Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232382e302f32322d3232203d3e20323634383836.roa
File:                     3230312e34392e3232382e302f32322d3232203d3e20323634383836.roa (raw, json)
Hash identifier:          Q3libMtwn9N7rCSVd2j/VB+mVJr0M5uQqEBk9ryljI4=
Subject key identifier:   5A:4E:CC:85:78:58:74:0D:79:D4:1B:51:93:F2:4B:0D:C5:39:BC:8D
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       53EE2FB497C93BC38894C687AEB70613D42630EB
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232382e302f32322d3232203d3e20323634383836.roa
Signing time:             Fri 21 Aug 2026 00:02:29 +0000
ROA not before:           Thu 20 Aug 2026 23:57:29 +0000
ROA not after:            Fri 20 Aug 2027 00:02:29 +0000
asID:                     264886
IP address blocks:        201.49.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ee:2f:b4:97:c9:3b:c3:88:94:c6:87:ae:b7:06:13:d4:26:30:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 20 23:57:29 2026 GMT
            Not After : Aug 20 00:02:29 2027 GMT
        Subject: CN=5A4ECC857858740D79D41B5193F24B0DC539BC8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a9:00:aa:52:58:de:2d:d4:52:28:db:20:c0:
                    44:63:6f:ed:c3:f9:36:a1:c4:ec:a5:9c:c7:d4:ea:
                    16:2f:be:0d:f1:f0:eb:d0:80:69:1e:0e:ee:13:f5:
                    ea:93:c4:fa:28:38:09:80:cf:7e:0e:3a:76:26:b8:
                    87:3b:48:a4:6a:fa:62:94:09:37:20:32:05:e8:85:
                    bf:6d:66:c2:4a:fe:08:f5:4a:8f:48:2d:10:89:00:
                    99:ae:0c:8a:b2:60:a0:7b:d1:69:7b:30:29:12:92:
                    9d:b4:6d:33:b7:6b:80:fe:68:5a:7f:ce:e0:ae:72:
                    cc:25:52:d3:f5:72:a8:d5:22:2c:cc:9e:b2:6d:b8:
                    8a:14:fa:66:26:04:6c:d0:7d:96:59:b1:f2:74:58:
                    91:81:f3:ea:0d:f7:ea:8f:d1:c6:90:5a:d4:be:0a:
                    b9:e6:6f:3d:89:1e:4e:ae:30:51:af:b8:b6:10:4a:
                    76:79:d1:cb:f2:8d:e8:f3:0f:e4:8d:33:f4:ba:7d:
                    e3:43:d7:e0:52:76:d6:97:c4:c9:d3:8f:b3:fc:8d:
                    20:a3:58:a7:a3:3f:22:4f:6c:f5:a0:94:a0:0f:71:
                    bf:81:f8:f4:48:f2:42:1a:8e:71:66:16:45:a8:17:
                    03:0e:66:40:52:08:a9:6f:b9:ed:54:b1:f2:72:72:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4E:CC:85:78:58:74:0D:79:D4:1B:51:93:F2:4B:0D:C5:39:BC:8D
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232382e302f32322d3232203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cc:f7:2c:24:fe:4d:69:f8:9c:85:26:a3:3e:36:35:4d:a6:f4:
         17:ad:ef:f1:b6:b6:66:db:df:64:56:55:6f:29:89:d4:b5:a3:
         39:35:99:04:3b:bd:c2:de:10:ef:4f:25:7a:0d:e0:45:28:d4:
         4b:fb:52:2f:4e:b7:9f:39:da:9d:90:7a:df:77:ee:3b:73:7f:
         73:7f:cc:13:fd:0c:ea:d4:29:0a:3d:b8:b6:e2:ad:e5:52:16:
         0f:19:31:48:3f:6a:b7:1a:d8:2e:8e:62:eb:d8:f0:8e:7b:57:
         ac:73:dd:0b:b7:7e:87:b2:a7:2c:37:d9:f6:60:d0:49:24:6f:
         31:36:17:4d:16:2f:8d:18:56:9c:0b:14:f7:e5:8e:6b:86:b6:
         82:09:be:34:cb:a3:29:fe:ab:bb:2c:2e:90:4f:51:f4:22:5b:
         7c:17:c8:05:4c:88:a7:1b:31:96:9a:39:c6:28:96:6b:4f:21:
         7b:aa:9f:4e:05:95:5a:64:c7:ec:64:3d:65:b0:61:4b:6d:01:
         b5:a2:b1:24:37:75:10:41:3a:78:e9:81:3b:11:da:0a:e3:9e:
         1d:6e:28:36:1b:99:7e:f6:e9:b8:d6:48:05:06:83:92:94:2f:
         ea:92:73:c8:62:07:8f:1b:0a:d0:55:67:e7:81:3a:44:4a:4e:
         8b:3c:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:23:33 2026 by rpki-client