Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32342d3234203d3e20323635393533.roa
File:                     3136342e3136332e35342e302f32342d3234203d3e20323635393533.roa (raw, json)
Hash identifier:          W7luhLkAtH1Lvce0Wwbj/eFOu3fywLb/DCDqTH6jkrc=
Subject key identifier:   5A:BD:C4:0C:7E:19:67:D4:0C:81:3B:59:8C:0A:19:DC:25:65:DE:C9
Certificate issuer:       /CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
Certificate serial:       1421B3D9BF1D99CE7F94BE47D0E582E6C60B1F06
Authority key identifier: D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32342d3234203d3e20323635393533.roa
Signing time:             Mon 20 Jul 2026 19:53:09 +0000
ROA not before:           Mon 20 Jul 2026 19:48:09 +0000
ROA not after:            Mon 19 Jul 2027 19:53:09 +0000
asID:                     265953
IP address blocks:        164.163.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 11:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:21:b3:d9:bf:1d:99:ce:7f:94:be:47:d0:e5:82:e6:c6:0b:1f:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9
        Validity
            Not Before: Jul 20 19:48:09 2026 GMT
            Not After : Jul 19 19:53:09 2027 GMT
        Subject: CN=5ABDC40C7E1967D40C813B598C0A19DC2565DEC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0d:e8:88:dc:05:6a:c9:e7:4e:98:64:ac:e0:
                    31:36:09:18:28:ea:f6:a0:52:a5:a5:ee:53:70:80:
                    a8:2b:75:81:e0:a2:0e:58:a5:64:d6:a5:dc:d1:af:
                    da:f0:f2:f5:13:fe:06:09:14:28:9b:18:29:d8:fb:
                    47:91:02:3b:fb:42:c8:aa:03:b4:11:bb:ec:f6:c4:
                    7f:89:31:72:5c:b9:2a:f1:59:2e:a9:9e:2a:dd:76:
                    9e:78:64:0e:38:b3:81:f4:dc:80:6b:ae:b2:fe:47:
                    53:7d:b3:ed:d1:58:bb:b8:c9:80:9c:15:72:33:2f:
                    5c:a3:cc:c7:f6:0a:83:f4:78:19:5a:e8:d9:1f:14:
                    7f:0b:c2:b1:b0:68:51:1a:b4:8e:6d:86:d1:d5:6f:
                    fb:d7:8b:4d:ac:5d:1e:0f:5a:16:b2:e2:39:9b:60:
                    7d:dd:b0:49:ab:51:73:ce:32:68:3b:dc:48:57:cc:
                    32:f1:5b:07:22:42:38:c3:9e:d5:4d:fa:a3:46:b5:
                    98:3e:aa:d6:98:e3:85:cc:0f:d8:ae:f0:06:8f:2f:
                    7d:97:b4:a1:3f:76:42:f5:f9:f6:10:a5:66:f8:fc:
                    7e:0e:18:0b:c7:6d:b9:1e:d4:6a:17:71:50:2f:ea:
                    68:d8:00:ee:bf:ec:92:72:21:94:4a:99:29:1e:97:
                    88:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BD:C4:0C:7E:19:67:D4:0C:81:3B:59:8C:0A:19:DC:25:65:DE:C9
            X509v3 Authority Key Identifier:
                keyid:D4:63:7B:A1:0D:62:C8:7E:68:A2:5F:AB:52:A2:4D:5C:BF:A5:2E:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4637BA10D62C87E68A25FAB52A24D5CBFA52EB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32342d3234203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:cd:86:41:7a:93:69:57:e6:2e:04:36:a0:b0:37:54:f5:c6:
         8a:90:a3:7c:bb:4b:87:56:81:05:2f:2e:8c:a1:ae:5b:0b:a0:
         6e:d5:0a:76:64:4b:43:72:db:23:06:f1:a9:a0:a5:2b:8d:01:
         1a:d3:86:5a:6f:ee:9e:7b:1e:7d:70:88:25:c2:0e:49:75:7f:
         89:14:7a:44:f9:84:e9:d2:75:32:15:43:ff:4e:3c:c3:e8:4a:
         2f:0e:2d:4c:66:f2:d1:c6:86:54:e8:6f:3d:44:a4:e1:ad:81:
         54:a9:20:5e:0f:87:c6:28:07:b3:ab:b7:52:29:7d:ed:05:28:
         d2:78:ea:4d:d9:33:d1:d2:9a:4f:d1:07:96:64:01:6a:a6:d8:
         aa:43:1c:68:f7:a3:b6:a4:e7:0e:c9:04:bd:b7:6f:c4:2b:30:
         e6:ec:52:4e:b8:e4:07:41:70:3d:58:88:bf:96:64:c9:9b:45:
         d9:d5:4f:b5:93:68:81:2d:23:b6:ac:61:01:63:f8:7c:14:19:
         f1:0b:53:20:ce:b7:08:30:d7:25:78:e3:a3:0c:5c:cc:e3:7e:
         3a:b1:26:af:89:e1:2b:b4:22:4d:89:9c:2f:d7:7b:b6:01:45:
         db:53:17:1f:27:c7:8d:e5:60:5f:a8:14:14:0f:64:cc:7f:cb:
         a5:ac:1b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:50:20 2026 by rpki-client