Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa
File:                     3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa (raw, json)
Hash identifier:          DiEe8nwR1RWVUuGHLHF0exNrz7w3bC/Gf/uGcq9bdR8=
Subject key identifier:   FF:32:9B:49:8D:CD:E0:45:46:B1:AE:7B:8A:1B:28:80:27:CB:DA:3B
Certificate issuer:       /CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
Certificate serial:       112A3DC9467FD04736AD4CF1C5E3BCA47404F91B
Authority key identifier: D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa
Signing time:             Mon 20 Jul 2026 19:53:04 +0000
ROA not before:           Mon 20 Jul 2026 19:48:04 +0000
ROA not after:            Mon 19 Jul 2027 19:53:04 +0000
asID:                     265953
IP address blocks:        164.163.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:2a:3d:c9:46:7f:d0:47:36:ad:4c:f1:c5:e3:bc:a4:74:04:f9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
        Validity
            Not Before: Jul 20 19:48:04 2026 GMT
            Not After : Jul 19 19:53:04 2027 GMT
        Subject: CN=FF329B498DCDE04546B1AE7B8A1B288027CBDA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:41:b8:ef:96:39:e0:fb:e0:47:a9:38:1b:
                    d2:07:b3:06:7e:2c:32:31:49:b7:3e:63:95:16:41:
                    0b:fa:93:ce:a9:32:08:de:ae:5e:3d:54:d7:ad:79:
                    d8:14:9e:75:9d:16:16:d9:4a:4b:cb:c4:3b:3f:35:
                    ea:da:b6:c2:71:a8:90:f4:80:b1:d1:a9:41:8b:a7:
                    a1:ef:02:ff:35:ac:a4:6c:79:85:da:26:4a:ad:60:
                    b8:4a:a2:f5:c9:ba:01:e3:d2:e6:4c:e4:85:96:0f:
                    3a:b7:62:bc:66:30:43:d9:3e:da:69:3d:45:48:1e:
                    1d:bf:72:ae:df:0e:97:dd:42:6e:89:ee:f9:2c:40:
                    64:5f:9c:7c:97:e5:40:05:a9:ec:e3:78:71:33:3c:
                    9a:a9:cd:c8:49:5a:16:c4:e1:16:37:a0:5a:d0:2c:
                    46:e9:3e:70:a1:6f:69:69:57:ca:a0:6e:ca:28:02:
                    77:02:4f:5e:44:5c:34:d2:c7:ea:60:ce:f4:b2:39:
                    37:87:bb:2e:86:e7:45:52:47:ad:94:cc:8e:ed:cb:
                    73:40:dd:48:af:3d:b0:fc:13:d7:14:b4:dd:f0:1f:
                    41:dc:95:59:0b:0e:ea:91:7a:62:4a:0f:60:e1:d1:
                    55:47:c1:6d:be:77:6a:7a:b9:b4:8d:e6:3d:0e:fd:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:32:9B:49:8D:CD:E0:45:46:B1:AE:7B:8A:1B:28:80:27:CB:DA:3B
            X509v3 Authority Key Identifier:
                keyid:D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:87:00:fb:96:58:15:1d:4c:d8:4b:0e:fb:25:48:d3:83:29:
         65:fd:15:e5:da:ff:19:63:91:63:ca:90:c8:59:0f:eb:d0:f0:
         07:dc:8d:77:17:12:b5:f3:ab:ac:74:2a:d5:0b:38:47:3a:85:
         05:e7:6d:35:df:2d:ea:a3:14:a1:3a:8f:58:21:6d:59:62:32:
         fe:d0:6a:e2:98:bb:4d:98:5c:ba:9b:61:ad:b3:1d:11:c5:c2:
         b3:94:68:58:bd:26:dd:ea:ef:47:47:30:ee:43:5e:d9:af:aa:
         52:6c:66:e1:0c:0a:5c:bd:aa:7c:91:cc:a4:15:76:0f:3d:a0:
         e8:31:95:66:34:9d:39:73:e5:3e:de:10:6c:36:e0:63:5e:71:
         b1:41:06:a5:e8:e5:34:68:e9:05:ca:2e:01:b3:5b:f1:f5:0f:
         af:2a:ad:0c:cc:96:40:b7:2e:f1:75:ba:00:9f:e7:10:ea:03:
         26:10:7d:db:82:23:d0:ef:8e:18:95:95:66:3a:d5:17:9a:c5:
         93:4c:bb:11:6d:b0:68:df:48:1f:91:69:ee:2b:3f:35:e7:8b:
         24:20:c1:bd:af:13:ea:f8:8e:02:af:47:01:3b:cd:3a:27:ce:
         5f:b1:59:9d:14:6f:4c:58:35:c1:df:a4:0c:65:7b:81:9d:b6:
         c3:1e:fd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:50:45 2026 by rpki-client