Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          wUbtXxjMHg8WJH94feK3/o9j6CxWafmh6Ext3Z5qYfY=
Subject key identifier:   81:2E:88:A4:03:85:49:29:E1:9A:98:01:8E:CC:A3:F9:11:70:6E:68
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       05452A94673F9E40CC30E3C2568D96E90D596509
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
Signing time:             Tue 02 Jun 2026 22:12:50 +0000
ROA not before:           Tue 02 Jun 2026 22:07:50 +0000
ROA not after:            Tue 01 Jun 2027 22:12:50 +0000
asID:                     52468
IP address blocks:        189.84.237.0/24 maxlen: 24
                          189.84.238.0/24 maxlen: 24
                          2804:574:3::/48 maxlen: 48
                          2804:574:4::/48 maxlen: 48
                          2804:574:5::/48 maxlen: 48
                          2804:574:6::/48 maxlen: 48
                          2804:574:8::/48 maxlen: 48
                          2804:574:a::/48 maxlen: 48
                          2804:574:aaaa::/48 maxlen: 48
                          2804:574:c000::/48 maxlen: 48
                          2804:2b78:8000::/33 maxlen: 33
                          2804:2b78:8001::/48 maxlen: 48
                          2804:2b78:8002::/48 maxlen: 48
                          2804:2b78:8003::/48 maxlen: 48
                          2804:2b78:8005::/48 maxlen: 48
                          2804:2b78:8007::/48 maxlen: 48
                          2804:2b78:8008::/46 maxlen: 46
                          2804:2b78:800c::/48 maxlen: 48
                          2804:2b78:800d::/48 maxlen: 48
                          2804:2b78:800e::/48 maxlen: 48
                          2804:2b78:800f::/48 maxlen: 48
                          2804:2b78:8010::/47 maxlen: 47
                          2804:2b78:8012::/48 maxlen: 48
                          2804:2b78:8013::/48 maxlen: 48
                          2804:2b78:8014::/47 maxlen: 47
                          2804:2b78:8016::/48 maxlen: 48
                          2804:2b78:8017::/48 maxlen: 48
                          2804:2b78:8018::/48 maxlen: 48
                          2804:2b78:801a::/48 maxlen: 48
                          2804:2b78:801b::/48 maxlen: 48
                          2804:2b78:801c::/48 maxlen: 48
                          2804:2b78:801d::/48 maxlen: 48
                          2804:2b78:801f::/48 maxlen: 48
                          2804:2b78:8020::/44 maxlen: 44
                          2804:2b78:8032::/48 maxlen: 48
                          2804:2b78:8033::/48 maxlen: 48
                          2804:2b78:8034::/47 maxlen: 47
                          2804:2b78:8036::/48 maxlen: 48
                          2804:2b78:8037::/48 maxlen: 48
                          2804:2b78:8038::/48 maxlen: 48
                          2804:2b78:8039::/48 maxlen: 48
                          2804:2b78:803a::/48 maxlen: 48
