Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138312e302f32342d3234203d3e20323634383836.roa
File:                     3136382e3232372e3138312e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          ZX1NETVq1FCVFL3lOcnVbOUKUH0/dI5yXQlIqHouO6Y=
Subject key identifier:   E4:05:AD:60:0F:22:47:0F:AA:9A:B6:59:9D:22:C4:C9:73:20:FE:E5
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       578261A1D4D5D7B9AE831BC0A8B58903F05F35C7
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138312e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:04 +0000
ROA not before:           Fri 14 Aug 2026 17:51:04 +0000
ROA not after:            Fri 13 Aug 2027 17:56:04 +0000
asID:                     264886
IP address blocks:        168.227.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:82:61:a1:d4:d5:d7:b9:ae:83:1b:c0:a8:b5:89:03:f0:5f:35:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:04 2026 GMT
            Not After : Aug 13 17:56:04 2027 GMT
        Subject: CN=E405AD600F22470FAA9AB6599D22C4C97320FEE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:17:93:b4:df:df:e3:65:77:e5:9b:e3:3d:
                    f4:66:aa:28:4e:e7:cc:74:ff:08:25:a1:64:3c:97:
                    14:89:d5:6e:64:b0:f4:22:1a:e2:6e:a3:e2:0d:cb:
                    92:33:e9:47:8f:7b:1f:af:ad:3c:aa:b2:9a:72:bf:
                    a0:93:c5:8a:4c:b8:e7:9d:55:f7:08:81:e4:88:1f:
                    6b:51:f6:35:eb:ca:0a:72:1d:23:35:f8:62:76:d2:
                    a9:22:79:b5:6e:42:91:1d:a0:ee:07:56:72:48:b4:
                    cc:e7:14:cd:ab:44:ef:91:c9:48:29:f8:2b:96:80:
                    f1:3e:f6:ca:b0:c6:e7:d7:91:cd:a9:1f:d3:da:75:
                    60:01:54:db:e7:73:58:0f:40:b5:17:56:92:32:d0:
                    0a:d0:d2:e4:23:b9:16:e0:d1:3c:95:ed:ef:e5:c3:
                    cf:7a:00:5e:8f:62:f7:bb:b7:ca:d6:96:86:3b:42:
                    41:f5:c1:7d:f5:41:4a:37:f5:38:4f:f8:69:bc:44:
                    00:75:33:04:95:ed:1e:cc:de:e0:35:8e:37:25:3a:
                    1b:30:2d:26:62:4a:21:99:26:58:9c:ac:5d:6f:43:
                    22:1d:d2:f9:85:b9:f5:b8:11:43:5c:c5:e6:47:55:
                    60:19:56:f0:71:8a:c1:3d:5a:37:f3:04:61:60:61:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:05:AD:60:0F:22:47:0F:AA:9A:B6:59:9D:22:C4:C9:73:20:FE:E5
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138312e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:bb:6e:ec:fc:8d:56:f9:a6:ff:e3:f3:53:d1:7c:42:83:c2:
         c4:04:5f:2a:7c:15:33:5c:5a:95:ad:6d:31:31:a6:cd:78:0c:
         13:31:c3:cc:f0:7c:24:9e:a5:07:e5:d7:db:50:3c:f8:4e:be:
         81:aa:3f:d4:d8:dc:5c:96:77:9d:ae:be:97:1e:b1:e3:b1:f2:
         34:f7:6e:f5:67:ba:ed:2c:dd:9a:d5:a3:ef:6b:60:c7:c9:a2:
         49:9b:f3:03:6f:22:b1:0a:1b:9f:cb:26:18:a6:b5:af:bb:9a:
         07:f5:21:53:c2:fc:a3:53:00:12:3f:04:19:25:a7:be:75:d2:
         5f:71:51:20:83:d9:6f:54:64:04:7f:2a:73:7c:79:02:d3:07:
         a5:9b:d1:49:d7:36:ce:09:a8:ee:c0:98:7a:38:48:d0:ad:7b:
         1c:58:de:3a:00:13:e0:b1:36:ce:a7:58:f5:8b:11:6f:59:83:
         a0:b7:5a:6b:5a:c2:cd:17:02:01:ac:54:05:1e:a7:f3:b2:f8:
         b7:9f:6e:21:67:d1:43:ec:49:fc:b5:1e:26:b3:c1:33:61:b0:
         34:ae:10:d1:6c:b4:d7:5c:3f:1f:99:68:1b:b8:64:d8:41:7c:
         59:c9:be:59:26:27:93:41:80:8a:67:79:5f:cb:55:aa:83:87:
         ab:e7:2b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:21:58 2026 by rpki-client