Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32332d3233203d3e20323633353431.roa
File:                     3139312e352e3136342e302f32332d3233203d3e20323633353431.roa (raw, json)
Hash identifier:          X7KTWclfJx0MfkH2hnbot1RswxqyaWkv9gI68tpt6dg=
Subject key identifier:   6E:7A:14:CE:E9:CC:63:5B:7A:D4:69:5C:73:2A:62:AA:2E:9B:D5:E3
Certificate issuer:       /CN=17B735526DB022F03734B18CC48645C010E4442A
Certificate serial:       67A7AFE15E8B1042DE0E144D1805E519A5522A02
Authority key identifier: 17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32332d3233203d3e20323633353431.roa
Signing time:             Mon 06 Jul 2026 16:03:27 +0000
ROA not before:           Mon 06 Jul 2026 15:58:27 +0000
ROA not after:            Mon 05 Jul 2027 16:03:27 +0000
asID:                     263541
IP address blocks:        191.5.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 22:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a7:af:e1:5e:8b:10:42:de:0e:14:4d:18:05:e5:19:a5:52:2a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B735526DB022F03734B18CC48645C010E4442A
        Validity
            Not Before: Jul  6 15:58:27 2026 GMT
            Not After : Jul  5 16:03:27 2027 GMT
        Subject: CN=6E7A14CEE9CC635B7AD4695C732A62AA2E9BD5E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:f1:e3:69:9a:5a:19:40:d3:4f:45:e3:3c:
                    90:de:bb:d4:86:98:c7:62:d4:28:cd:71:d4:c6:48:
                    5e:3c:58:75:c8:87:5f:70:ca:e1:bf:5a:2e:54:03:
                    43:c5:6e:0f:b3:e4:6c:1c:39:db:74:7f:69:37:cc:
                    5a:db:53:8e:df:ae:d2:54:2a:e7:71:80:d6:18:a7:
                    d8:f8:d8:43:af:85:88:a6:0f:08:3a:98:35:57:13:
                    ff:29:1a:be:d1:ca:11:92:df:50:f2:c4:f7:d8:98:
                    a1:27:32:38:32:fd:a4:8a:9b:0b:30:27:5e:8c:c2:
                    7b:71:7d:d4:0e:8b:3c:92:c2:17:1c:b0:d5:f5:ba:
                    b1:d8:97:e0:5d:6b:50:36:83:42:01:46:35:c8:60:
                    ee:e6:63:b9:8c:19:6b:4b:62:49:1f:8c:85:22:70:
                    b6:e6:d0:b9:37:cc:e3:3b:fa:d1:88:a8:2d:cc:75:
                    49:40:26:69:25:1c:b8:87:8e:b1:0d:65:8f:4e:08:
                    a5:f0:b3:11:3d:62:08:c6:0f:13:fe:a5:d6:be:b8:
                    4d:bc:8e:c1:8b:32:31:b0:64:0f:00:8e:e9:c2:74:
                    ee:d9:f7:d7:da:d1:94:ec:2b:aa:96:bb:fd:0b:72:
                    50:a8:a4:f5:4d:44:da:62:44:55:d4:9d:76:c2:fe:
                    b3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7A:14:CE:E9:CC:63:5B:7A:D4:69:5C:73:2A:62:AA:2E:9B:D5:E3
            X509v3 Authority Key Identifier:
                keyid:17:B7:35:52:6D:B0:22:F0:37:34:B1:8C:C4:86:45:C0:10:E4:44:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/17B735526DB022F03734B18CC48645C010E4442A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17B735526DB022F03734B18CC48645C010E4442A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/3139312e352e3136342e302f32332d3233203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:6b:8a:09:22:08:70:7a:41:34:b6:20:67:12:fa:17:50:cb:
         17:60:f2:de:86:e1:83:71:ad:cd:7c:67:6b:49:11:2d:a2:23:
         18:5f:14:89:d6:25:29:56:cb:fe:4a:03:95:e5:e0:dc:60:0b:
         31:ae:9d:ea:61:45:e4:ca:98:cd:50:eb:f1:f9:56:ec:88:00:
         da:4e:d2:12:22:be:b1:ba:1f:5e:a4:5f:9c:7f:13:85:8a:28:
         97:05:d4:de:21:8b:3a:d5:1f:05:69:b0:48:f7:b8:ed:0c:7d:
         e3:a4:c4:54:ad:45:a3:a0:3d:f1:28:a5:66:80:6b:4c:8f:3f:
         e4:3d:5e:e7:90:ba:22:0c:0e:7c:de:49:80:6d:fd:e3:aa:9e:
         f1:7f:9a:f9:51:ef:35:00:6e:7d:67:65:ac:af:32:39:b4:72:
         67:aa:2b:36:31:7d:27:a4:e3:d4:ae:a4:1c:44:c4:6e:8a:dd:
         46:2f:79:e3:2f:ba:f0:56:0a:3b:99:3a:92:27:d1:80:95:d8:
         cf:8b:87:83:e8:e9:54:2a:5c:a3:fe:2f:bb:9e:53:10:81:80:
         26:91:1c:86:db:95:e7:a2:10:da:8a:67:9e:5a:6a:30:5c:5b:
         ba:dc:21:f4:96:33:9d:9f:21:03:e4:e1:1b:59:f3:20:8c:b8:
         8c:cb:01:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 06:08:25 2026 by rpki-client