Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264352.roa
File:                     AS264352.roa (raw, json)
Hash identifier:          PNkz6krXGkO5/xDFMTb0JCPbyeLANaEk+g1yCS2a5oE=
Subject key identifier:   42:69:F0:F2:4C:50:33:12:00:86:43:5A:3D:39:FB:55:49:01:70:74
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       2E4CFF46E36C3C25A727BA8D828DB0C30828CAD7
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264352.roa
Signing time:             Mon 26 May 2025 13:00:19 +0000
ROA not before:           Mon 26 May 2025 12:55:19 +0000
ROA not after:            Mon 25 May 2026 13:00:19 +0000
asID:                     264352
IP address blocks:        131.108.228.0/22 maxlen: 22
                          2804:1d2c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 05:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4c:ff:46:e3:6c:3c:25:a7:27:ba:8d:82:8d:b0:c3:08:28:ca:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: May 26 12:55:19 2025 GMT
            Not After : May 25 13:00:19 2026 GMT
        Subject: CN=4269F0F24C5033120086435A3D39FB5549017074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:60:33:7d:a7:4a:55:f9:7a:dc:8c:cb:cb:d2:
                    2b:3b:c8:d7:a9:a4:23:83:be:a8:21:57:af:80:37:
                    07:02:33:35:5d:07:92:d9:94:16:e0:45:44:f1:8d:
                    a0:0c:f9:8c:ce:c7:37:c5:a8:49:4a:17:e3:21:49:
                    58:1b:f8:f6:f5:12:df:13:dd:b7:3a:dd:a3:c1:32:
                    e3:74:6b:7e:53:8a:a8:32:34:fe:d6:24:29:b4:9b:
                    ef:31:d5:2d:57:bf:1c:93:fa:a1:3f:98:3b:01:d4:
                    80:ad:fb:d7:8a:54:d3:29:23:59:db:5c:13:52:3b:
                    57:bf:a6:5a:4e:45:40:5b:f3:64:97:ed:46:7a:26:
                    cb:03:bc:7e:41:4d:e1:e7:57:eb:4d:32:7d:e4:24:
                    b0:fd:a3:10:68:ea:1a:81:d2:c4:d4:5a:58:b6:61:
                    9a:7c:a1:d8:45:9e:dc:08:d4:42:81:fb:3d:8c:03:
                    54:29:e8:fb:d4:f9:e7:00:fc:bd:e0:fb:9a:9b:99:
                    90:14:77:8c:c6:47:1c:11:61:ed:67:3a:be:ef:a7:
                    a4:61:aa:4b:34:44:3b:30:6f:a1:6e:13:9a:97:27:
                    01:57:63:90:4d:0d:33:b8:05:8d:a3:db:23:67:8f:
                    62:d3:aa:99:1b:a2:1b:48:bc:b6:e9:44:f6:60:71:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:69:F0:F2:4C:50:33:12:00:86:43:5A:3D:39:FB:55:49:01:70:74
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS264352.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:12:55:2c:b1:1d:8d:94:09:c1:43:2c:41:ad:02:d4:fa:30:
         32:8a:a2:1a:c1:b0:e2:b4:5d:d2:0f:67:2c:a7:c9:08:d8:83:
         44:53:ad:9f:79:9b:c6:cf:62:c1:a8:bf:a6:f8:4f:89:79:12:
         b6:a5:6b:ff:39:76:5b:a7:95:96:60:1f:38:01:3d:50:b1:3c:
         b9:ea:ee:36:d9:50:91:7a:07:82:ac:93:62:f7:b3:e0:bb:79:
         1b:5d:0b:6c:5e:24:dd:de:ef:61:b5:6f:72:db:91:f4:39:ff:
         c4:c6:a9:29:94:b5:75:c0:d8:6b:be:6b:b6:c9:d6:d5:60:eb:
         2c:09:21:58:d6:45:32:96:d9:41:90:8c:67:0c:21:21:9c:9c:
         74:2e:f0:bb:a5:bf:d3:e2:1c:5f:8e:69:d1:ca:e0:83:64:34:
         e4:a9:cc:90:c5:9b:cc:8d:a1:db:a6:57:9e:a8:af:0d:cc:ef:
         81:a8:e0:94:43:56:4e:7b:c6:8d:e9:b3:91:8b:d6:52:be:85:
         cd:71:bb:60:e7:94:96:72:db:e9:3a:cc:d3:43:09:a4:b3:99:
         c8:93:8f:23:98:42:51:15:d2:ea:72:0e:03:0d:f3:fb:9c:dd:
         bd:3d:78:b0:cd:21:f2:76:cd:58:5c:a7:bf:87:0e:52:cc:61:
         21:d6:7d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:09:14 2025 by rpki-client