Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3232203d3e20323633353431.roa
File:                     3139312e352e3136342e302f32322d3232203d3e20323633353431.roa (raw, json)
Hash identifier:          bNdxRocH8hdEVM8E6FrOdHOSXxgOC0XicP+fF2CJmCQ=
Subject key identifier:   06:C5:C3:C0:56:4E:5D:E1:76:72:9F:B7:97:63:D2:7E:1B:44:82:AA
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       66D5D8F9E2A47EF9C806FF912EF6EF3D425F4B0F
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3232203d3e20323633353431.roa
Signing time:             Mon 06 Jul 2026 16:03:26 +0000
ROA not before:           Mon 06 Jul 2026 15:58:26 +0000
ROA not after:            Mon 05 Jul 2027 16:03:26 +0000
asID:                     263541
IP address blocks:        191.5.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:d8:f9:e2:a4:7e:f9:c8:06:ff:91:2e:f6:ef:3d:42:5f:4b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Jul  6 15:58:26 2026 GMT
            Not After : Jul  5 16:03:26 2027 GMT
        Subject: CN=06C5C3C0564E5DE176729FB79763D27E1B4482AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a4:0c:a4:3f:6c:8b:89:11:82:7d:86:0d:3b:
                    5d:e8:42:56:7d:d3:0a:f7:2d:cf:b2:4e:7c:1d:d6:
                    56:16:77:8d:76:28:d6:45:15:bc:d0:4b:23:e0:7f:
                    60:4c:cc:a7:1d:7d:09:1b:a3:ea:48:b2:e5:c4:e9:
                    b0:79:90:b1:c9:90:21:6f:ee:2d:51:1b:60:fc:77:
                    eb:f9:b6:81:c9:54:64:34:ba:76:b6:1a:f0:26:d2:
                    37:b0:14:7c:00:b8:ef:33:72:69:52:17:e9:90:60:
                    27:9a:08:55:6e:95:fe:21:f0:2e:0a:96:ee:93:f5:
                    31:cf:8b:bd:08:5f:17:6b:5e:c6:fb:f7:a8:ab:fa:
                    4f:3c:42:11:41:96:44:ab:b0:f5:af:f2:30:1a:b5:
                    79:e1:74:a7:8e:89:3f:8a:3d:01:e2:5b:50:39:5d:
                    24:5d:50:13:32:dc:9c:c7:4b:2a:d8:1b:cd:0e:75:
                    c4:07:b7:ea:9a:e0:a8:52:f9:c0:d0:cb:20:b7:7c:
                    6c:19:b1:d8:ca:7f:25:82:6a:f0:65:e1:d8:35:ec:
                    d5:dc:ce:a3:f8:dc:fa:da:3b:10:e9:ae:c9:c2:ae:
                    66:67:8c:38:2c:b0:fc:22:ec:55:64:43:15:c4:41:
                    73:68:56:ff:3f:19:58:1b:03:9c:01:e8:28:7f:5d:
                    c6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C5:C3:C0:56:4E:5D:E1:76:72:9F:B7:97:63:D2:7E:1B:44:82:AA
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32322d3232203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:e9:d8:13:69:6b:5b:37:76:2b:59:73:7b:89:f3:ee:8a:
         b4:be:7f:20:c8:61:9e:a6:1b:42:87:82:64:15:4c:29:02:64:
         f5:07:b2:c5:07:8d:84:2b:d3:68:c7:ee:e5:14:01:5c:79:77:
         4a:de:12:94:ce:00:4a:b5:c0:88:ba:14:8c:d3:17:42:3c:db:
         05:e3:5d:94:d6:0b:4a:81:85:b4:a5:36:c2:17:d4:ff:ea:55:
         4f:ef:f4:ff:dd:31:86:68:8a:8f:d2:f3:91:bc:f6:09:de:79:
         59:40:74:08:2c:ef:22:c3:46:ed:71:ec:2b:72:5a:cb:43:1b:
         3c:de:cd:52:b0:ad:2b:be:7d:58:d7:31:b1:6b:54:e8:c2:d2:
         bf:0e:c6:a3:8d:1e:49:0d:7f:6c:32:3f:75:45:ed:25:3c:4f:
         3f:14:29:c1:1f:00:2f:e4:69:58:44:ad:35:c4:f4:ce:f7:07:
         9f:51:4d:d6:fa:2f:fe:cd:bd:e6:85:ec:f4:69:d4:eb:d3:ef:
         3e:e4:cc:c2:ec:14:2d:23:6e:4c:79:17:66:a9:dc:f8:2b:fe:
         f4:ea:96:47:9f:10:74:bb:ee:29:d1:59:c3:27:7d:64:9f:9e:
         24:8e:77:6c:82:2d:a2:d4:47:d1:97:29:ad:76:ec:56:dc:23:
         f4:eb:b3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:38:18 2026 by rpki-client