Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          ufAz5B1pLdeux0qmUg3PanXpmYfC8Y2IOgZ4oxa1kVs=
Subject key identifier:   47:B3:D5:ED:7D:38:85:22:79:68:56:7F:31:B4:EA:A7:1E:37:E7:0F
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       2BA8102320C0B4E68562068DC33C1CD514C2C23E
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:05 +0000
ROA not before:           Fri 14 Aug 2026 17:51:05 +0000
ROA not after:            Fri 13 Aug 2027 17:56:05 +0000
asID:                     264886
IP address blocks:        201.49.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 26 Aug 2026 14:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a8:10:23:20:c0:b4:e6:85:62:06:8d:c3:3c:1c:d5:14:c2:c2:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:05 2026 GMT
            Not After : Aug 13 17:56:05 2027 GMT
        Subject: CN=47B3D5ED7D3885227968567F31B4EAA71E37E70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:27:f8:65:48:b4:08:0d:b3:89:2b:89:40:
                    30:4b:d0:82:aa:1b:15:0b:27:19:36:0a:b3:09:7d:
                    e9:9a:78:8f:02:a1:86:b7:fb:a8:37:a9:49:b7:2c:
                    a7:3e:5f:ad:9a:d2:a4:c4:f9:9c:d1:ee:a2:75:cb:
                    03:42:67:5f:1a:af:44:80:41:7e:6c:39:92:cb:b1:
                    c9:80:a7:4c:d5:01:ef:db:f1:1c:60:93:5a:16:fd:
                    61:16:e8:82:08:ca:ab:d1:be:70:6a:e5:85:6e:c3:
                    e6:7f:56:04:cd:27:48:7e:ae:89:59:12:a4:aa:49:
                    f1:d2:3b:9b:5a:37:c5:d6:52:25:36:ce:a1:3a:eb:
                    b1:27:5c:39:0b:7a:dd:53:e5:c8:d5:6f:17:11:be:
                    6d:0c:4a:de:06:d1:7b:29:f8:ee:64:dd:40:09:96:
                    3a:59:20:77:35:1f:22:59:a5:00:98:e4:05:fa:2b:
                    b2:83:1b:e0:a7:e1:67:aa:b7:fb:a6:b2:ea:1d:6c:
                    a4:7c:eb:5e:de:b2:44:38:f1:68:5c:c2:55:6d:36:
                    0f:ad:72:fa:59:72:f0:b0:99:52:1c:dc:01:4f:e0:
                    ce:de:db:14:52:b8:41:80:f4:88:0d:82:87:37:01:
                    0e:e9:10:d4:46:7c:46:76:f7:73:2c:6c:f4:0d:b5:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B3:D5:ED:7D:38:85:22:79:68:56:7F:31:B4:EA:A7:1E:37:E7:0F
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233382e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:e6:46:45:33:be:d3:52:1e:90:96:bc:7e:f5:46:34:f9:db:
         7d:19:32:d0:9b:79:28:ab:9e:8b:a8:da:5a:04:c2:a0:70:34:
         1c:60:2c:8e:fc:0d:64:e0:af:fa:e0:32:9e:b7:89:f4:e9:b8:
         43:07:5a:cc:08:ef:75:93:eb:75:97:63:33:71:3c:df:58:0c:
         b2:d3:37:32:1f:ad:52:07:c1:62:20:6a:8a:b4:da:07:0f:bc:
         43:b8:f8:8d:3e:68:7a:9b:4d:ae:47:4d:c7:28:8f:f5:21:e0:
         51:04:09:72:63:ed:d6:d5:cb:05:94:b4:6a:e3:c6:c1:59:1d:
         57:6d:ab:c1:0b:dc:b8:b9:ee:95:fb:40:dd:e2:91:9c:c2:b3:
         1c:9b:85:9f:f7:c6:83:64:c2:1b:5b:37:f1:1c:f5:c7:43:9c:
         1c:db:b3:53:7c:35:41:42:3e:38:df:3b:a0:16:52:70:cd:cc:
         18:60:ce:d8:48:fd:e5:2b:fc:08:08:8a:4a:bf:a5:08:bf:a5:
         e9:ce:a8:c3:05:c2:f7:6e:4e:39:cc:8f:de:81:70:39:d9:8a:
         5b:dc:ea:f5:9b:c3:fc:ba:62:39:50:75:ea:d7:f4:12:c7:d9:
         f4:d8:1a:96:5e:c4:d7:7b:ce:e7:2a:0d:d3:33:f7:7d:f0:8d:
         13:8f:29:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 22:12:08 2026 by rpki-client