                          2804:2b78:803b::/48 maxlen: 48
                          2804:2b78:803c::/48 maxlen: 48
                          2804:2b78:803d::/48 maxlen: 48
                          2804:2b78:803f::/48 maxlen: 48
                          2804:2b78:8040::/44 maxlen: 44
                          2804:2b78:8050::/44 maxlen: 44
                          2804:2b78:8061::/48 maxlen: 48
                          2804:2b78:8062::/48 maxlen: 48
                          2804:2b78:8063::/48 maxlen: 48
                          2804:2b78:8064::/48 maxlen: 48
                          2804:2b78:8065::/48 maxlen: 48
                          2804:2b78:8066::/48 maxlen: 48
                          2804:2b78:8067::/48 maxlen: 48
                          2804:2b78:806a::/48 maxlen: 48
                          2804:2b78:8081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Jun 2026 06:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:45:2a:94:67:3f:9e:40:cc:30:e3:c2:56:8d:96:e9:0d:59:65:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jun  2 22:07:50 2026 GMT
            Not After : Jun  1 22:12:50 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:ac:fe:96:d6:ec:fd:af:e0:6a:26:0d:35:
                    d4:3b:6b:59:3e:96:6d:59:f1:fa:7b:86:b1:61:4e:
                    cf:3a:75:55:10:44:98:fb:1d:7d:2e:35:58:ad:9a:
                    61:49:10:9c:70:d2:8e:65:73:17:95:c5:4e:18:d6:
                    6c:9b:e6:77:11:b6:c1:6f:c1:33:04:06:ce:cc:f2:
                    c1:2e:ae:bd:d7:1a:9a:b9:ef:1c:93:7d:e0:53:4f:
                    1e:0b:9b:84:92:02:21:14:63:28:e0:73:0e:83:1b:
                    a8:98:46:bc:de:13:98:fc:b2:39:d6:55:f7:dd:49:
                    bb:b8:82:26:e2:d3:16:25:1a:4c:be:5f:ef:dc:1a:
                    7f:33:8a:20:59:b2:1b:f0:5b:5b:3c:cb:c3:02:58:
                    b6:33:48:0b:0f:19:b6:92:42:d4:42:89:5d:ad:4d:
                    b2:6c:4e:01:11:e5:42:f1:55:f2:1a:cc:06:33:7c:
                    10:ee:ad:61:55:2d:88:58:39:c6:7a:3a:e5:df:d7:
                    63:be:fd:2e:8c:83:1c:43:19:9d:6a:20:bc:5f:b6:
                    05:55:99:60:41:c6:b1:03:60:47:7f:84:e4:f7:8c:
                    a6:eb:bf:9a:37:3f:1c:4f:57:e2:11:08:ce:ee:c4:
                    18:b0:74:b8:72:97:b4:b1:d2:c3:ff:94:ae:97:32:
                    9a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:2E:88:A4:03:85:49:29:E1:9A:98:01:8E:CC:A3:F9:11:70:6E:68
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0-189.84.238.255
                IPv6:
                  2804:574:3::-2804:574:6:ffff:ffff:ffff:ffff:ffff
                  2804:574:8::/48
                  2804:574:a::/48
                  2804:574:aaaa::/48
                  2804:574:c000::/48
                  2804:2b78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0a:c8:83:24:c9:5e:c3:59:3d:95:a9:bf:c4:29:c5:83:e1:44:
         e3:ea:f3:ca:cb:97:93:70:8c:e6:8e:db:18:4f:99:a6:a0:de:
         90:e8:4f:da:13:42:4f:e9:f6:71:48:d9:80:1a:17:fe:dd:d7:
