Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233322e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3233322e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          uazvMy4/HE3FaMyvl7yVfg0HOTFeq/kLJeJrKN9zapM=
Subject key identifier:   08:D2:29:A7:42:C3:28:2C:A3:57:49:FF:A5:6C:A1:44:05:0E:4B:CB
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       627E24EAE18EAFFC376279B32ADF17F8E995B4A7
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233322e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:07 +0000
ROA not before:           Fri 14 Aug 2026 17:51:07 +0000
ROA not after:            Fri 13 Aug 2027 17:56:07 +0000
asID:                     264886
IP address blocks:        201.49.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7e:24:ea:e1:8e:af:fc:37:62:79:b3:2a:df:17:f8:e9:95:b4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:07 2026 GMT
            Not After : Aug 13 17:56:07 2027 GMT
        Subject: CN=08D229A742C3282CA35749FFA56CA144050E4BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:2e:59:92:27:77:cc:da:e6:b4:e1:af:5c:
                    10:87:f0:3f:ff:6a:87:c5:76:2a:f8:0b:f4:b0:5a:
                    76:6d:53:32:30:cf:ea:a2:0f:f1:c8:d7:8c:e9:c6:
                    28:87:8c:6d:bb:52:7d:38:b5:5e:07:d0:37:61:fc:
                    90:d3:1a:cc:fb:ef:9c:25:88:9e:0a:a9:54:5f:7c:
                    db:32:62:79:7b:16:97:8f:cb:a6:31:32:e3:37:95:
                    85:af:10:7d:c1:66:be:fe:78:9d:1f:06:ec:e2:bc:
                    34:e7:6a:44:a8:c1:e9:db:5b:aa:33:c3:b7:10:0a:
                    3d:42:68:b1:d8:5f:2c:e3:83:ae:02:32:9b:8b:99:
                    fe:ea:2a:f6:b8:b1:16:60:c9:61:c1:93:4e:9f:57:
                    c6:5e:db:23:55:15:51:e5:88:97:77:39:d2:cd:6d:
                    39:75:dd:ac:32:65:d8:19:48:d2:48:b8:bf:ec:e5:
                    0d:59:0c:80:54:f4:bb:cb:12:a4:08:19:95:86:af:
                    1a:41:9e:63:6c:89:65:5c:36:d9:46:b9:fd:85:fe:
                    33:31:35:58:01:50:db:2e:db:c4:17:8a:bd:e2:ae:
                    04:b9:87:fb:a1:fb:67:07:8e:f3:eb:34:c4:11:f0:
                    35:b9:6c:4a:2b:85:89:cc:7c:9a:b7:a8:8f:07:66:
                    00:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D2:29:A7:42:C3:28:2C:A3:57:49:FF:A5:6C:A1:44:05:0E:4B:CB
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233322e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:be:41:8a:37:ac:ab:e1:33:38:65:7a:8d:e8:ff:7c:1d:8b:
         df:46:7b:8b:19:21:7b:9f:f2:74:19:ca:a7:df:85:8d:bc:c6:
         3a:89:bb:0b:d2:2a:22:7f:e7:73:bc:d1:f6:5a:51:c7:0b:28:
         01:77:f2:62:ff:52:bd:bd:b1:64:f6:1f:cd:4b:12:e4:b8:d2:
         9b:e2:37:5a:12:46:8d:be:dd:01:ae:0e:80:d4:e5:82:ae:2a:
         dd:1c:b3:c2:8b:dd:5f:65:9c:d8:eb:e2:10:4b:a7:78:63:3b:
         13:58:03:f4:1c:cd:1a:3a:0f:92:f1:48:80:9c:cb:d8:6d:8f:
         08:79:84:86:ee:11:82:c5:7d:ab:b1:96:60:df:5c:9a:b1:3d:
         c5:f7:c9:a7:b7:0f:8c:c0:88:bc:6e:f3:ed:06:04:77:7e:6f:
         cc:55:6c:f7:f8:20:0d:ea:73:6a:db:81:ba:dd:63:ea:66:d8:
         d8:2d:a9:e7:44:60:e1:87:fb:81:12:94:89:f3:76:ab:50:a4:
         d4:b0:1d:34:3a:4b:68:bb:07:51:a1:1b:8c:c7:7b:1a:99:6b:
         07:eb:3d:57:c3:ae:31:3d:d4:51:2b:28:06:5a:90:4b:4e:b8:
         b6:f1:4c:56:04:e7:3e:cb:cf:cb:83:8f:12:b3:ea:5a:5a:7f:
         fd:a6:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 21:22:21 2026 by rpki-client