be:cb:4c:47:
                    42:3b:71:20:44:dd:db:7d:22:2a:8a:bb:1b:4b:6f:
                    99:3f:7e:a4:a5:7b:46:6d:06:42:82:cf:31:bd:77:
                    d2:70:03:a2:da:47:92:ef:65:21:fd:56:db:25:b5:
                    58:5d:1c:5e:cc:2c:8c:98:71:16:06:a7:e6:30:1b:
                    46:b6:77:d3:1a:6f:aa:67:95:df:ef:2e:75:33:d6:
                    21:2a:16:af:1d:9d:88:09:f0:60:ac:0d:71:10:31:
                    f7:85:b8:37:4e:cf:2c:91:09:e2:87:57:fb:d1:c6:
                    2f:92:94:c4:91:71:8c:2a:ad:14:5c:3e:9c:de:fc:
                    81:eb:4d:87:fd:2b:25:ea:ec:0c:b8:e3:15:5b:8e:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A5:6D:5F:7C:F1:0D:86:ED:D9:BE:69:2C:62:09:0B:FD:0C:96:82
            X509v3 Authority Key Identifier:
                keyid:0B:7D:C2:95:B6:E6:3E:A5:7A:99:0D:11:70:4D:25:30:DE:96:4B:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BCALf6tap7iZp3uGKtwLdb3gtRYFPDpUuw8f6LxsH7X6/0/0B7DC295B6E63EA57A990D11704D2530DE964BE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7DC295B6E63EA57A990D11704D2530DE964BE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BCALf6tap7iZp3uGKtwLdb3gtRYFPDpUuw8f6LxsH7X6/0/3136372e3235302e3138382e302f32322d3234203d3e20323635323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:39:06:9f:14:91:09:17:6a:24:b7:0f:ec:e0:fa:c1:7a:bd:
         d4:34:48:a7:7c:3f:b0:ad:07:44:dc:fd:ed:8f:36:d6:5a:b7:
         1a:06:aa:8f:4d:55:4a:41:cf:0c:99:2f:ef:6c:62:45:31:b4:
         9c:b7:e3:1f:98:c4:60:3d:c3:e7:61:55:38:60:f0:d7:23:16:
         5f:ac:89:94:77:00:6b:10:da:4a:1f:a4:c3:c0:b0:60:7b:c9:
         7f:c0:fd:42:a6:e9:06:a3:a5:c6:f4:5b:56:af:43:6b:67:98:
         4e:13:f6:a9:1f:e0:70:2b:f3:a1:41:0b:e0:a9:53:9a:57:c9:
         47:a3:4c:f6:57:de:56:48:2d:ff:22:e7:b1:db:d8:0c:88:a6:
         79:39:35:89:91:55:3e:0d:89:8d:b6:3b:24:ba:46:c4:a8:ed:
         d6:85:ba:a9:6f:45:d1:fe:38:12:f4:3b:d2:4d:39:bc:44:c6:
         bb:98:b0:44:fc:ce:8c:e9:22:4f:aa:41:4b:bd:a8:b6:95:6e:
         66:64:c1:08:0c:57:0f:3a:82:e1:d5:d1:99:5d:d9:bb:9e:31:
         c5:d7:2b:9a:f4:28:97:82:1f:bf:c2:18:34:fd:ee:af:d4:70:
         1b:96:63:2a:fa:bd:0d:df:51:f0:8b:3d:2d:d8:20:17:56:8f:
         6c:b3:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:22:07 2026 by rpki-client