Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138332e302f32342d3234203d3e20323634383836.roa
File:                     3136382e3232372e3138332e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          wVouzUesZKq39qk2Ht0Jubc8uQNDuwL7a6CEYHfP0g4=
Subject key identifier:   0C:0D:35:20:BB:8A:A0:4D:93:7F:2B:06:52:F8:49:F0:38:5C:AB:AC
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       7BCFDBA285BDF2C951CC1F91CBAFAEF842A72F27
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138332e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:06 +0000
ROA not before:           Fri 14 Aug 2026 17:51:06 +0000
ROA not after:            Fri 13 Aug 2027 17:56:06 +0000
asID:                     264886
IP address blocks:        168.227.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cf:db:a2:85:bd:f2:c9:51:cc:1f:91:cb:af:ae:f8:42:a7:2f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:06 2026 GMT
            Not After : Aug 13 17:56:06 2027 GMT
        Subject: CN=0C0D3520BB8AA04D937F2B0652F849F0385CABAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3f:85:f7:63:b3:e3:fa:4c:bc:7f:43:16:2d:
                    0e:fa:7d:b2:3c:db:16:37:d9:e8:5e:81:64:ad:05:
                    69:9e:01:eb:df:3f:9f:56:a3:8a:f4:a8:d5:69:b7:
                    36:85:a2:43:e5:ed:5a:cf:79:e4:ec:05:e3:39:c5:
                    0d:75:99:35:3d:d8:e1:57:41:5d:ac:08:a7:be:b9:
                    92:3d:ee:bb:11:a5:e4:b7:e1:a4:a1:c6:38:80:6e:
                    75:80:42:e5:28:71:f4:d3:70:0e:c3:b1:6b:cf:10:
                    b4:4b:fa:69:91:5e:72:c0:73:34:41:c6:b2:ea:fa:
                    65:c1:72:15:d0:d8:fe:06:4b:05:89:84:2c:0e:2f:
                    80:f4:e5:b5:3f:e5:bc:cb:ba:f1:0a:bc:3d:c3:55:
                    24:ae:13:0f:5b:12:b3:16:48:7a:d1:bf:74:9c:25:
                    ab:9f:67:3c:4c:eb:6d:40:63:12:5b:03:6a:eb:75:
                    2f:4c:a8:fa:01:22:ba:de:a4:13:fd:ec:b0:12:6c:
                    2c:68:b8:61:71:ea:fb:23:84:86:10:32:1a:46:99:
                    95:da:1c:71:29:49:d4:e9:66:ef:aa:cd:cb:ad:7c:
                    0b:0f:4f:4d:4a:2f:a9:1a:c0:4d:a3:e0:cd:aa:3c:
                    f2:82:44:5e:fa:78:f2:23:28:cf:bc:b9:14:48:28:
                    21:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0D:35:20:BB:8A:A0:4D:93:7F:2B:06:52:F8:49:F0:38:5C:AB:AC
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3136382e3232372e3138332e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:fc:bd:c2:47:dd:b6:48:06:d2:c1:5a:1d:9c:80:3e:b7:6c:
         7f:5a:34:58:a8:57:36:a6:81:c9:1e:f1:49:18:ee:9b:bd:97:
         90:23:ec:b2:0f:b0:d7:50:cf:e3:e8:bf:02:ca:6b:41:9d:07:
         ff:92:19:f1:a6:d1:58:e6:e9:3f:bb:3b:93:7a:45:99:53:47:
         c1:b1:06:68:da:62:e5:bb:9b:84:b4:c5:3a:77:e8:b6:b6:4a:
         80:38:3c:45:2b:b4:49:95:37:bf:56:45:0f:2a:73:48:71:a7:
         9a:6c:01:48:47:6b:06:b8:d5:cb:9c:f6:ce:b5:01:97:20:4d:
         42:ab:85:2a:fa:d3:1c:a7:6a:ab:0b:42:00:f8:d1:64:5f:2e:
         bc:c3:02:9b:97:80:fa:56:b4:79:0c:8a:56:fb:a5:c1:97:bb:
         91:68:ab:de:d3:95:e9:0d:c4:4b:f4:de:46:81:2b:f0:34:33:
         7e:15:6e:6d:84:5b:9b:ae:06:da:78:2a:53:dc:99:c5:cf:33:
         77:4d:ea:33:42:5a:03:77:82:88:c2:27:8a:26:c2:fc:34:49:
         89:5e:65:68:ce:8a:31:fc:6a:98:af:96:b4:45:91:aa:7f:5d:
         8a:b2:97:27:ae:0a:ee:61:b8:6a:a0:66:97:1d:cf:66:47:9d:
         8a:e4:6e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 20:25:45 2026 by rpki-client