Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262785.roa
File:                     AS262785.roa (raw, json)
Hash identifier:          tgwnktyCLi7K0y+0MwnJrBccG1xAtn94n/d+P1N/lFY=
Subject key identifier:   CA:66:59:48:95:AE:4C:32:E0:54:11:7B:5C:6F:E8:16:6A:C3:89:9C
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       6D16E4F3557D55E3652A7707BF299B6603729CCB
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262785.roa
Signing time:             Thu 11 Sep 2025 19:52:35 +0000
ROA not before:           Thu 11 Sep 2025 19:47:35 +0000
ROA not after:            Thu 10 Sep 2026 19:52:35 +0000
asID:                     262785
IP address blocks:        45.170.80.0/22 maxlen: 24
                          167.250.8.0/22 maxlen: 24
                          170.238.80.0/22 maxlen: 24
                          201.62.48.0/20 maxlen: 24
                          201.71.32.0/20 maxlen: 24
                          2804:2bf4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 13:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:16:e4:f3:55:7d:55:e3:65:2a:77:07:bf:29:9b:66:03:72:9c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Sep 11 19:47:35 2025 GMT
            Not After : Sep 10 19:52:35 2026 GMT
        Subject: CN=CA66594895AE4C32E054117B5C6FE8166AC3899C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:66:39:5f:3a:a7:18:a8:11:34:8a:f2:1f:
                    df:4a:07:89:06:17:96:09:62:aa:d3:0f:96:c5:09:
                    5f:68:3a:be:f2:9d:70:55:03:05:49:0a:82:a6:1e:
                    22:96:f2:e0:4d:92:de:4a:02:c1:58:73:45:45:8d:
                    d5:df:5a:85:e8:ad:16:d2:cc:86:e3:2e:1c:4e:67:
                    82:c7:8e:2e:67:b8:b8:e3:7b:d5:c1:6a:2c:8e:21:
                    74:a9:73:f9:5f:6d:eb:8d:63:97:50:b8:46:7b:51:
                    64:65:2c:6d:24:84:fd:a7:f0:56:bf:37:b0:63:47:
                    56:93:73:9f:8b:40:db:88:1d:11:7b:99:8f:e2:ed:
                    5c:4e:e9:9e:dc:b8:95:7a:e4:a2:31:d5:40:f6:c1:
                    75:ea:12:94:bd:8b:ef:97:36:c8:7f:c2:78:6b:1e:
                    25:a6:6c:3f:88:31:cc:aa:a6:d0:e1:a2:e3:aa:13:
                    ff:26:a1:41:a1:16:6d:39:8d:43:e3:c1:f3:ca:8d:
                    75:a3:31:5e:f6:6f:2d:39:ca:44:0b:b0:c7:c3:56:
                    8e:3b:c4:02:2f:98:58:e6:48:a1:dd:21:ce:37:49:
                    52:24:32:c1:76:4a:b4:d1:bc:11:84:26:36:7c:f5:
                    c8:fb:e5:fd:de:72:81:00:51:d9:74:d9:a9:9c:55:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:59:48:95:AE:4C:32:E0:54:11:7B:5C:6F:E8:16:6A:C3:89:9C
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS262785.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.80.0/22
                  167.250.8.0/22
                  170.238.80.0/22
                  201.62.48.0/20
                  201.71.32.0/20
                IPv6:
                  2804:2bf4::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:38:25:08:07:fe:d5:7a:a1:aa:a0:8a:59:68:85:f4:22:95:
         7a:c0:53:07:74:76:c2:a0:5e:27:ad:70:0a:ad:6d:2d:65:34:
         92:2d:82:49:97:68:70:a5:0f:05:09:01:6d:96:04:8e:20:66:
         97:57:22:56:d2:dd:49:b8:1c:c2:e0:4e:45:cd:71:f2:d2:57:
         68:8d:57:2d:af:e0:91:b9:2d:18:b8:c0:18:c4:f7:65:89:73:
         5b:ed:5d:a9:82:f0:0e:fb:56:77:f1:a3:55:86:5c:5a:dd:2a:
         50:a2:2c:3f:29:8b:84:4a:be:bc:c0:bf:40:16:5e:9e:aa:88:
         eb:b4:e5:33:b6:1e:15:86:80:62:90:9a:00:89:c2:87:7a:e2:
         49:37:f0:03:89:a6:21:ca:99:a8:87:28:4b:ab:12:75:78:2a:
         7c:a9:81:90:9b:1e:81:0e:90:56:ca:6d:e0:6b:c9:61:50:84:
         e1:f5:12:a9:41:fe:38:dd:d8:68:d6:8d:44:3e:c9:26:31:d6:
         bf:b8:82:de:ff:8d:ce:e0:06:5b:28:4c:9b:e4:ab:c2:65:20:
         7c:18:61:54:20:22:0c:2f:b1:d0:c2:31:eb:51:4f:c9:a0:df:
         79:2e:01:e7:62:7c:f3:cc:59:92:a5:60:6c:00:58:cd:32:f3:
         7b:42:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:48:52 2025 by rpki-client