Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/3230382e35322e3136332e302f32342d3234203d3e20323638363238.roa
File:                     3230382e35322e3136332e302f32342d3234203d3e20323638363238.roa (raw, json)
Hash identifier:          m9VLgsfGlTlFD5qLZSDyq9PSsO2/Eiu4RVBWG6353aU=
Subject key identifier:   CF:06:66:C5:6D:C8:6E:70:9E:47:D2:46:18:D5:A9:5E:C7:5D:35:AE
Certificate issuer:       /CN=EE205740FC49BA792B7557BB08E4BABC2F8EA27B
Certificate serial:       7EEEF0E8565692FC67D31AAA005771B8DD7A931A
Authority key identifier: EE:20:57:40:FC:49:BA:79:2B:75:57:BB:08:E4:BA:BC:2F:8E:A2:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/3230382e35322e3136332e302f32342d3234203d3e20323638363238.roa
Signing time:             Thu 16 Jul 2026 14:19:05 +0000
ROA not before:           Thu 16 Jul 2026 14:14:05 +0000
ROA not after:            Thu 15 Jul 2027 14:19:05 +0000
asID:                     268628
IP address blocks:        208.52.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.crl
                          rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 04:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ee:f0:e8:56:56:92:fc:67:d3:1a:aa:00:57:71:b8:dd:7a:93:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE205740FC49BA792B7557BB08E4BABC2F8EA27B
        Validity
            Not Before: Jul 16 14:14:05 2026 GMT
            Not After : Jul 15 14:19:05 2027 GMT
        Subject: CN=CF0666C56DC86E709E47D24618D5A95EC75D35AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:81:33:a5:db:4f:2f:8f:b1:66:4d:62:78:
                    d9:22:54:23:a6:82:40:1d:b6:8d:13:b8:08:87:40:
                    21:66:cd:0a:d2:e3:34:ed:29:66:2e:53:15:79:50:
                    b3:87:89:a6:3b:7f:ee:e8:93:60:f0:98:17:f5:d3:
                    83:17:21:57:27:92:a3:a8:2f:de:59:b1:aa:28:61:
                    56:03:f0:04:53:2d:b6:18:9b:39:72:09:0c:72:7c:
                    3f:14:48:6b:07:a6:a8:6a:dd:27:dd:8d:a6:6e:20:
                    14:2d:0f:5e:db:42:75:c0:95:d3:92:eb:31:c2:e0:
                    1d:1a:c1:1f:b6:d0:88:c2:6a:7f:aa:7d:7d:fa:4e:
                    bf:05:48:5a:e5:a3:f9:61:44:62:10:43:03:52:5f:
                    94:93:be:90:50:e4:fb:16:2c:b4:ab:ea:f4:58:3a:
                    46:a9:03:c8:06:2e:1e:4c:6f:03:c9:20:8a:8c:39:
                    f6:32:f6:6b:dc:88:52:fb:f7:34:45:72:ca:46:c5:
                    ac:cd:49:50:08:72:4d:ed:a8:f9:22:dc:26:b6:fe:
                    6f:1d:e6:e8:d5:c0:ee:77:f4:a4:15:c9:19:b2:ba:
                    ad:0c:4c:5f:fb:a7:f4:31:0f:34:67:22:1e:a4:34:
                    18:da:41:88:75:75:64:c9:bf:b5:25:23:2c:89:9a:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:06:66:C5:6D:C8:6E:70:9E:47:D2:46:18:D5:A9:5E:C7:5D:35:AE
            X509v3 Authority Key Identifier:
                keyid:EE:20:57:40:FC:49:BA:79:2B:75:57:BB:08:E4:BA:BC:2F:8E:A2:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE205740FC49BA792B7557BB08E4BABC2F8EA27B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/3230382e35322e3136332e302f32342d3234203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:73:14:48:1d:1d:f4:f5:fd:30:5c:b3:8d:84:4d:75:04:
         82:48:d3:b4:32:06:42:91:7f:00:06:79:4f:57:e1:3a:48:08:
         da:5e:12:ce:18:a2:88:76:96:e5:10:8f:53:0f:0d:6f:b4:12:
         81:7c:3e:4a:5e:77:16:54:58:9a:1a:46:76:3a:66:a0:cc:28:
         95:f1:78:94:df:c5:b6:d5:ae:1f:ef:9f:e7:e2:47:5d:ea:e3:
         11:23:6d:3c:ca:3e:74:b4:25:4f:ce:25:e3:6a:99:3f:00:9e:
         25:9d:53:1f:ab:d9:95:37:be:ce:b4:4c:4e:fd:01:4b:85:b8:
         8d:7c:01:4f:ed:44:b3:b3:dd:f8:fd:37:44:d5:61:d5:ee:ad:
         10:a7:c1:92:93:eb:a2:b9:28:cd:a8:32:ba:df:12:55:a9:a1:
         de:2e:78:0b:40:38:a9:28:c6:9a:99:e5:fc:cf:35:e6:22:80:
         c6:1a:5a:4f:97:cf:9b:68:25:e9:0e:ad:0f:f3:63:70:65:8e:
         72:7f:d0:02:d5:22:8c:4f:76:97:25:bf:ed:fe:d9:00:a7:32:
         ed:c7:5e:df:cd:24:46:21:31:91:b7:1e:dd:9f:b2:fe:f9:77:
         d9:00:ab:04:14:6a:8b:15:ce:22:c1:81:9b:36:88:b9:16:99:
         59:14:7f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:34:58 2026 by rpki-client