Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262794.roa
File:                     AS262794.roa (raw, json)
Hash identifier:          OyfS3jMS5PztsOwH4wJiQRXmGyRmnsPEjhzrUwQuDUE=
Subject key identifier:   AA:0F:18:46:17:E9:79:D8:BF:A1:3A:99:22:8A:EE:3C:9E:AB:77:C7
Certificate issuer:       /CN=135830443F9F0628207359060862957206FBE517
Certificate serial:       49E4785071269AEFDF5AEF90D1B61A6A3E58BD6E
Authority key identifier: 13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262794.roa
Signing time:             Wed 29 Apr 2026 19:45:33 +0000
ROA not before:           Wed 29 Apr 2026 19:40:33 +0000
ROA not after:            Wed 28 Apr 2027 19:45:33 +0000
asID:                     262794
IP address blocks:        143.255.244.0/22 maxlen: 24
                          168.195.84.0/22 maxlen: 24
                          201.76.112.0/20 maxlen: 24
                          2804:2b6c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e4:78:50:71:26:9a:ef:df:5a:ef:90:d1:b6:1a:6a:3e:58:bd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135830443F9F0628207359060862957206FBE517
        Validity
            Not Before: Apr 29 19:40:33 2026 GMT
            Not After : Apr 28 19:45:33 2027 GMT
        Subject: CN=AA0F184617E979D8BFA13A99228AEE3C9EAB77C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:6b:6a:d9:18:83:25:06:98:18:42:69:c7:
                    07:93:b6:e6:bc:c3:e5:ba:2e:fb:3c:26:df:65:a7:
                    59:46:b7:4b:eb:df:87:f7:f1:1e:84:ee:e3:d5:62:
                    ac:86:f2:e8:6b:dd:94:9c:8b:3e:9b:2c:9e:9f:4e:
                    05:67:df:0e:a4:57:9d:bf:b3:bd:53:9a:c7:bc:05:
                    e8:16:0a:97:f0:1c:7f:7a:21:67:04:c4:e5:de:d3:
                    62:60:f9:3a:03:45:4b:a7:52:ed:df:1c:aa:2c:1a:
                    a3:cd:d1:2a:6e:cc:be:16:41:79:f8:fe:fb:6d:27:
                    83:f8:c1:3c:be:1d:24:fe:69:1a:e6:55:4b:07:3c:
                    a9:98:eb:22:2d:8b:4c:e7:5c:4c:46:46:46:49:4a:
                    1b:85:c6:02:ab:dd:0e:3b:a8:f4:61:91:a5:73:20:
                    73:9a:4d:d6:5f:bc:73:a2:d8:ab:54:b9:7c:82:41:
                    ed:01:98:ca:6d:f2:ec:c2:cb:c2:52:6a:12:8c:43:
                    ff:48:bd:c6:51:f7:c2:e7:db:71:f5:7b:3d:a0:99:
                    52:10:9b:ed:46:e0:09:ad:ab:db:d7:ee:92:48:3c:
                    17:a7:e3:ad:cb:f3:31:f8:4d:99:d6:c3:19:da:c2:
                    5c:be:04:6b:7b:5a:6f:32:05:97:63:86:9e:d7:2a:
                    4e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:0F:18:46:17:E9:79:D8:BF:A1:3A:99:22:8A:EE:3C:9E:AB:77:C7
            X509v3 Authority Key Identifier:
                keyid:13:58:30:44:3F:9F:06:28:20:73:59:06:08:62:95:72:06:FB:E5:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/135830443F9F0628207359060862957206FBE517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/135830443F9F0628207359060862957206FBE517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS262794.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.244.0/22
                  168.195.84.0/22
                  201.76.112.0/20
                IPv6:
                  2804:2b6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:cf:f7:2c:80:41:24:f2:b1:3c:c4:78:4d:e2:61:c7:09:44:
         95:49:c7:6a:61:01:ec:21:e9:4a:4a:5e:5f:53:ec:9b:fe:c0:
         82:89:52:0e:04:89:6b:6d:b8:a6:21:85:9f:cd:24:3f:96:ba:
         34:ed:e5:25:8f:58:c1:ce:4b:ae:3f:36:97:76:1e:64:a7:44:
         ab:bf:44:89:ff:08:e9:58:8d:e1:02:13:c8:0d:98:4f:6b:9f:
         22:d0:af:6f:ac:fe:fc:67:ea:43:02:90:05:5a:7c:33:bc:77:
         c4:8a:bb:12:bd:61:d6:9f:b5:a7:98:91:7c:7e:18:65:1c:d1:
         82:3a:ff:64:d8:75:e4:a6:c6:86:f1:00:f7:a3:af:95:f5:08:
         11:26:91:f1:04:cc:47:12:f3:fd:85:bf:4a:a7:85:bc:fd:d1:
         17:9c:9e:5a:87:1f:73:02:b4:d7:67:7f:3f:61:27:b2:9f:bf:
         2f:a4:58:0f:a8:42:d6:91:f7:2a:bf:fd:78:12:fe:16:a7:38:
         ff:4f:64:43:06:06:d6:6b:c0:8c:29:ac:a9:6b:1b:af:b4:7a:
         4a:de:07:3e:5f:0f:62:2d:2f:58:cf:69:3d:54:47:5e:3d:46:
         21:b9:92:8f:6d:b2:db:d7:89:d8:10:99:09:b8:0b:29:18:32:
         53:08:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:41 2026 by rpki-client