Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35392e302f32342d3234203d3e20323634303235.roa
File:                     3136382e3139372e35392e302f32342d3234203d3e20323634303235.roa (raw, json)
Hash identifier:          yWIzJGn45PZm4RgPO0Go3CbVosGx42S4ykQsLX568bc=
Subject key identifier:   90:F5:9B:05:67:9E:54:56:20:0C:5C:AC:CC:F1:3E:F0:61:19:EE:F4
Certificate issuer:       /CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
Certificate serial:       50219A2BFA8C78D39C99B7ADA528B2C731F15676
Authority key identifier: 64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35392e302f32342d3234203d3e20323634303235.roa
Signing time:             Thu 30 Jul 2026 17:59:28 +0000
ROA not before:           Thu 30 Jul 2026 17:54:28 +0000
ROA not after:            Thu 29 Jul 2027 17:59:28 +0000
asID:                     264025
IP address blocks:        168.197.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl
                          rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 23 Aug 2026 22:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:21:9a:2b:fa:8c:78:d3:9c:99:b7:ad:a5:28:b2:c7:31:f1:56:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64EF4A884AB9E40ED6A09AE1C3F47D7C91930572
        Validity
            Not Before: Jul 30 17:54:28 2026 GMT
            Not After : Jul 29 17:59:28 2027 GMT
        Subject: CN=90F59B05679E5456200C5CACCCF13EF06119EEF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:5a:62:bf:4e:ba:8f:78:98:4f:ac:65:ab:
                    88:12:c9:b9:83:ec:da:28:2e:66:4e:99:c9:5a:ba:
                    0d:34:06:00:2a:04:a7:43:0e:4a:fd:7c:a5:3a:2a:
                    fe:45:98:da:ee:b9:e5:07:20:1b:c2:f3:48:3e:0d:
                    13:e9:75:d8:b4:8f:aa:60:9e:1d:7d:03:c3:50:d1:
                    eb:f9:33:9f:3c:cf:17:0e:93:52:5b:e6:7f:ae:e0:
                    30:c9:9a:1b:4a:87:21:73:88:14:05:fe:ec:db:dc:
                    5c:e9:9a:b2:04:5d:d6:04:2d:95:f5:b6:d8:19:2c:
                    bc:12:2f:05:d2:0a:07:d2:23:b7:9f:a3:6d:46:77:
                    39:a0:18:32:97:c8:01:17:41:61:26:a5:dc:6b:21:
                    9e:57:19:36:2c:10:15:0b:52:fc:91:76:fc:45:39:
                    a2:e2:da:ed:e5:e2:33:d7:46:9a:72:b8:ef:8c:2b:
                    cb:5c:f1:3e:c5:3e:5d:44:09:98:54:f3:0a:4d:f5:
                    66:6d:b7:11:ff:02:3e:78:9c:e9:d1:04:08:42:a0:
                    8e:6e:45:aa:2b:ad:1c:38:a5:b7:c2:eb:a8:f1:83:
                    d4:1f:03:10:f7:1f:8e:e5:2c:af:9e:62:59:88:7b:
                    a7:2b:1a:9c:41:16:90:87:5d:e1:bf:91:4e:1a:b1:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F5:9B:05:67:9E:54:56:20:0C:5C:AC:CC:F1:3E:F0:61:19:EE:F4
            X509v3 Authority Key Identifier:
                keyid:64:EF:4A:88:4A:B9:E4:0E:D6:A0:9A:E1:C3:F4:7D:7C:91:93:05:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64EF4A884AB9E40ED6A09AE1C3F47D7C91930572.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/3136382e3139372e35392e302f32342d3234203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:d2:80:53:a4:f8:6c:65:22:a0:07:45:24:12:84:a1:c2:8f:
         c2:0d:1a:0c:6b:c3:42:9b:24:28:5e:ce:8c:57:68:56:fa:87:
         9a:59:01:10:7f:05:df:5d:e4:b8:8d:45:72:1a:d9:b4:40:cd:
         05:1a:2a:df:59:7e:64:40:ae:fa:6e:9c:4c:c8:97:70:62:8c:
         0e:cc:b7:3d:a0:9a:5c:49:97:63:e1:25:02:f6:fd:46:cb:6a:
         c3:d3:66:04:52:ee:26:92:ee:63:0c:c1:e6:f3:e6:90:6f:0e:
         ff:ed:68:6d:bf:5d:0f:3a:a7:c2:e2:d4:15:03:50:39:d0:e7:
         47:75:51:dc:31:49:50:9e:d9:06:67:4c:3a:c6:31:62:ad:f6:
         a0:d0:f5:03:6f:b4:5e:23:14:76:a9:f1:b8:1a:4a:69:c1:7e:
         01:94:a8:a6:60:5d:60:af:bf:60:ee:0c:ee:6a:fb:6b:97:73:
         34:d5:67:af:03:a4:d9:43:de:91:49:75:17:4d:9e:62:27:00:
         6e:32:8a:8f:5d:27:10:01:b5:2b:d5:2f:46:c1:6e:47:b3:5f:
         4d:c7:d2:af:0b:8d:78:16:e7:de:b9:05:aa:df:a8:e2:4b:61:
         fd:8a:0f:fe:05:48:21:11:5d:eb:17:2a:80:ac:39:59:ad:6f:
         04:03:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 12:46:14 2026 by rpki-client