Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          6v1c8+pI65hX3K6monBzF24N0k5eSDwoUw0IFJkFcuU=
Subject key identifier:   8D:F3:36:26:90:01:71:F9:31:7B:C8:CA:0A:1D:5C:EC:FB:96:39:AB
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       53FFD3196D07DBABB87B4607E6C686F4264B2DF3
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa
Signing time:             Fri 14 Aug 2026 17:56:05 +0000
ROA not before:           Fri 14 Aug 2026 17:51:05 +0000
ROA not after:            Fri 13 Aug 2027 17:56:05 +0000
asID:                     264886
IP address blocks:        201.49.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 27 Aug 2026 08:27:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:ff:d3:19:6d:07:db:ab:b8:7b:46:07:e6:c6:86:f4:26:4b:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Aug 14 17:51:05 2026 GMT
            Not After : Aug 13 17:56:05 2027 GMT
        Subject: CN=8DF33626900171F9317BC8CA0A1D5CECFB9639AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:4a:20:d2:f5:46:15:96:0e:d3:f6:e5:7f:
                    32:c0:91:94:5a:fd:b0:7e:dc:b1:e3:16:2f:c7:0f:
                    09:40:3f:41:30:ca:53:b9:a0:24:5d:ae:c5:5e:23:
                    d9:4d:d0:5b:6d:b4:27:cd:31:74:35:3b:00:88:c1:
                    ca:be:df:48:61:aa:0a:30:a8:58:7a:bc:db:dd:48:
                    00:7b:d8:87:52:e3:5e:15:07:63:01:a2:6e:5c:58:
                    2b:ba:af:98:8e:66:77:d7:51:89:04:89:86:c8:86:
                    5e:a8:8f:98:ab:b6:1a:e8:8a:c7:34:65:5e:8f:fb:
                    db:60:53:05:7c:99:9f:25:14:93:63:6a:ce:c8:ad:
                    b4:c3:6a:eb:9f:9c:4f:85:d0:fb:cb:28:de:59:71:
                    a3:b2:e0:bb:ba:d8:e3:3b:fa:28:db:77:0a:48:2e:
                    e6:3a:32:bf:2b:f2:9d:29:c1:7e:1e:38:75:48:0a:
                    9d:08:b9:61:23:c3:02:66:cb:b1:50:54:a1:60:29:
                    60:bd:f8:df:f3:bf:e4:23:bc:8e:69:9a:fb:8e:d4:
                    04:23:17:20:da:b0:56:e3:85:b7:ce:b9:c4:a5:9c:
                    37:f6:4a:5d:f3:85:65:e6:bf:09:80:18:7c:c5:de:
                    40:c7:a6:60:de:47:87:39:a7:1e:4a:b7:8a:8f:5f:
                    44:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F3:36:26:90:01:71:F9:31:7B:C8:CA:0A:1D:5C:EC:FB:96:39:AB
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233392e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:92:12:3f:35:aa:1c:a1:2b:ee:a3:d3:8e:50:8d:41:bb:41:
         bf:50:c1:5e:62:3b:86:48:a0:3e:2d:62:43:48:2b:c5:8c:07:
         40:fb:dc:d9:a4:4e:b7:8a:6e:46:49:7d:1d:f8:38:4f:c3:e3:
         fc:6c:2e:e8:59:3e:70:09:3d:99:cb:44:cb:6d:26:d2:3e:dd:
         b3:89:34:2b:cb:f1:ae:27:b6:38:2b:fc:46:98:37:48:78:13:
         13:ac:f4:f0:82:58:e4:64:90:78:d4:7b:33:be:d2:d0:35:17:
         15:d1:f7:72:34:a2:e2:4b:44:e1:b6:ed:cc:bb:97:1b:87:a5:
         d5:7e:4d:fd:8d:eb:44:46:ac:bb:61:ff:a7:ea:f2:c4:19:eb:
         ac:e7:5d:7b:16:47:08:26:99:5d:f5:6c:23:0a:56:c9:b9:8a:
         e9:bb:ce:7e:35:c8:c7:94:c4:90:3c:da:b8:bd:d4:2c:19:32:
         6c:9b:01:5e:a2:5d:7c:03:34:9a:b7:df:c5:a8:c2:ba:f6:c1:
         a2:6e:a4:b2:6a:8c:d9:b9:17:ea:26:94:df:e2:0a:84:e1:01:
         f6:9c:a6:ef:57:93:86:83:a1:d8:7a:44:30:4b:fd:7a:92:cb:
         1a:75:68:7e:ed:4b:80:af:56:a7:7c:dd:03:f5:31:b9:aa:e1:
         57:ef:ef:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:58:04 2026 by rpki-client