Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35322e302f32332d3233203d3e20323635393533.roa
File:                     3136342e3136332e35322e302f32332d3233203d3e20323635393533.roa (raw, json)
Hash identifier:          QDgiI1vjPqMbrcAv0jgieFpF1Ko/4HFP9MPNB0ivXtw=
Subject key identifier:   43:D9:71:D4:4C:46:80:2F:0F:E9:7E:A7:0F:5B:CB:3E:4C:2F:C0:EE
Certificate issuer:       /CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
Certificate serial:       35AC9F5BE391F63341DCB57290CFA7AA7C5B0D30
Authority key identifier: D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35322e302f32332d3233203d3e20323635393533.roa
Signing time:             Mon 20 Jul 2026 19:53:20 +0000
ROA not before:           Mon 20 Jul 2026 19:48:20 +0000
ROA not after:            Mon 19 Jul 2027 19:53:20 +0000
asID:                     265953
IP address blocks:        164.163.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ac:9f:5b:e3:91:f6:33:41:dc:b5:72:90:cf:a7:aa:7c:5b:0d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
        Validity
            Not Before: Jul 20 19:48:20 2026 GMT
            Not After : Jul 19 19:53:20 2027 GMT
        Subject: CN=43D971D44C46802F0FE97EA70F5BCB3E4C2FC0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:1f:66:03:1b:eb:45:ff:8e:68:bc:9f:0c:
                    c1:72:f5:fb:d8:53:14:b5:09:07:f2:4c:18:00:75:
                    4e:9f:d9:b3:d0:3d:d4:60:00:18:e6:11:0b:47:cf:
                    34:15:aa:98:c7:d8:2f:ca:aa:81:85:74:d4:c0:35:
                    59:5c:79:69:14:14:02:c7:08:7d:c1:00:0e:74:57:
                    42:6b:cc:42:d5:cd:a6:15:20:53:a6:37:8e:a9:31:
                    6d:13:28:39:63:cd:92:4a:28:e3:42:b5:fe:8d:48:
                    c3:36:f4:bf:27:67:55:a1:fa:83:d0:e1:50:ee:22:
                    d0:9e:b7:5c:e7:9f:01:8b:be:0c:c1:1f:d0:00:4f:
                    60:be:ed:f9:6e:e8:3d:a1:2e:c3:00:0a:1f:4d:f1:
                    c0:73:90:d6:26:50:73:4d:ae:f1:b1:17:62:7b:98:
                    2d:1f:82:a7:80:c7:17:23:01:75:2f:ca:de:18:3e:
                    c7:89:75:c9:e4:8a:90:24:9a:46:98:14:8b:1e:63:
                    3a:49:32:06:d4:67:6e:70:ee:0f:0b:f0:06:e2:58:
                    e2:6d:a1:cb:73:f9:30:0b:5c:5f:b2:26:c4:84:6b:
                    3b:65:b6:b4:3f:f9:ee:fe:7c:17:a4:81:c5:cb:b2:
                    32:51:36:5c:65:e8:b6:57:17:70:ab:b3:f2:69:55:
                    55:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D9:71:D4:4C:46:80:2F:0F:E9:7E:A7:0F:5B:CB:3E:4C:2F:C0:EE
            X509v3 Authority Key Identifier:
                keyid:D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35322e302f32332d3233203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:bb:c8:5d:b3:d7:a8:9f:a4:4f:2b:27:c0:7e:89:53:46:d3:
         4f:4b:34:bf:14:c5:8c:12:0a:fb:19:f7:b8:5a:a2:92:c8:f4:
         5f:56:a0:ca:98:f0:20:7c:8d:43:fd:e0:0d:bc:3d:7c:46:f2:
         cd:e9:9a:02:d0:fc:f3:3b:9c:a1:d4:0e:4e:ea:a0:04:38:85:
         28:cb:ef:a5:93:75:e5:0b:eb:7c:6c:4a:f9:aa:7e:89:af:74:
         97:90:b7:92:b5:55:19:a8:a0:e1:8d:e9:a6:19:21:89:ce:4f:
         88:ba:f2:bd:7b:2b:03:71:35:59:04:42:05:fc:bd:f9:3f:fd:
         28:a6:d4:fd:28:b6:3c:58:c1:59:a1:b0:ad:d6:49:96:5c:ee:
         2d:bc:62:36:66:54:26:57:ec:a0:33:a5:a4:f4:4b:82:0a:8b:
         69:cb:12:7c:24:2a:a0:86:c9:ea:43:98:d4:1d:e8:51:84:c6:
         93:03:64:4d:b6:12:eb:45:60:2c:a2:1d:95:d9:eb:1b:9f:63:
         1b:3d:2d:9f:7f:ae:2e:73:e6:df:42:f3:0f:7e:00:cd:f2:70:
         6e:bc:8c:f1:06:3a:87:8a:92:e6:8a:c3:81:f1:04:61:27:b9:
         87:1f:dc:0c:b9:d8:6c:89:6b:05:aa:41:a9:2c:85:02:ec:31:
         18:e3:b1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:50:35 2026 by rpki-client