Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
File:                     AS262493.roa (raw, json)
Hash identifier:          ZhmzsiFfQgQjm4qOgTsB6Hacn5+bSGAoYc4dphEju5w=
Subject key identifier:   22:95:91:2F:29:CA:75:1D:47:AC:AC:6E:D3:18:14:9B:7C:7D:4D:07
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       01C65EDEF9290900937F20DD90A25453483B3B04
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
Signing time:             Tue 21 Oct 2025 18:00:52 +0000
ROA not before:           Tue 21 Oct 2025 17:55:52 +0000
ROA not after:            Tue 20 Oct 2026 18:00:52 +0000
asID:                     262493
IP address blocks:        138.255.216.0/22 maxlen: 22
                          138.255.216.0/23 maxlen: 23
                          138.255.218.0/23 maxlen: 23
                          168.121.148.0/22 maxlen: 22
                          168.121.148.0/23 maxlen: 23
                          168.121.150.0/23 maxlen: 23
                          170.82.132.0/22 maxlen: 22
                          170.82.132.0/23 maxlen: 23
                          170.82.134.0/23 maxlen: 23
                          177.8.48.0/21 maxlen: 21
                          177.8.48.0/23 maxlen: 23
                          177.8.50.0/23 maxlen: 23
                          177.8.52.0/22 maxlen: 22
                          177.8.52.0/23 maxlen: 23
                          177.8.54.0/23 maxlen: 23
                          177.55.48.0/20 maxlen: 20
                          177.55.48.0/23 maxlen: 23
                          177.55.50.0/23 maxlen: 23
                          177.55.52.0/23 maxlen: 23
                          177.55.54.0/23 maxlen: 23
                          177.55.56.0/23 maxlen: 23
                          177.55.58.0/23 maxlen: 23
                          177.55.60.0/23 maxlen: 23
                          177.55.60.0/24 maxlen: 24
                          177.55.62.0/23 maxlen: 23
                          2804:fec::/32 maxlen: 32
                          2804:fec::/36 maxlen: 36
                          2804:fec:1000::/36 maxlen: 36
                          2804:fec:3000::/36 maxlen: 36
                          2804:fec:4000::/36 maxlen: 36
                          2804:fec:5000::/36 maxlen: 36
                          2804:fec:6000::/36 maxlen: 36
                          2804:fec:7000::/36 maxlen: 36
                          2804:fec:8000::/36 maxlen: 36
                          2804:fec:a000::/36 maxlen: 36
                          2804:fec:b000::/36 maxlen: 36
                          2804:fec:c000::/36 maxlen: 36
                          2804:fec:d000::/36 maxlen: 36
                          2804:fec:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 18:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c6:5e:de:f9:29:09:00:93:7f:20:dd:90:a2:54:53:48:3b:3b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Oct 21 17:55:52 2025 GMT
            Not After : Oct 20 18:00:52 2026 GMT
        Subject: CN=2295912F29CA751D47ACAC6ED318149B7C7D4D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:df:32:b3:12:53:18:62:2f:46:6c:57:2e:db:
                    e4:48:c2:bc:f8:91:04:66:6b:b3:f6:9c:0c:9e:fc:
                    4d:70:3e:49:23:75:e7:9b:e5:8e:3e:58:e9:c2:98:
                    a2:0c:ad:0e:d7:67:0e:33:f0:72:25:81:75:5b:33:
                    0e:29:fd:15:42:33:e2:00:e6:14:5b:27:9d:3f:ea:
                    05:8c:87:d9:95:b1:0d:c0:26:4a:92:e0:48:68:3c:
                    0b:f3:e1:84:db:a2:c1:c6:a8:35:c5:c1:b5:47:a9:
                    33:04:85:82:b8:e0:74:b1:10:0a:de:b9:2f:d6:9b:
                    11:74:cb:6d:5f:6a:30:62:87:b1:0b:39:c8:8f:b5:
                    f3:53:f8:9b:96:1c:68:93:af:b9:52:5d:5d:21:49:
                    0c:15:e8:11:98:85:51:16:4e:f5:e5:a0:9b:09:06:
                    c3:27:4a:8e:0e:19:e2:5d:cf:59:7f:e6:4f:9f:fa:
                    a3:7e:a2:bb:bc:1d:6e:ba:d8:5d:03:61:4c:dc:a8:
                    3d:2a:0b:90:16:22:4d:69:2f:96:8c:8c:a1:e6:4a:
                    40:e6:3d:30:4f:01:09:b8:b7:dd:01:1f:e2:79:8b:
                    0b:a3:bb:5e:1a:ae:a3:6d:e0:4d:ce:d3:79:70:a2:
                    37:30:e1:ac:7f:e8:3b:63:11:cd:55:4b:f1:4e:0f:
                    7e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:95:91:2F:29:CA:75:1D:47:AC:AC:6E:D3:18:14:9B:7C:7D:4D:07
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:cc:c0:b6:0b:f6:8e:3f:28:c5:35:29:8e:d8:45:f3:59:05:
         e7:20:7d:74:9d:ee:c1:a6:9c:14:de:ac:b7:4b:7f:d5:3f:37:
         2d:3b:e0:74:f3:5a:13:79:b6:fc:5e:94:32:8f:d4:97:f6:a4:
         60:d3:b2:38:fe:f6:7d:07:e6:4d:09:0e:bd:22:2a:87:f1:7c:
         42:92:eb:56:d6:dc:72:80:e4:16:fb:2e:ac:7f:e9:7c:8c:df:
         9f:e3:27:bc:03:c5:83:fc:3b:c9:c2:21:72:9c:1b:0c:e1:b2:
         c5:f9:19:10:14:dd:6e:72:52:63:90:6f:bc:e6:1f:64:49:a1:
         1a:fd:08:52:3c:6d:42:b1:27:ba:46:a0:a7:a5:12:66:5e:0f:
         75:5e:23:8a:16:e0:bb:fa:15:14:20:0a:e9:3b:d9:c0:b0:4c:
         16:de:6b:c7:85:dd:57:ea:0d:e2:71:f0:b5:70:f8:ea:15:c1:
         68:a5:97:a9:09:2f:56:79:ec:c0:27:5d:7d:6f:89:33:7b:fc:
         bd:0e:e3:a4:34:f2:c7:54:38:36:5e:8c:d6:1e:16:a5:56:36:
         39:91:7b:f9:28:54:b0:7c:e1:0b:6f:17:5e:e1:0d:f4:9e:36:
         ea:e9:3b:01:d5:56:63:d5:5f:db:6e:1f:2c:39:15:6d:f5:fd:
         2f:3d:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:12 2025 by rpki-client