Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136362e302f32342d3234203d3e20323731333233.roa
File:                     3136342e3136332e3136362e302f32342d3234203d3e20323731333233.roa (raw, json)
Hash identifier:          YXNz+wLBF5jxN8zQaCmdYMZOQtoTeM8ynSpi9pHeGX8=
Subject key identifier:   FD:78:83:2A:14:16:56:E5:A4:3D:6F:6A:36:F7:A5:A5:C6:9E:3B:70
Certificate issuer:       /CN=613BE8AB98BDE26EA28F82707C5A1049DD47E34F
Certificate serial:       53E912F5D3B702A788129274EEAFF463299299CB
Authority key identifier: 61:3B:E8:AB:98:BD:E2:6E:A2:8F:82:70:7C:5A:10:49:DD:47:E3:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136362e302f32342d3234203d3e20323731333233.roa
Signing time:             Thu 30 Jul 2026 02:41:04 +0000
ROA not before:           Thu 30 Jul 2026 02:36:04 +0000
ROA not after:            Thu 29 Jul 2027 02:41:04 +0000
asID:                     271323
IP address blocks:        164.163.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.crl
                          rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 20:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e9:12:f5:d3:b7:02:a7:88:12:92:74:ee:af:f4:63:29:92:99:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613BE8AB98BDE26EA28F82707C5A1049DD47E34F
        Validity
            Not Before: Jul 30 02:36:04 2026 GMT
            Not After : Jul 29 02:41:04 2027 GMT
        Subject: CN=FD78832A141656E5A43D6F6A36F7A5A5C69E3B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:15:7c:e5:44:80:ac:40:0e:77:87:18:d4:
                    5a:12:47:01:b1:a4:8c:8c:c2:76:a8:a6:79:48:0d:
                    87:5c:67:9e:6e:b0:b0:96:fe:13:96:7b:d7:8d:ae:
                    66:33:cd:f6:4c:1d:ab:78:25:3d:9d:ee:7d:96:2e:
                    12:68:34:f7:fc:df:af:e5:67:9f:a5:63:a0:69:22:
                    79:e8:cb:04:75:51:aa:b9:88:01:78:e6:27:09:be:
                    1c:0d:42:2b:c1:58:e0:48:a8:da:d2:24:58:d2:7e:
                    b3:62:dc:53:e7:8c:60:6a:a0:de:63:e8:4d:f2:75:
                    2b:e7:c7:82:78:8d:b8:3b:04:76:33:92:5f:22:19:
                    69:72:cb:1b:5b:66:a6:1b:ba:62:f7:e5:69:c7:4c:
                    2d:88:8d:03:18:6f:04:6d:e4:0e:6b:2f:4f:35:01:
                    23:ea:18:ac:86:8f:a6:97:52:d2:0b:d0:1e:22:45:
                    2e:59:5a:ad:92:e2:90:35:8b:f0:88:63:0b:31:84:
                    ba:8f:d9:2d:c1:c5:01:bf:ac:0c:00:d3:04:5b:90:
                    81:b6:66:13:81:d9:52:cf:52:b9:c1:d7:42:02:c9:
                    82:5d:0a:af:46:3e:c7:3e:20:1a:4e:29:95:1e:c2:
                    b4:dc:c2:83:ea:fa:f5:02:ef:ae:d6:e7:ea:bf:49:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:78:83:2A:14:16:56:E5:A4:3D:6F:6A:36:F7:A5:A5:C6:9E:3B:70
            X509v3 Authority Key Identifier:
                keyid:61:3B:E8:AB:98:BD:E2:6E:A2:8F:82:70:7C:5A:10:49:DD:47:E3:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/613BE8AB98BDE26EA28F82707C5A1049DD47E34F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/93V5pDLB3mazZjwyrm5TPS1GRRE5GH6KkMpHFhToTzCQ/0/3136342e3136332e3136362e302f32342d3234203d3e20323731333233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:f9:3c:14:56:68:e4:ee:53:8b:63:f5:b2:86:6e:33:8d:
         48:4f:54:c5:a5:f5:09:82:2e:95:8d:5c:ba:1a:52:b5:d2:52:
         c8:44:ed:cf:0a:ab:1c:7e:df:70:1e:63:47:b8:8c:ad:92:1b:
         86:72:fe:00:60:d1:db:49:7f:8e:e8:30:0e:90:e2:88:8c:8a:
         a1:a1:ca:52:3b:41:d0:f8:b7:97:f1:6e:44:68:d8:f1:f7:a3:
         73:fe:19:ff:9b:7f:0f:2a:39:f2:a0:a1:20:ce:fd:7c:62:19:
         e8:33:4a:f1:e3:5d:b8:75:60:d7:25:f7:4e:52:84:f1:00:8c:
         d9:16:a9:1d:7c:cf:c7:68:e2:f0:a8:65:84:56:39:8b:4a:69:
         52:ab:78:29:52:08:7f:7a:be:9b:8b:c7:2a:af:b6:19:3f:fd:
         04:96:5a:c9:b8:cc:cb:b2:2e:55:df:64:44:dd:80:75:23:90:
         e7:ae:a3:c1:26:1d:41:9e:d4:fa:64:b5:28:06:a2:df:01:bf:
         1f:fe:10:94:28:92:c5:ab:c4:45:12:b5:fe:1b:f2:1f:d2:1d:
         a5:6d:ec:30:5c:f5:5b:3b:eb:1a:fd:e8:d6:31:37:8b:27:ab:
         d2:aa:7b:ad:e7:5a:96:d7:da:1f:13:80:8e:ef:92:85:62:26:
         75:03:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 09:03:46 2026 by rpki-client