Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233302e302f32332d3233203d3e20323634383836.roa
File:                     3230312e34392e3233302e302f32332d3233203d3e20323634383836.roa (raw, json)
Hash identifier:          cT5Nvv4dRJYUQ3IJLCfAjdoxQwjIoB3iqDscAR+k7Rg=
Subject key identifier:   15:D2:18:5E:CE:6A:68:45:EA:26:30:AE:AE:36:B4:B4:34:79:7B:46
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       53FC3D5798F5382D7F00109455C838535D427FF5
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233302e302f32332d3233203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:07 +0000
ROA not before:           Fri 14 Aug 2026 17:51:07 +0000
ROA not after:            Fri 13 Aug 2027 17:56:07 +0000
asID:                     264886
IP address blocks:        201.49.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:fc:3d:57:98:f5:38:2d:7f:00:10:94:55:c8:38:53:5d:42:7f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:07 2026 GMT
            Not After : Aug 13 17:56:07 2027 GMT
        Subject: CN=15D2185ECE6A6845EA2630AEAE36B4B434797B46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:0a:f2:0d:63:17:19:74:b7:d7:be:e1:28:
                    28:e4:7e:9a:48:c5:b6:70:b1:6d:66:3d:6c:64:ee:
                    25:e5:64:09:a8:3f:86:f2:51:be:da:1d:45:ed:cb:
                    03:31:a7:7c:cf:79:9c:49:a0:18:67:9f:26:23:20:
                    fe:f7:a7:d0:ed:72:0c:a2:66:f8:75:ea:2a:0f:d3:
                    ed:66:3f:d1:71:60:56:1d:46:11:4d:59:09:ab:5c:
                    54:1e:31:e6:24:0d:6d:50:97:15:34:cd:ed:db:a9:
                    ca:82:f7:89:46:fc:ed:61:09:01:2e:3f:6b:07:12:
                    34:a1:08:7e:35:59:31:29:cf:5f:67:73:8c:cb:a7:
                    09:21:d0:05:77:fc:81:08:a9:08:4d:f5:e4:28:69:
                    12:c0:a3:b9:6a:6a:e5:7b:56:c2:15:8c:11:3b:17:
                    a5:26:1e:89:1a:51:05:bb:ef:c5:e1:81:7e:f7:f2:
                    c9:86:ce:0a:7d:17:3a:23:34:9d:be:51:8f:d5:0e:
                    ba:ae:5a:40:68:fc:f8:cf:2b:c1:9c:23:be:28:a4:
                    a4:1a:14:1d:b9:ff:09:03:be:c0:56:a4:b7:bf:a8:
                    f7:65:64:d2:20:23:20:43:bb:a6:c0:40:db:f2:ab:
                    36:bf:72:71:7e:86:8a:32:65:1d:af:67:7d:d2:72:
                    30:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D2:18:5E:CE:6A:68:45:EA:26:30:AE:AE:36:B4:B4:34:79:7B:46
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233302e302f32332d3233203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:47:70:1f:56:16:46:f0:80:cc:62:cb:14:f8:45:ee:80:2d:
         a4:6a:a1:c9:68:19:89:2d:aa:97:37:da:fc:25:2f:72:e2:71:
         5b:f1:87:1c:f8:b8:f7:81:93:5b:91:3a:84:61:7b:dc:b4:a1:
         76:d4:f6:1e:67:0a:4d:3d:e7:07:e8:65:c4:43:04:79:c0:7d:
         ce:70:1c:85:a6:2a:f8:61:5a:fb:2f:92:c8:8c:2f:33:82:83:
         08:4f:23:31:c1:e3:7c:3e:2f:86:fe:6b:9c:1c:ac:70:c3:b6:
         d3:6d:44:8b:7e:3e:f9:76:ef:de:8b:d0:9d:c7:e6:e6:f1:c2:
         d3:3b:f1:0d:58:67:f4:d5:e0:b0:74:fb:a5:25:9a:53:ad:63:
         e9:f6:98:46:ee:79:db:be:53:24:43:66:14:0c:00:30:ba:1a:
         28:ad:49:dd:85:a5:d2:43:d7:3a:ea:23:33:0a:3a:cd:b3:65:
         a3:8c:3c:e4:60:6a:17:c7:c9:0c:44:4a:02:45:87:55:07:bc:
         86:fe:5b:86:cb:44:99:1b:e1:c9:65:5e:ac:f1:17:af:9e:46:
         05:74:90:83:b3:bd:4e:a7:2f:6f:e7:36:b3:27:8d:83:db:4b:
         2a:3e:b7:d4:bb:12:e7:9f:76:31:f6:54:ad:c3:45:50:ed:0c:
         0e:0e:ad:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:17:24 2026 by rpki-client