Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32342d3234203d3e20323634303235.roa
File:                     3136382e3139372e35382e302f32342d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          OL2cZ+G+I8u/zWPwue5I7p9dO/mNW1jAU6Z2qXWGLIA=
Subject key identifier:   B8:15:0D:9B:0D:A6:96:A7:C2:29:E5:9E:99:78:D5:8F:6E:C7:10:B1
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       0D728CFAB582DDC525D5078A2EA35159CAB7EF57
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32342d3234203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:26 +0000
ROA not before:           Thu 30 Jul 2026 17:54:26 +0000
ROA not after:            Thu 29 Jul 2027 17:59:26 +0000
asID:                     264025
IP address blocks:        168.197.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:72:8c:fa:b5:82:dd:c5:25:d5:07:8a:2e:a3:51:59:ca:b7:ef:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:26 2026 GMT
            Not After : Jul 29 17:59:26 2027 GMT
        Subject: CN=B8150D9B0DA696A7C229E59E9978D58F6EC710B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c1:2d:fb:f2:31:b9:5b:56:4a:b6:d6:5e:d1:
                    60:56:3a:00:c5:5f:1f:35:f0:34:f1:bd:3d:38:93:
                    2e:55:37:88:7e:82:ec:a9:09:26:95:90:d3:dd:99:
                    38:0d:75:bb:35:d9:3d:c2:0b:15:27:d4:41:2a:a9:
                    88:10:ca:85:80:89:ba:45:41:3c:53:4d:74:70:2d:
                    e7:a4:7c:ed:3f:f7:93:78:e9:06:00:60:59:3f:d0:
                    38:d8:d3:82:51:1b:43:bc:18:30:36:d0:36:48:9d:
                    e1:ae:3a:b7:1f:9f:f9:f5:ed:cb:e4:1a:5c:a6:cd:
                    a3:ac:c8:e8:ff:f3:12:c5:aa:64:86:ff:f0:cd:05:
                    47:76:c9:6a:68:51:74:1a:4b:2e:70:e7:38:d2:22:
                    15:e5:a3:a4:30:b7:63:f4:1b:4c:f5:ae:20:d7:81:
                    91:78:18:b3:a6:57:c1:aa:be:79:ac:be:a1:9c:c2:
                    6b:38:90:07:d9:7c:85:8a:ba:44:b5:18:e5:8d:59:
                    c9:78:59:01:ee:ae:6d:50:2c:2c:33:aa:9b:f9:18:
                    75:0a:c3:e0:54:d6:d6:b4:2a:22:01:74:af:63:35:
                    35:b4:a3:f4:7f:11:61:fa:5b:ed:e8:24:e6:29:8e:
                    84:f6:5b:92:14:f5:b3:78:d2:78:2f:36:64:07:e5:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:15:0D:9B:0D:A6:96:A7:C2:29:E5:9E:99:78:D5:8F:6E:C7:10:B1
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35382e302f32342d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:a9:ae:97:24:f0:6c:16:07:99:0c:98:34:9e:df:d6:8c:1e:
         cf:f8:e6:3e:88:ee:2e:f4:19:ec:c4:3b:d7:a8:e8:30:bb:80:
         2f:0e:2c:13:53:4d:ee:21:9f:0b:2b:64:d1:b0:83:b5:98:40:
         45:38:59:dc:f3:17:a7:ad:97:08:8e:86:02:40:41:46:54:4b:
         e1:98:3a:e8:5b:17:da:8d:aa:47:cb:44:8f:2b:85:b6:98:ff:
         e0:2d:35:5c:80:74:94:95:22:2e:5f:9b:40:fd:8b:85:fb:dc:
         40:81:b2:d0:fb:86:3a:0f:6f:d4:4e:bb:16:9b:c3:17:a9:21:
         50:ed:7d:7e:ce:3f:5f:47:bb:8a:71:f7:de:55:54:d9:f0:5d:
         0c:91:a5:db:ba:bd:5e:91:20:3f:39:1a:e6:04:16:8e:78:79:
         a3:58:57:95:b7:df:79:83:e1:15:b4:38:c8:89:aa:5e:12:ba:
         06:49:c5:77:fe:64:2a:1c:94:0b:86:76:79:a1:5d:27:ce:c4:
         2e:85:e4:b3:db:76:74:93:65:9f:90:72:c6:09:5e:5a:63:89:
         c2:87:ec:3b:a5:e9:af:48:16:91:c5:f8:9c:e4:90:9b:d7:48:
         b8:cc:dd:3c:74:2d:ee:04:b9:88:c7:5f:cb:0e:fc:e5:fb:5f:
         d8:aa:e9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:46:15 2026 by rpki-client