         57:f1:9d:ec:ab:ef:3d:a3:1f:dd:36:e6:fe:be:17:45:e5:11:
         21:ee:94:c9:9c:5f:6d:35:52:8e:77:57:5f:68:e0:c7:1c:ab:
         a6:41:cb:87:d2:99:59:a3:af:02:4f:2a:64:27:77:7b:f4:e0:
         94:b9:0e:f2:fc:98:f1:97:a8:6e:8c:ba:9c:be:eb:33:50:0d:
         6d:d0:ee:ec:22:f1:97:58:21:35:09:23:9e:f5:82:fc:4a:4a:
         8a:bd:70:19:7d:ae:3e:27:3b:10:22:07:e8:55:a7:d1:ea:aa:
         6d:73:33:c9:ec:fb:9e:4f:8a:06:4d:95:5e:23:cd:0c:d6:73:
         eb:28:6d:26:bf:85:f4:f0:33:d5:f7:0c:23:e0:eb:4b:df:96:
         75:1f:b8:0b:5d:f3:2e:27:2d:86:7c:ef:07:c3:e1:9c:a7:3d:
         55:f1:c4:5f:3e:36:5e:f4:2c:51:22:bb:52:0a:5f:67:e3:fe:
         66:02:80:43:f7:2d:4e:2f:42:37:61:20:47:1e:69:22:1a:80:
         27:9c:5b:ae
-----BEGIN CERTIFICATE-----
MIIHXTCCBkWgAwIBAgIUBUUqlGc/nkDMMOPCVo2W6Q1ZZQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNjA2MDIyMjA3NTBaFw0yNzA2MDEyMjEyNTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDAzOUFDRkU5NkQ2RUNGREFG
RTA2QTI2MEQzNUQ0M0I2QjU5M0U5NjZENTlGMUZBN0I4NkIxNjE0RUNGM0E3NTU1
MTA0NDk4RkIxRDdEMkUzNTU4QUQ5QTYxNDkxMDlDNzBEMjhFNjU3MzE3OTVDNTRF
MThENjZDOUJFNjc3MTFCNkMxNkZDMTMzMDQwNkNFQ0NGMkMxMkVBRUJERDcxQTlB
QjlFRjFDOTM3REUwNTM0RjFFMEI5Qjg0OTIwMjIxMTQ2MzI4RTA3MzBFODMxQkE4
OTg0NkJDREUxMzk4RkNCMjM5RDY1NUY3REQ0OUJCQjg4MjI2RTJEMzE2MjUxQTRD
QkU1RkVGREMxQTdGMzM4QTIwNTlCMjFCRjA1QjVCM0NDQkMzMDI1OEI2MzM0ODBC
MEYxOUI2OTI0MkQ0NDI4OTVEQUQ0REIyNkM0RTAxMTFFNTQyRjE1NUYyMUFDQzA2
MzM3QzEwRUVBRDYxNTUyRDg4NTgzOUM2N0EzQUU1REZENzYzQkVGRDJFOEM4MzFD
NDMxOTlENkEyMEJDNUZCNjA1NTU5OTYwNDFDNkIxMDM2MDQ3N0Y4NEU0Rjc4Q0E2
RUJCRjlBMzczRjFDNEY1N0UyMTEwOENFRUVDNDE4QjA3NEI4NzI5N0I0QjFEMkMz
RkY5NEFFOTczMjlBMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Dms/pbW7P2v4GomDTXUO2tZPpZtWfH6e4axYU7POnVVEESY+x19
LjVYrZphSRCccNKOZXMXlcVOGNZsm+Z3EbbBb8EzBAbOzPLBLq691xqaue8ck33g
U08eC5uEkgIhFGMo4HMOgxuomEa83hOY/LI51lX33Um7uIIm4tMWJRpMvl/v3Bp/
M4ogWbIb8FtbPMvDAli2M0gLDxm2kkLUQoldrU2ybE4BEeVC8VXyGswGM3wQ7q1h
VS2IWDnGejrl39djvv0ujIMcQxmdaiC8X7YFVZlgQcaxA2BHf4Tk94ym67+aNz8c
T1fiEQjO7sQYsHS4cpe0sdLD/5SulzKaHQIDAQABo4ICazCCAmcwHQYDVR0OBBYE
FIEuiKQDhUkp4ZqYAY7Mo/kRcG5oMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBr
aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnl5OXQ3YkFhWTFTUnRNamprWHdVTW5F
Y3hZdWVxNjVkWjlMYVYxTkQyeUEvMS9BUzUyNDY4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjAUBAIAATAOMAwDBAC9VO0D
BAC9VO4wRgQCAAIwQDASAwcAKAQFdAADAwcAKAQFdAAGAwcAKAQFdAAIAwcAKAQF
dAAKAwcAKAQFdKqqAwcAKAQFdMAAAwYHKAQreIAwDQYJKoZIhvcNAQELBQADggEB
AArIgyTJXsNZPZWpv8QpxYPhROPq88rLl5NwjOaO2xhPmaag3pDoT9oTQk/p9nFI
2YAaF/7d11fxneyr7z2jH9025v6+F0XlESHulMmcX201Uo53V19o4Mccq6ZBy4fS
mVmjrwJPKmQnd3v04JS5DvL8mPGXqG6Mupy+6zNQDW3Q7uwi8ZdYITUJI571gvxK
Soq9cBl9rj4nOxAiB+hVp9Hqqm1zM8ns+55PigZNlV4jzQzWc+sobSa/hfTwM9X3
DCPg60vflnUfuAtd8y4nLYZ87wfD4ZynPVXxxF8+Nl70LFEiu1IKX2fj/mYCgEP3
LU4vQjdhIEceaSIagCecW64=
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:10:15 2026 by rpki-client