Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232392e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3232392e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          O4Xwnz8wfVIzT0bQd1cKaNMID+RqS4iVJ5E176xciMo=
Subject key identifier:   C1:AE:04:11:66:AE:E6:D9:F0:98:7C:4E:02:38:CA:73:72:92:6B:BB
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       45A09C18B230990AECA49B3972EB8ED8E67BAD5B
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232392e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:06 +0000
ROA not before:           Fri 14 Aug 2026 17:51:06 +0000
ROA not after:            Fri 13 Aug 2027 17:56:06 +0000
asID:                     264886
IP address blocks:        201.49.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a0:9c:18:b2:30:99:0a:ec:a4:9b:39:72:eb:8e:d8:e6:7b:ad:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:06 2026 GMT
            Not After : Aug 13 17:56:06 2027 GMT
        Subject: CN=C1AE041166AEE6D9F0987C4E0238CA7372926BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:7d:a5:ed:a1:39:8c:65:97:12:47:de:d9:
                    03:05:83:68:19:9f:a6:cc:4d:17:7e:a0:e6:7b:1a:
                    9e:7c:f0:6e:dd:76:75:5e:54:b1:be:d5:1c:bf:d1:
                    54:7f:d1:3f:2f:75:bf:b1:9c:a7:d7:d2:5c:9b:98:
                    b7:7b:e3:96:8a:72:0f:85:e9:6c:7f:38:4a:a6:d6:
                    f8:a1:cd:01:a4:96:c1:2d:7c:97:6c:a7:d8:52:96:
                    76:2c:69:d9:e9:ae:f4:bc:77:ba:bd:ad:54:ab:62:
                    22:27:33:b7:2c:e3:c2:de:84:7a:b0:16:f7:5b:7c:
                    35:23:a6:c9:e7:93:bf:58:a0:85:ba:32:54:54:8b:
                    0b:ac:61:d0:05:97:ae:2e:f1:ca:f5:3c:b9:f3:64:
                    7e:56:8e:43:50:1f:79:b1:9a:76:cb:20:26:c9:67:
                    74:70:f0:06:05:b9:55:5d:77:1b:f6:c8:c2:ee:91:
                    7e:eb:e4:c5:77:ac:69:86:53:af:11:ba:bd:19:b1:
                    a9:d4:ef:b2:6d:bd:94:30:9e:3f:25:45:da:16:c2:
                    1c:7e:fd:22:91:ff:b2:a3:76:bd:f3:27:b2:f5:05:
                    4a:ec:34:15:be:b0:ab:e7:cf:ae:27:58:a4:87:52:
                    f7:98:7a:87:e9:40:f1:cb:db:27:a8:f1:2e:54:77:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:AE:04:11:66:AE:E6:D9:F0:98:7C:4E:02:38:CA:73:72:92:6B:BB
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232392e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:1c:e3:58:45:75:c5:21:61:88:44:28:4e:6f:18:37:25:
         f0:be:82:80:df:cc:a9:de:90:27:be:fc:03:a8:13:05:ef:97:
         d4:33:73:a5:e9:5d:0f:f4:0a:01:6a:f6:0e:d0:b3:75:ab:ca:
         51:dc:2f:62:68:d7:90:90:9c:1d:a1:e4:8a:b7:64:c9:33:85:
         5b:36:c3:fa:d9:a6:97:f2:27:21:2a:c0:fc:ae:40:9d:cc:c5:
         a0:48:36:c1:88:79:8d:cc:3d:11:5a:6f:11:c3:79:03:53:ee:
         a6:e8:c1:85:36:10:c8:eb:97:93:0f:31:b5:06:c5:1a:35:44:
         f6:56:4c:8a:01:ac:90:8b:3a:95:da:3c:07:8e:5b:c6:85:77:
         b7:1f:be:c7:63:48:39:cc:81:b7:de:92:cd:a4:2b:76:96:10:
         ac:ff:0c:6d:1c:ac:4c:23:e4:cf:87:87:42:d5:de:c7:fe:f9:
         88:fc:e7:9e:0b:0a:9b:2c:61:e3:dc:fc:f2:26:9d:76:62:d4:
         52:b9:a4:49:45:b7:14:1f:0d:98:24:8f:81:3d:0a:31:74:bd:
         fb:11:37:d9:14:73:e9:27:1d:42:5a:50:29:41:81:25:a9:7b:
         a0:0a:6d:8a:58:88:35:f9:57:a7:75:3c:ad:7b:b6:f8:de:3b:
         e6:04:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:22:08 2026 by rpki-client