Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262449.roa
File:                     AS262449.roa (raw, json)
Hash identifier:          LnSvL8B0TwB5GPnmVF8PUCbEU5CGz6YVa9Eq8iiyVNE=
Subject key identifier:   DD:12:31:A8:B4:78:F0:B5:49:74:18:1A:24:99:99:09:C2:15:73:06
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       2BFA7A600D684B0C54CA044E2919084C004F054C
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262449.roa
Signing time:             Wed 02 Sep 2026 20:09:43 +0000
ROA not before:           Wed 02 Sep 2026 20:04:43 +0000
ROA not after:            Wed 01 Sep 2027 20:09:43 +0000
asID:                     262449
IP address blocks:        177.52.168.0/22 maxlen: 24
                          2804:b9c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Sep 2026 21:55:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:fa:7a:60:0d:68:4b:0c:54:ca:04:4e:29:19:08:4c:00:4f:05:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Sep  2 20:04:43 2026 GMT
            Not After : Sep  1 20:09:43 2027 GMT
        Subject: CN=DD1231A8B478F0B54974181A24999909C2157306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:f0:fc:2a:bd:37:c3:9b:c8:33:16:44:fe:
                    42:58:2c:5f:51:31:18:ef:4e:4c:32:b6:87:52:b3:
                    d1:54:20:66:b1:af:6d:28:83:31:d4:f6:64:7d:f2:
                    40:b5:ad:97:35:5d:ad:bc:dd:42:21:1d:48:8a:61:
                    83:81:c8:70:84:b3:0f:b7:95:cc:42:d6:0a:6d:a2:
                    ff:0b:0f:07:8a:d4:b8:d6:73:0e:5d:6f:1f:e6:39:
                    b8:fa:58:8a:71:0f:19:47:d6:2b:f6:b3:c5:84:43:
                    4d:21:7e:b7:c3:28:dc:af:8f:00:96:0f:fd:82:34:
                    ad:5a:39:41:28:95:4c:68:e4:c8:bb:6d:bb:ad:f5:
                    a6:80:7a:47:69:48:f7:b7:8e:24:84:14:b6:de:e5:
                    65:a3:7b:0d:2c:1f:8b:af:7b:50:c5:3b:2f:98:2c:
                    c0:a4:9e:56:53:68:d5:17:a8:c8:26:c5:9f:72:ed:
                    3f:bb:ba:be:07:e6:d5:7a:b3:58:5b:06:9a:f2:57:
                    b5:db:48:17:22:dc:76:3d:ab:81:25:e2:f8:40:ff:
                    a2:16:b2:bb:1c:d9:10:ae:3e:ce:26:e3:a9:f5:a5:
                    97:0f:a7:69:b6:a2:dd:10:5a:75:3d:24:63:b5:9a:
                    3b:29:45:b8:de:68:d2:48:07:28:b3:a0:90:ca:83:
                    83:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:31:A8:B4:78:F0:B5:49:74:18:1A:24:99:99:09:C2:15:73:06
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262449.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.168.0/22
                IPv6:
                  2804:b9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:f4:9d:42:44:98:3b:23:c9:84:b1:f8:4d:01:1d:4a:94:
         46:95:c9:3c:22:56:01:db:63:28:8a:80:19:6e:18:d5:f8:df:
         63:4f:d2:2c:3e:7d:db:77:23:ae:b7:4e:92:9b:d0:25:43:80:
         89:2e:b7:d4:e1:8e:1f:0a:a9:e0:a2:a0:0c:a7:d3:02:89:86:
         54:f7:da:74:66:59:d2:41:37:85:ec:63:09:f8:45:07:23:21:
         82:f1:56:ba:66:f6:c0:42:9b:8a:00:9d:34:4d:ac:d0:45:42:
         ab:22:ec:c5:9b:7c:00:b0:57:51:b2:c6:41:78:23:03:d1:df:
         2f:90:53:0c:9d:19:7c:c2:99:0a:08:af:b0:2c:b3:fc:bc:91:
         cc:26:36:a0:78:57:1c:40:a9:90:14:28:54:ab:be:65:09:69:
         b7:0b:dc:e4:2f:3b:16:c8:e0:de:af:68:27:b6:8e:0c:5a:00:
         1c:57:da:e6:fd:ce:78:6b:64:09:85:53:a7:98:cc:00:f1:6e:
         12:ca:76:a3:38:54:7f:46:b8:f3:88:f5:bb:dd:fa:33:8d:3a:
         24:1d:cf:f2:f4:d1:68:e3:74:12:7d:b8:88:43:62:be:0a:d1:
         7a:08:61:d2:ee:b7:49:f0:62:a8:5a:fc:33:c9:87:2e:e3:93:
         a0:72:a2:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 14:39:35 2026 by rpki-client