Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS274611.roa
File:                     AS274611.roa (raw, json)
Hash identifier:          Yh/wgxJOPUs70756krDUncge782fakh6viBhdbwWBw0=
Subject key identifier:   51:39:1C:78:9D:5A:0F:9D:84:6D:BE:49:E9:6B:5F:14:6E:1A:11:1F
Certificate issuer:       /CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
Certificate serial:       26741E40F7B459BFD3FA520AE2791F6CB00601A8
Authority key identifier: CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS274611.roa
Signing time:             Wed 19 Aug 2026 15:32:10 +0000
ROA not before:           Wed 19 Aug 2026 15:27:10 +0000
ROA not after:            Wed 18 Aug 2027 15:32:10 +0000
asID:                     274611
IP address blocks:        186.216.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl
                          rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 11:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:74:1e:40:f7:b4:59:bf:d3:fa:52:0a:e2:79:1f:6c:b0:06:01:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF152F338D1D88EC0CD7185539BE3D85E3A63E9E
        Validity
            Not Before: Aug 19 15:27:10 2026 GMT
            Not After : Aug 18 15:32:10 2027 GMT
        Subject: CN=51391C789D5A0F9D846DBE49E96B5F146E1A111F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:45:51:12:82:0b:1c:87:7c:4d:46:16:f1:
                    09:de:33:40:19:42:c2:48:36:96:14:26:a1:2b:aa:
                    2f:ed:0f:6e:6b:17:7c:bd:c7:ca:1e:c1:2b:47:f4:
                    97:a4:1a:a0:a6:6c:5d:aa:05:9e:bf:90:f9:70:3f:
                    5d:b1:1a:a8:ac:4b:d7:eb:2b:97:98:3d:74:ac:b9:
                    e3:6a:57:8e:79:9f:73:40:9c:b2:16:72:1d:a0:1c:
                    f6:77:f8:02:2f:16:12:e7:b7:11:56:20:54:31:0a:
                    8a:38:10:3d:61:ee:36:71:99:c5:26:66:40:16:d7:
                    f7:60:23:d7:b5:f7:a5:36:08:ae:5f:b8:d3:c1:71:
                    47:29:ce:f5:d5:a6:7c:a4:ae:11:96:eb:b4:d5:c5:
                    74:e1:68:68:ce:4d:81:a6:72:71:26:e9:58:72:7b:
                    55:6e:64:89:e4:74:e9:f1:a2:38:1f:c9:05:5e:5e:
                    8f:0d:37:6e:74:7b:ad:c2:87:8a:eb:eb:e8:0c:7b:
                    21:d1:af:4f:98:02:b6:f2:15:b4:90:33:bb:cf:84:
                    80:95:90:a3:83:fb:c1:e3:08:25:18:a5:d4:0c:c6:
                    09:78:9f:9c:1c:f1:09:07:b5:40:01:e5:d9:e6:74:
                    59:ba:af:75:01:e1:d6:c3:5f:bc:12:99:fa:3a:f6:
                    3b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:39:1C:78:9D:5A:0F:9D:84:6D:BE:49:E9:6B:5F:14:6E:1A:11:1F
            X509v3 Authority Key Identifier:
                keyid:CF:15:2F:33:8D:1D:88:EC:0C:D7:18:55:39:BE:3D:85:E3:A6:3E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF152F338D1D88EC0CD7185539BE3D85E3A63E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CotJ3Rcmf4P87Tv39J8BytN5PAmXNUH5Mp74JUbaj16U/1/AS274611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:04:81:4b:e7:0c:a8:cb:23:94:d2:b9:9b:eb:54:0b:61:65:
         30:8a:db:b7:6b:ef:e7:c1:70:35:5a:6e:6c:70:35:b0:c1:00:
         02:9d:6b:17:45:64:05:c9:8d:de:76:ac:91:0c:36:29:ae:89:
         1e:99:e5:f0:d0:95:fe:bc:f7:04:5f:28:73:8d:b2:df:67:13:
         2a:29:71:57:c2:0e:72:b9:e4:8e:10:da:c9:b7:85:89:19:d9:
         b8:0a:96:c3:bd:bc:86:df:f0:f3:f9:54:73:79:e0:9e:29:06:
         e7:4a:ae:91:d8:e6:1f:de:f8:93:7f:88:16:3c:9b:a4:4e:8a:
         d1:af:c1:aa:53:0d:c2:7f:ea:0d:97:1f:9c:bb:a0:4a:71:76:
         52:74:9f:cf:26:83:e4:3e:a2:08:5c:03:4d:e2:ae:2b:ba:b3:
         59:0f:69:f2:8d:b1:df:f0:06:bd:f7:f6:21:1c:56:8f:3d:32:
         22:db:3f:a3:13:75:f0:bb:d0:ef:b6:c0:fa:a0:14:3d:5c:87:
         12:03:cf:a3:53:ec:ee:68:2a:73:b6:94:53:65:22:58:de:f3:
         79:df:e8:2f:78:f5:c0:96:eb:59:86:8c:e2:d9:b4:07:88:bc:
         62:d8:1d:64:c8:fa:b8:27:81:d0:81:b5:09:07:cc:66:dc:cc:
         c9:34:cd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:26:30 2026 by rpki-client