Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          ao2NjgkHARldkgLBse7v2YgrlS6MzDIKjpu3TooxNtc=
Subject key identifier:   EA:55:A9:87:78:50:A8:55:B9:11:DD:C4:6D:2D:70:B8:1D:61:EF:F7
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       31776D2AB6417CF3A39D8C2209FFD6C6BC80F397
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:05 +0000
ROA not before:           Fri 14 Aug 2026 17:51:05 +0000
ROA not after:            Fri 13 Aug 2027 17:56:05 +0000
asID:                     264886
IP address blocks:        201.49.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:77:6d:2a:b6:41:7c:f3:a3:9d:8c:22:09:ff:d6:c6:bc:80:f3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:05 2026 GMT
            Not After : Aug 13 17:56:05 2027 GMT
        Subject: CN=EA55A9877850A855B911DDC46D2D70B81D61EFF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:28:b3:7e:6d:92:87:04:60:6e:e9:8b:5c:
                    63:88:05:6e:71:59:f4:40:e8:d8:fe:31:1d:92:5e:
                    c6:4b:51:f8:d3:2b:b7:27:63:86:a9:23:00:86:e4:
                    68:ae:7d:25:1c:98:28:b9:f3:11:2e:9f:25:dd:0e:
                    4e:06:54:75:4e:94:84:bd:37:a6:56:e1:1e:8b:78:
                    e0:73:b3:ac:e0:5b:29:2b:71:1f:01:59:51:09:99:
                    58:82:24:b3:a2:1c:60:4c:50:4f:9d:ee:0b:32:0a:
                    9e:45:8b:f6:d1:5a:ed:89:2d:a8:73:98:40:e7:84:
                    71:53:f4:87:c1:dd:82:29:d9:1d:09:3e:85:54:ae:
                    e2:4b:c0:29:73:4d:48:cd:99:fa:35:56:0f:84:81:
                    9d:6d:62:60:c0:95:fc:a1:9d:59:56:62:36:41:ce:
                    ff:6b:c0:41:f7:56:0e:06:ef:9d:25:47:5c:4e:3a:
                    63:5c:c5:34:0f:0f:d1:45:31:fb:d2:9b:1a:45:0f:
                    e5:23:f7:44:d7:11:09:87:be:2e:71:dc:05:58:e8:
                    cd:5e:9d:b1:32:1e:a2:fe:73:0f:8d:39:f2:05:1e:
                    0b:10:8e:ed:1f:16:c4:69:6f:65:bc:f9:c5:02:74:
                    53:1c:f1:f2:50:6f:5f:ca:da:c3:7b:fd:f6:d2:4c:
                    d8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:55:A9:87:78:50:A8:55:B9:11:DD:C4:6D:2D:70:B8:1D:61:EF:F7
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233312e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:15:af:26:d7:32:b4:05:1c:f2:be:86:25:da:c4:aa:93:
         ad:f3:25:51:af:6b:e3:27:03:d3:26:9c:ec:8e:96:8b:d9:01:
         4a:a6:0c:e7:dd:06:46:14:8d:11:bb:44:6d:ed:41:46:f5:8e:
         cd:1d:58:ee:72:54:93:94:70:99:b7:10:1a:58:ed:d3:a7:3a:
         77:e1:7f:6e:a9:e0:dd:ee:cf:0b:94:1d:23:da:d7:59:22:d1:
         62:64:ab:b2:ce:53:34:ac:d3:6a:f2:71:3d:45:54:ed:07:e7:
         b6:90:f0:b8:8e:35:24:2f:11:bd:ea:22:dd:b1:a6:cf:97:b8:
         b5:80:96:f5:34:d2:c6:df:3c:fa:21:71:76:22:6b:0e:a6:3a:
         1e:c7:88:86:b1:c8:ee:bd:e5:8b:1d:8c:d1:76:e4:3c:8d:a7:
         74:83:c5:99:7f:9d:53:96:76:a5:20:d9:20:85:d1:4c:a9:2b:
         73:ae:a3:de:93:99:5d:57:ae:ec:f9:5d:73:aa:d0:67:b5:ca:
         ff:d9:d7:ad:26:f6:cb:d8:dd:e7:81:56:b4:0b:23:d4:ee:fe:
         82:ec:1e:80:c9:92:70:8d:52:da:f2:bb:f8:7f:db:8c:5c:c0:
         12:71:8b:fc:a4:eb:9a:5d:4b:6a:b2:83:a3:4e:ba:5a:ac:4c:
         e0:bb:ef:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 03:21:25 2026 by rpki-client