Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
File:                     AS262493.roa (raw, json)
Hash identifier:          FZZph1veCrWf3+f7EyT142JwB+rOjscDJX1qLaBC1PI=
Subject key identifier:   31:AF:6F:E0:C1:41:D1:63:87:8B:6D:02:42:4C:03:1A:F4:D0:22:6F
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       7361FC7A5AA11DA6533B42A9851F6731E46B3DA6
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
Signing time:             Mon 23 Jun 2025 20:54:05 +0000
ROA not before:           Mon 23 Jun 2025 20:49:05 +0000
ROA not after:            Mon 22 Jun 2026 20:54:05 +0000
asID:                     262493
IP address blocks:        138.255.216.0/22 maxlen: 22
                          138.255.216.0/23 maxlen: 23
                          138.255.218.0/23 maxlen: 23
                          168.121.148.0/22 maxlen: 22
                          168.121.148.0/23 maxlen: 23
                          168.121.150.0/23 maxlen: 23
                          170.82.132.0/22 maxlen: 22
                          170.82.132.0/23 maxlen: 23
                          170.82.134.0/23 maxlen: 23
                          177.8.48.0/21 maxlen: 21
                          177.8.48.0/23 maxlen: 23
                          177.8.50.0/23 maxlen: 23
                          177.8.52.0/22 maxlen: 22
                          177.8.52.0/23 maxlen: 23
                          177.8.54.0/23 maxlen: 23
                          177.55.48.0/20 maxlen: 20
                          177.55.48.0/23 maxlen: 23
                          177.55.50.0/23 maxlen: 23
                          177.55.52.0/23 maxlen: 23
                          177.55.54.0/23 maxlen: 23
                          177.55.56.0/23 maxlen: 23
                          177.55.58.0/23 maxlen: 23
                          177.55.60.0/23 maxlen: 23
                          177.55.60.0/24 maxlen: 24
                          177.55.62.0/23 maxlen: 23
                          187.73.222.0/23 maxlen: 23
                          2804:fec::/32 maxlen: 32
                          2804:fec::/36 maxlen: 36
                          2804:fec:1000::/36 maxlen: 36
                          2804:fec:3000::/36 maxlen: 36
                          2804:fec:4000::/36 maxlen: 36
                          2804:fec:5000::/36 maxlen: 36
                          2804:fec:6000::/36 maxlen: 36
                          2804:fec:7000::/36 maxlen: 36
                          2804:fec:8000::/36 maxlen: 36
                          2804:fec:a000::/36 maxlen: 36
                          2804:fec:b000::/36 maxlen: 36
                          2804:fec:c000::/36 maxlen: 36
                          2804:fec:d000::/36 maxlen: 36
                          2804:fec:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 09:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:61:fc:7a:5a:a1:1d:a6:53:3b:42:a9:85:1f:67:31:e4:6b:3d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: Jun 23 20:49:05 2025 GMT
            Not After : Jun 22 20:54:05 2026 GMT
        Subject: CN=31AF6FE0C141D163878B6D02424C031AF4D0226F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:66:2e:a1:0f:09:ad:e4:fd:a8:0a:75:68:
                    d8:35:f9:f7:f3:1d:15:2f:e4:fa:8d:e7:aa:a8:c4:
                    02:50:3a:d0:fe:ec:ad:59:e9:ce:56:96:e6:e4:90:
                    73:ed:5a:b8:34:2d:9c:d8:e6:78:9c:5a:f4:69:a8:
                    d7:30:8a:79:f0:6e:0b:6d:3f:76:dc:19:36:44:59:
                    62:02:c7:c9:4c:fe:15:70:79:e8:c0:8a:7c:1f:e3:
                    f1:42:9f:8b:c0:30:80:72:a4:37:dc:d9:16:4e:5a:
                    5e:ae:98:ae:b6:38:de:c4:df:ac:27:43:a3:d9:78:
                    9a:26:f1:7b:6d:3a:c2:d0:87:f2:3c:8e:6e:d0:b4:
                    36:72:54:ca:fa:1f:82:75:9c:b5:a9:2b:4e:21:30:
                    30:fc:cf:6d:7c:1f:4e:e5:b2:4e:c1:e9:43:40:90:
                    f9:5d:34:b6:b5:36:86:7c:9b:fa:96:cd:49:8d:24:
                    ed:68:b5:a8:3b:8e:5e:f0:44:ba:4c:9a:f7:ef:f4:
                    10:57:1d:e1:a2:7f:da:94:36:66:b9:9a:8d:f0:b4:
                    be:d6:12:98:e6:f9:e8:84:31:0c:bf:07:53:96:df:
                    77:5d:2e:6d:2c:b9:78:c0:e7:5c:ce:2e:01:8e:d1:
                    87:c0:99:1a:5b:5d:3a:4c:29:af:67:0c:e0:85:77:
                    df:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:AF:6F:E0:C1:41:D1:63:87:8B:6D:02:42:4C:03:1A:F4:D0:22:6F
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                  187.73.222.0/23
                IPv6:
                  2804:fec::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:1c:a0:b5:47:a1:77:da:17:be:ca:b2:8e:94:91:9f:b8:42:
         9b:fd:81:2a:c1:1a:60:8a:7e:bb:c3:de:ba:bf:0b:e8:e5:e3:
         e5:cd:15:d4:68:05:5e:cf:5c:7c:3b:2d:c8:75:95:3b:fb:a4:
         ae:3e:eb:70:fa:d8:b5:f2:f8:55:d2:76:b7:06:59:3f:e1:1e:
         4d:36:e9:f2:dd:79:11:0e:a1:be:14:35:5d:dc:e1:b4:a0:f5:
         c5:45:f0:53:fb:14:6e:d9:5e:42:fd:0f:4a:16:73:7b:f0:f5:
         cc:e7:bf:78:ee:d9:16:e5:20:37:b8:76:d7:6c:13:77:55:9b:
         3a:1a:24:44:52:66:aa:61:80:6e:53:ab:2f:ee:54:fc:15:19:
         85:3e:45:f5:97:af:67:7c:70:fe:a3:30:7d:9a:b1:e9:58:0c:
         cd:e8:51:8f:3c:ec:48:86:5a:0c:9c:10:30:7b:41:e7:68:7d:
         88:32:72:62:81:80:0f:b0:29:b2:13:40:d4:fd:e9:1c:51:e2:
         43:26:48:38:87:b4:09:48:84:35:9c:da:4e:3b:45:2c:04:cc:
         8e:9b:0c:b5:d4:3b:29:ba:2c:21:d3:cb:a1:d8:fa:44:0f:00:
         c0:03:23:a2:73:56:d9:15:e8:a0:4d:75:80:02:db:32:08:b9:
         68:f9:15:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 10:08:59 2025 by rpki-client