Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262354.roa
File:                     AS262354.roa (raw, json)
Hash identifier:          T/YLx3QftCpUxjkK2q7FQetHQ5JcbtYUI+cSHfSaeIM=
Subject key identifier:   0A:F6:D4:E4:72:97:5D:49:74:68:2E:65:49:72:C3:D6:CD:DD:E6:50
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       6C5E4454810EC43818D70158BB8C5D44F6279D82
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262354.roa
Signing time:             Thu 13 Aug 2026 20:20:57 +0000
ROA not before:           Thu 13 Aug 2026 20:15:57 +0000
ROA not after:            Thu 12 Aug 2027 20:20:57 +0000
asID:                     262354
IP address blocks:        131.100.60.0/22 maxlen: 24
                          138.186.108.0/22 maxlen: 24
                          168.232.68.0/22 maxlen: 24
                          177.125.208.0/22 maxlen: 24
                          177.125.212.0/22 maxlen: 24
                          2804:828::/32 maxlen: 32
                          2804:828:90::/48 maxlen: 48
                          2804:828:c130::/47 maxlen: 47
                          2804:828:c230::/47 maxlen: 47
                          2804:828:f130::/47 maxlen: 47
                          2804:828:f132::/47 maxlen: 47
                          2804:828:f230::/47 maxlen: 47
                          2804:828:f232::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Sep 2026 16:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:5e:44:54:81:0e:c4:38:18:d7:01:58:bb:8c:5d:44:f6:27:9d:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Aug 13 20:15:57 2026 GMT
            Not After : Aug 12 20:20:57 2027 GMT
        Subject: CN=0AF6D4E472975D4974682E654972C3D6CDDDE650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:71:84:ab:22:79:38:a1:74:cf:43:4e:55:f5:
                    f5:7a:43:b6:bb:8c:ac:2c:55:2d:d6:af:45:6d:f6:
                    11:d9:41:26:e9:83:32:5a:33:27:d5:d5:88:d0:c8:
                    73:12:dc:fa:b8:18:5c:87:3d:1d:d4:05:7c:99:9a:
                    3a:fa:3f:1b:a4:19:40:82:b5:1e:76:2a:64:6c:96:
                    3e:22:91:81:41:be:59:80:60:bd:fc:52:c9:1b:43:
                    27:04:a7:f8:15:5a:b8:04:84:43:a7:8c:2b:d8:a4:
                    ec:b1:93:25:3c:34:4e:39:5e:fc:38:76:64:74:ef:
                    78:1a:3f:65:6c:69:57:59:b2:97:af:f0:b1:f8:89:
                    31:42:ea:30:28:e4:93:af:73:66:ec:60:a7:96:4d:
                    6f:dc:24:be:00:0e:11:fc:58:cd:a4:68:c3:66:eb:
                    a8:2e:ab:da:6b:7b:b5:b5:6c:78:69:c2:ea:48:87:
                    9a:6a:2c:36:69:45:84:30:f1:d5:3b:bc:4f:df:5e:
                    4b:2e:ca:e6:58:de:0d:f1:61:37:fe:c2:50:2a:d7:
                    9d:d7:80:fc:15:1b:40:eb:28:b1:79:c4:6f:f3:a8:
                    40:15:b9:2b:97:d5:75:31:f6:2e:b3:fd:83:6f:a2:
                    8f:47:48:92:0f:69:bb:c2:56:30:1c:db:50:db:f6:
                    a9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F6:D4:E4:72:97:5D:49:74:68:2E:65:49:72:C3:D6:CD:DD:E6:50
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262354.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.60.0/22
                  138.186.108.0/22
                  168.232.68.0/22
                  177.125.208.0/21
                IPv6:
                  2804:828::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:67:36:e0:61:d9:01:bb:ee:28:e3:31:78:9b:2b:1b:f9:79:
         8e:d6:3f:92:47:fa:d2:b3:23:1c:ab:21:9d:ec:28:6a:98:82:
         46:2d:69:20:c0:b8:06:93:20:cf:07:6b:25:df:0a:ee:12:e8:
         f7:d8:fc:9b:14:22:66:a8:90:08:25:9d:b4:cd:c3:86:38:c8:
         85:b3:20:27:d4:7a:f9:19:30:3d:1c:41:63:c7:0b:fa:df:ea:
         48:3d:6a:d6:fe:dc:a8:d9:58:d0:93:ae:a1:d4:67:d1:20:99:
         e2:a5:b5:fb:65:8e:12:5e:76:29:d5:12:a2:85:5b:83:a9:54:
         2f:38:e6:d6:68:e5:21:5f:8c:a9:ec:90:18:26:8a:ea:9f:c4:
         30:e2:c6:56:e3:71:a6:ca:0c:58:8e:64:b8:98:ef:3e:42:07:
         34:0b:5f:4f:7c:55:fa:e4:c2:d1:d0:86:ee:8a:bf:2d:9a:4a:
         22:22:c6:db:47:f7:28:93:51:f3:49:0e:01:0b:12:d2:b9:82:
         a1:0f:00:83:54:bd:bd:6e:aa:60:13:17:84:83:80:29:0e:c3:
         52:a6:cc:3b:47:2d:8e:be:7a:44:4b:53:c7:db:4c:da:6a:e5:
         44:0d:47:30:95:9d:ab:43:ef:5b:a9:c1:fb:af:75:6e:53:e4:
         fe:03:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:32:10 2026 by rpki-client