Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa
File:                     3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa (raw, json)
Hash identifier:          kWh+Bmsv9DZaBNJgZUu6Q8gS9So2lrs4YDEpyBXteR0=
Subject key identifier:   85:13:6C:91:2D:0D:94:61:D4:06:FE:6D:AA:01:59:D2:C5:99:23:E3
Certificate issuer:       /CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
Certificate serial:       4018CA6F2843E83A4B3AC7188D90792F65D7ED6D
Authority key identifier: FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa
Signing time:             Tue 25 Aug 2026 13:04:27 +0000
ROA not before:           Tue 25 Aug 2026 12:59:27 +0000
ROA not after:            Tue 24 Aug 2027 13:04:27 +0000
asID:                     265953
IP address blocks:        164.163.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl
                          rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:18:ca:6f:28:43:e8:3a:4b:3a:c7:18:8d:90:79:2f:65:d7:ed:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEC332471C3DA29371B5463F98F1F03B99E77D14
        Validity
            Not Before: Aug 25 12:59:27 2026 GMT
            Not After : Aug 24 13:04:27 2027 GMT
        Subject: CN=85136C912D0D9461D406FE6DAA0159D2C59923E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:40:f6:44:c4:48:a9:9f:59:86:b3:ed:d6:
                    6d:f5:e2:4e:7e:01:46:4f:a7:e3:b6:eb:0b:0c:42:
                    0e:68:d7:95:3a:94:16:7d:f2:8c:83:a8:aa:6d:ac:
                    11:2a:70:9d:97:ba:dc:03:e7:94:f3:53:be:e9:1c:
                    26:05:fe:02:8f:26:2c:a4:2b:71:97:a5:4a:89:ba:
                    e3:23:43:44:30:28:6a:c2:1a:52:7d:91:5c:8d:f3:
                    1b:57:a4:db:be:38:f0:5c:3d:0e:06:a8:69:40:23:
                    fd:48:fa:47:45:4c:59:6b:0f:43:f3:44:e1:d6:38:
                    35:2d:e5:ce:e3:01:e8:3a:ea:30:f5:08:3e:fc:d2:
                    e0:e7:24:3b:d2:b4:ec:ba:8a:17:71:5e:da:b7:4a:
                    4f:9e:d7:51:12:ce:29:3e:b5:93:7a:4f:91:34:9d:
                    43:e7:b8:8a:ff:62:4a:1f:3f:56:bc:fe:e2:5a:98:
                    f5:f6:e3:68:5f:1c:e1:4a:88:d3:42:0e:0d:21:cd:
                    76:38:c6:e4:3f:8e:87:6f:c6:be:51:39:4e:96:ff:
                    1b:77:73:2b:b0:f3:b0:83:07:e8:61:07:07:61:99:
                    38:8a:70:68:ca:d8:af:17:b0:f7:d4:a3:76:10:d2:
                    8e:cc:1e:62:52:98:d4:3e:8b:6b:9c:79:4b:f8:81:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:13:6C:91:2D:0D:94:61:D4:06:FE:6D:AA:01:59:D2:C5:99:23:E3
            X509v3 Authority Key Identifier:
                keyid:FE:C3:32:47:1C:3D:A2:93:71:B5:46:3F:98:F1:F0:3B:99:E7:7D:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/FEC332471C3DA29371B5463F98F1F03B99E77D14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FEC332471C3DA29371B5463F98F1F03B99E77D14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJHcyKA42ysV43jzRRffKVST3eS39wthUDec1w7FR8Nd/0/3136342e3136332e35342e302f32332d3233203d3e20323635393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:1a:76:d1:b1:37:69:83:df:e8:96:50:2c:2f:3a:4a:a3:e4:
         f5:09:0d:fa:df:29:d0:46:e0:0b:98:21:93:60:38:1f:54:28:
         24:77:a7:15:06:48:8c:9f:ef:90:bf:e7:22:6f:02:53:35:8a:
         8e:81:8d:1e:d6:3c:1a:ca:80:c0:a2:17:5b:84:70:d0:ee:66:
         35:4e:ef:93:af:6a:89:4b:e0:bd:55:a7:da:d4:19:aa:10:5d:
         1c:64:27:67:68:80:d5:91:2c:40:53:b8:81:89:18:ee:6a:5e:
         88:a7:6b:82:37:8e:f2:7f:cd:87:48:b5:88:92:7f:b0:a1:30:
         94:59:30:79:0e:89:de:86:30:a4:2a:94:f0:2c:b3:c5:ef:79:
         2d:5a:70:60:a9:a6:70:e7:b9:4c:8a:45:b7:de:a7:34:82:88:
         69:c1:9a:f8:a8:3d:16:37:c1:e9:88:aa:dd:be:f4:5d:b6:53:
         0b:44:bb:51:ad:20:97:05:8b:fa:27:a1:f5:c5:07:e4:eb:d6:
         33:7a:8c:36:c3:3d:b4:2f:fe:a0:9c:ef:55:c8:ff:0b:53:70:
         98:9f:28:12:23:a0:1f:1c:be:e6:a2:de:3e:7f:6b:f2:08:b6:
         55:c4:15:de:f6:e5:10:0d:55:fa:cf:92:38:70:72:14:75:58:
         e2:42:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:50:53 2026 by rpki-client