Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa
File:                     3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          EA9WEaqIefpPabBr9WNMnz4wQ4sBDVLAUwOlNXBPlVQ=
Subject key identifier:   5E:5D:B8:FD:40:DB:C3:A4:5D:A9:38:DA:98:27:12:D2:E2:92:79:B9
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       05636F70A2DC9D57249E133E39928C7608671923
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:06 +0000
ROA not before:           Fri 14 Aug 2026 17:51:06 +0000
ROA not after:            Fri 13 Aug 2027 17:56:06 +0000
asID:                     264886
IP address blocks:        179.108.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:63:6f:70:a2:dc:9d:57:24:9e:13:3e:39:92:8c:76:08:67:19:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:06 2026 GMT
            Not After : Aug 13 17:56:06 2027 GMT
        Subject: CN=5E5DB8FD40DBC3A45DA938DA982712D2E29279B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:17:52:6a:6a:0e:96:c2:fc:85:46:37:a2:6e:
                    09:4e:b2:68:1f:db:e5:29:cf:91:2a:f6:f3:2d:de:
                    3f:2c:e9:b8:f6:66:3c:83:76:6d:db:31:e0:07:28:
                    e9:6b:63:9a:c5:c8:f0:c8:70:bc:00:3a:13:3d:ab:
                    3f:10:66:29:30:70:a4:50:11:91:82:d1:58:dc:06:
                    44:8b:a1:37:60:7a:fc:63:fb:9e:9c:23:2d:1f:51:
                    78:97:51:44:18:c8:b9:e1:f7:a7:28:23:ca:ae:07:
                    78:33:e2:31:42:d3:4f:be:71:69:14:ab:28:f2:05:
                    82:83:96:f6:84:f0:f4:fb:bc:de:d6:ca:e8:10:ff:
                    78:26:60:35:88:ce:45:a3:c1:5a:a8:be:66:71:14:
                    8b:2d:da:e5:29:83:98:31:c0:40:63:6e:a8:86:3b:
                    4f:af:eb:60:cf:4e:ed:26:c9:be:dd:d6:f6:82:7b:
                    35:a5:d5:ca:fa:9f:29:fc:be:f8:1d:cc:03:4d:b1:
                    d8:70:af:1e:66:53:56:39:34:54:17:6e:43:e1:d2:
                    b3:8c:52:34:b9:eb:64:8a:f2:b8:26:22:45:c3:9e:
                    8d:b7:cc:82:3a:51:4a:2b:2f:f6:56:25:1e:56:6c:
                    e2:db:59:f3:1c:90:ba:f4:53:d1:bf:a8:e8:b1:30:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:5D:B8:FD:40:DB:C3:A4:5D:A9:38:DA:98:27:12:D2:E2:92:79:B9
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34372e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:34:d4:a4:4e:99:3c:63:df:b2:9f:bd:26:33:1e:d4:1c:
         c0:f2:de:85:e2:3c:f5:ff:85:ba:62:9a:fb:32:2d:2b:66:37:
         41:8b:6f:f1:8a:3e:26:0c:dc:cc:b4:bd:50:5a:10:13:90:13:
         31:9a:0d:94:c6:b9:86:cb:4e:b3:d2:a3:cf:f3:f7:20:32:5d:
         63:00:c6:de:64:b8:98:fc:d9:f3:ab:e9:2c:5a:a4:40:ab:55:
         cc:4b:f0:d1:3a:80:c7:b4:4d:b1:8b:41:37:15:0e:eb:3d:4e:
         40:a5:25:7d:89:62:8b:05:16:d6:c9:92:bb:b9:f7:84:c7:74:
         e9:98:60:7b:cc:1d:c4:e8:ce:0b:39:06:c5:29:d2:1c:d7:50:
         e1:c3:48:b7:85:0e:f6:ab:71:fa:57:22:8f:d8:55:95:2c:b1:
         68:c1:8b:47:8a:e0:40:08:cd:cc:28:23:06:65:f7:8f:68:75:
         0b:8f:6a:21:29:41:ee:90:6a:70:2e:28:2d:73:ca:2d:e6:8c:
         af:72:9e:df:42:cb:41:50:6b:4c:52:f6:27:69:86:a4:7e:32:
         de:e8:8b:00:ac:79:0b:43:30:d8:21:52:ad:cf:5d:b8:e9:a6:
         65:1f:64:b8:6f:9b:0b:32:65:67:bc:ff:3a:b9:dd:45:f6:bd:
         d7:f5:81:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 03:33:38 2026 by rpki-client