Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233332e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3233332e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          VvzHmVYHfqcey98rBeLqHtb/fcTDK6BFFOuBQbUpdJA=
Subject key identifier:   F4:F0:04:22:FB:05:ED:A6:F5:B4:19:5B:E6:60:2B:04:AF:DA:F6:23
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       29058999BCAE5E8C560F916760C9BB45AAF7E08C
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233332e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:05 +0000
ROA not before:           Fri 14 Aug 2026 17:51:05 +0000
ROA not after:            Fri 13 Aug 2027 17:56:05 +0000
asID:                     264886
IP address blocks:        201.49.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:05:89:99:bc:ae:5e:8c:56:0f:91:67:60:c9:bb:45:aa:f7:e0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:05 2026 GMT
            Not After : Aug 13 17:56:05 2027 GMT
        Subject: CN=F4F00422FB05EDA6F5B4195BE6602B04AFDAF623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:51:1a:13:a6:7f:40:78:57:c4:34:41:65:
                    36:2f:4b:2c:ec:3d:cc:cc:8e:31:95:7c:7e:20:05:
                    eb:b4:cc:90:7e:08:ab:0f:b6:52:9e:5e:5d:50:65:
                    c5:30:49:05:bf:3d:95:e2:cc:6c:a1:56:5d:8b:6c:
                    cf:48:4a:3d:41:fd:a4:63:21:98:fd:f7:a4:d6:b2:
                    30:3a:22:2e:ff:7b:31:11:87:1c:cb:3c:06:c6:8b:
                    7d:85:cf:09:a1:de:b6:4d:2f:fa:c2:8a:de:d2:96:
                    c6:24:0c:f6:9c:d4:1b:2a:76:30:11:a3:02:d3:c7:
                    a9:b4:5b:27:9f:48:8c:c4:bf:f5:e9:61:4f:4e:70:
                    57:17:fa:99:57:db:ff:d3:f8:4c:b5:71:b3:3e:53:
                    5a:7d:00:32:d7:32:6c:b1:2c:4b:7c:0c:ee:09:a3:
                    3b:33:69:43:ed:3b:3c:12:ad:76:2a:7b:1f:05:4c:
                    79:48:c1:b4:67:52:a5:1c:f2:73:12:7d:4f:b1:37:
                    21:f3:4b:f9:05:77:9b:4f:05:1e:ae:48:7c:46:e6:
                    b4:73:47:87:c7:be:31:17:1a:87:28:f7:6b:6e:bd:
                    9e:94:55:55:91:77:10:e1:48:94:f3:2b:1a:86:ed:
                    e2:e4:10:3e:ff:81:9e:87:f7:b2:08:f8:34:01:b0:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F0:04:22:FB:05:ED:A6:F5:B4:19:5B:E6:60:2B:04:AF:DA:F6:23
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233332e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:18:7d:f9:c3:ee:d7:f5:89:ed:80:81:e8:9c:c8:15:16:72:
         84:05:86:07:c1:86:c9:85:71:e4:9c:51:09:b2:bd:01:47:74:
         07:6c:a0:34:f1:8f:8f:73:e2:82:4f:f4:8b:c2:b0:b8:71:90:
         d7:dd:a7:2d:ba:38:59:85:be:cc:43:c0:8b:2c:09:74:f8:d2:
         39:55:bd:a9:d4:fd:bf:68:a4:d8:56:de:a3:f0:3c:3a:5b:cd:
         a3:0c:59:c8:b5:50:ce:fd:7f:ff:4d:54:a8:9a:41:ea:95:a0:
         73:18:09:bb:4d:12:7b:67:a5:74:41:c1:05:d1:35:29:aa:f9:
         37:9a:28:51:a8:62:94:ed:40:8f:dd:23:86:1a:46:79:30:d3:
         75:f5:b3:70:a8:22:0e:fa:10:60:ac:12:39:e3:dc:81:e6:12:
         57:6f:a9:2f:08:52:ba:38:2f:1e:92:11:78:1a:c5:c8:22:31:
         b0:88:8f:1e:47:03:52:44:28:da:88:8f:36:4b:28:74:20:cf:
         c6:32:2b:b3:ef:a8:3d:08:12:2e:9e:d2:0e:2c:b2:36:58:6c:
         64:b7:55:14:a0:bf:d9:b9:96:6b:6f:83:45:e0:80:dd:74:ab:
         ac:16:44:26:5e:ac:96:0c:43:9d:da:ed:ab:9b:fa:f8:37:82:
         f1:6d:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 20:25:38 2026 by rpki-client