Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa
File:                     3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa (raw, json)
Hash identifier:          WwF6iVlARVXET/+eqRmCUpPBHgdFPoLDAeJeBipMcNU=
Subject key identifier:   C1:BE:48:00:4C:46:C7:FA:E1:91:16:89:90:96:2F:A6:3B:3F:06:A4
Certificate issuer:       /CN=6EE352017F3C95F6353FF40315BF724F7B4E226D
Certificate serial:       07BF991763F67E49AF92624218DB81EC75D57553
Authority key identifier: 6E:E3:52:01:7F:3C:95:F6:35:3F:F4:03:15:BF:72:4F:7B:4E:22:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE352017F3C95F6353FF40315BF724F7B4E226D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa
Signing time:             Wed 31 Dec 2025 15:00:00 +0000
ROA not before:           Wed 31 Dec 2025 14:55:00 +0000
ROA not after:            Wed 30 Dec 2026 15:00:00 +0000
asID:                     265961
IP address blocks:        164.163.116.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/6EE352017F3C95F6353FF40315BF724F7B4E226D.crl
                          rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/6EE352017F3C95F6353FF40315BF724F7B4E226D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE352017F3C95F6353FF40315BF724F7B4E226D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 24 Feb 2026 04:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:bf:99:17:63:f6:7e:49:af:92:62:42:18:db:81:ec:75:d5:75:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE352017F3C95F6353FF40315BF724F7B4E226D
        Validity
            Not Before: Dec 31 14:55:00 2025 GMT
            Not After : Dec 30 15:00:00 2026 GMT
        Subject: CN=C1BE48004C46C7FAE191168990962FA63B3F06A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d0:55:a2:78:b6:1e:77:e8:32:7a:4e:9a:e7:
                    47:c0:05:75:4d:e0:a1:67:74:e9:d4:14:51:6c:24:
                    b3:14:30:6b:3f:d7:d9:53:4c:c7:6a:17:16:63:63:
                    c3:52:a2:2f:05:8d:4e:c5:9a:6d:c0:0a:9f:96:9a:
                    de:01:56:90:ee:c4:4e:93:19:f4:fb:1b:8c:aa:61:
                    69:af:ad:ad:71:7a:a9:14:5c:87:0e:94:fb:47:ae:
                    3e:f8:3f:04:41:f8:11:11:fb:1c:11:f5:0a:fc:34:
                    ef:f7:6c:db:4b:96:6e:62:3e:a2:ad:2a:9b:ee:6d:
                    55:7b:d4:b7:6f:de:00:e8:1e:74:c7:ac:73:0a:7b:
                    95:1e:e7:96:28:d3:aa:f4:19:c7:f5:84:c0:2b:1d:
                    32:5f:59:e6:a5:0a:07:13:0d:2f:a9:8c:6c:71:b3:
                    87:b5:21:0a:95:b3:84:f0:ad:b9:f0:ba:2c:a7:c5:
                    7b:16:1f:a7:04:77:ad:10:aa:99:ac:d4:5b:ed:f3:
                    95:d0:76:1a:a2:b2:38:a0:d0:ed:7c:9e:44:73:e7:
                    a7:7b:59:55:a8:1d:5e:fb:b6:da:74:70:9e:55:9c:
                    32:29:5a:3c:f0:91:36:6d:33:be:29:59:17:cb:12:
                    ce:b7:4b:38:21:07:6d:38:d7:26:a0:46:d7:7c:b4:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BE:48:00:4C:46:C7:FA:E1:91:16:89:90:96:2F:A6:3B:3F:06:A4
            X509v3 Authority Key Identifier:
                keyid:6E:E3:52:01:7F:3C:95:F6:35:3F:F4:03:15:BF:72:4F:7B:4E:22:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/6EE352017F3C95F6353FF40315BF724F7B4E226D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6EE352017F3C95F6353FF40315BF724F7B4E226D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtNt42n7zNFbHTNAdsqezokRUYNnjdqRPhEAWoFJfDs/0/3136342e3136332e3131362e302f32322d3332203d3e20323635393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:be:7a:0f:d6:52:f5:e8:84:4a:e4:fe:ab:e9:21:84:ea:
         5c:29:8d:c4:e3:35:51:16:26:72:e8:b5:89:90:2b:b7:1a:2e:
         91:ed:c5:16:c1:c4:f2:bb:c6:06:4b:be:31:12:20:f9:42:60:
         50:83:00:62:00:72:bc:55:8c:f3:12:ea:21:c0:8f:1c:ad:97:
         dc:0c:02:4d:9d:95:ee:92:e3:66:19:33:73:5b:2a:5e:d1:37:
         d3:da:57:52:df:f4:18:b4:1c:90:1e:e5:31:89:bf:ce:03:7d:
         a0:7f:72:9c:51:cb:a1:83:2f:91:eb:bb:0f:81:e5:11:7e:a7:
         07:fb:ac:57:78:2d:b9:d7:4d:20:d2:33:ac:d0:4b:89:00:5b:
         01:cc:1f:c3:ec:e3:d6:a5:03:a3:8b:7f:e0:cc:e7:7f:41:46:
         9b:de:87:d7:88:c2:48:1d:71:17:9a:3a:31:db:62:7f:20:c0:
         39:66:ea:ae:b6:60:60:f4:84:1c:2b:28:f3:ff:74:91:b7:21:
         e5:c5:6c:0a:18:5d:ad:64:3a:d6:7b:8b:d8:28:fd:99:a0:6e:
         a8:b7:77:31:84:9e:7d:7f:21:3f:92:27:12:d7:4a:f5:c9:7b:
         92:2c:6e:5e:86:fd:c4:15:9b:60:84:99:e2:fc:24:b9:45:28:
         10:00:ca:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:50:26 2026 by rpki-client