Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32342d3234203d3e20323634383836.roa
File:                     3137392e3130382e34342e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          rfwXUByxPz5Y5j/qpS1a2gDOiS0bpPyoyLFFs7kqCRA=
Subject key identifier:   4D:D4:E7:67:70:4A:8D:CC:A4:C1:B9:60:45:DF:8E:4A:23:4F:FA:F3
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       0B88B1EF98E7564EE3D2C8CAC46A6CDD43979382
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:04 +0000
ROA not before:           Fri 14 Aug 2026 17:51:04 +0000
ROA not after:            Fri 13 Aug 2027 17:56:04 +0000
asID:                     264886
IP address blocks:        179.108.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:88:b1:ef:98:e7:56:4e:e3:d2:c8:ca:c4:6a:6c:dd:43:97:93:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:04 2026 GMT
            Not After : Aug 13 17:56:04 2027 GMT
        Subject: CN=4DD4E767704A8DCCA4C1B96045DF8E4A234FFAF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8a:5e:5c:7f:df:d2:63:c4:50:6e:10:3f:27:
                    5f:02:eb:de:bc:7f:d8:5b:e3:d4:40:2e:f7:eb:91:
                    31:d7:1d:15:24:2b:23:dd:ea:28:64:af:35:06:0f:
                    26:cc:78:33:06:44:a2:a1:c5:fd:b8:50:55:1d:6c:
                    34:55:9c:85:f9:47:17:b3:34:bd:dc:8e:de:ea:c5:
                    79:23:f2:31:8f:f5:4a:98:c2:22:6a:11:14:be:da:
                    29:81:9e:60:93:d8:4e:4d:e0:d9:45:48:d7:e5:05:
                    4b:ae:4f:7d:82:9a:f5:2f:09:80:33:ea:9b:3e:75:
                    47:ee:fc:16:5b:31:19:b7:be:00:07:41:78:9b:68:
                    84:cd:48:83:1c:c9:65:ea:0c:f7:97:c8:c6:3a:cf:
                    e3:92:04:36:f2:e9:09:5f:f6:3a:5b:27:26:02:75:
                    0c:af:12:a6:0d:fd:14:ad:2d:40:0d:b3:91:87:69:
                    d4:72:7c:51:23:7a:9a:49:68:37:6c:0a:43:ae:c9:
                    6b:0c:3e:5b:5a:de:40:02:df:55:0b:c5:f5:56:09:
                    f5:b0:d5:44:dc:d3:33:ee:52:d4:7f:82:a2:0f:a0:
                    e1:ad:c4:53:32:d3:ba:9a:e1:60:1f:a6:5e:59:cb:
                    1d:94:2b:76:33:06:40:ba:46:40:7d:2f:29:a8:33:
                    0d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D4:E7:67:70:4A:8D:CC:A4:C1:B9:60:45:DF:8E:4A:23:4F:FA:F3
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:8c:a4:f3:85:55:c0:6c:7d:d0:ef:3d:ec:da:16:58:1d:96:
         c2:6a:ec:94:fc:53:e8:83:1c:51:cd:0b:f3:b6:37:64:fb:1a:
         39:d3:cb:73:04:d8:2a:ad:af:76:b0:0c:ae:b4:86:aa:5d:78:
         b1:dd:b9:74:90:d1:5a:a4:e8:c4:1a:e6:6e:5d:04:ed:5c:23:
         53:b6:3c:50:37:b8:d5:a5:b4:be:23:35:7c:c0:39:bd:fe:6f:
         89:d2:ba:85:79:8f:9c:76:4d:6b:68:51:d0:ab:e4:47:eb:72:
         96:67:48:91:41:18:8d:c3:4c:c0:97:ff:5c:a6:e0:fb:71:81:
         2b:cf:45:c0:46:17:de:25:57:c9:d5:d9:5a:2c:3e:31:ef:ce:
         13:aa:49:c5:8d:f5:e4:b9:01:67:41:29:c2:dd:07:17:b2:8d:
         b2:8a:93:43:a1:e4:88:2a:dd:66:c6:53:88:e3:2b:18:a7:be:
         14:b4:96:f4:1c:b1:25:7c:22:7b:57:77:50:8f:40:bb:81:d8:
         ab:3d:40:6c:bf:c1:a6:88:ef:df:93:ca:01:f7:80:5a:b9:5e:
         52:41:10:93:7a:78:4a:23:39:72:b8:4a:98:39:06:32:95:2c:
         80:1f:d5:1b:e4:29:bb:ee:97:e6:fe:3e:92:93:61:1d:8a:01:
         ef:cc:cc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:25:37 2026 by rpki-client