Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262673.roa
File:                     AS262673.roa (raw, json)
Hash identifier:          zwVcfvqQoNdQBxPo21THUKkDsWcfkU5psDkyn5Vj1X0=
Subject key identifier:   5A:0D:A9:13:5E:32:F6:44:2F:69:FF:EE:F7:0D:E1:AB:C8:1E:F1:E5
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       14FA9F5F38A57E9F1048E33302003C65100DD4CE
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262673.roa
Signing time:             Mon 29 Sep 2025 11:46:44 +0000
ROA not before:           Mon 29 Sep 2025 11:41:44 +0000
ROA not after:            Mon 28 Sep 2026 11:46:44 +0000
asID:                     262673
IP address blocks:        177.184.96.0/20 maxlen: 24
                          177.184.112.0/20 maxlen: 24
                          186.235.192.0/20 maxlen: 24
                          186.235.208.0/20 maxlen: 24
                          187.73.64.0/19 maxlen: 24
                          201.162.64.0/18 maxlen: 24
                          2804:187c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fa:9f:5f:38:a5:7e:9f:10:48:e3:33:02:00:3c:65:10:0d:d4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:44 2025 GMT
            Not After : Sep 28 11:46:44 2026 GMT
        Subject: CN=5A0DA9135E32F6442F69FFEEF70DE1ABC81EF1E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:81:20:45:b7:98:b6:5e:45:19:04:d5:b6:
                    b0:e2:39:5c:a1:7a:b4:42:1a:67:c5:da:b4:0c:e5:
                    6f:0a:64:c1:f5:de:2f:26:6b:e5:12:38:6c:26:ab:
                    9d:72:6d:d8:a6:6b:65:38:b0:a8:23:b8:6c:2b:c4:
                    9a:a2:d0:2d:58:ae:cf:d0:1b:4e:4d:ee:1d:0b:09:
                    d8:32:d3:bf:80:0d:fa:1b:7f:9c:84:22:f4:3f:2f:
                    0c:be:4c:30:da:dc:7d:19:82:f0:37:93:62:4b:6f:
                    de:57:ee:0a:df:2f:4d:ea:fd:83:ab:24:8f:9a:8d:
                    33:33:1f:04:00:93:9e:4e:d1:cf:6e:52:6a:86:fb:
                    c4:da:46:2f:a1:a4:82:3e:0c:c4:d8:f1:0e:b8:88:
                    c9:37:08:61:49:ec:b6:0b:fd:6b:18:ba:b5:6b:b5:
                    7d:8d:42:ae:25:2e:cb:5f:84:da:a1:c9:85:74:38:
                    38:9a:0a:9f:03:d1:fc:d3:0b:e9:c9:d7:ee:c4:8c:
                    fa:06:be:7a:d7:9f:39:72:59:b0:7a:d9:79:52:44:
                    fd:11:2f:c4:7b:3f:da:f3:ce:fb:83:da:70:b8:aa:
                    0b:e8:8a:cf:e8:77:b3:44:e5:97:32:aa:79:63:ac:
                    12:a0:e8:6d:a3:32:92:be:38:40:d2:71:a9:bf:47:
                    85:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0D:A9:13:5E:32:F6:44:2F:69:FF:EE:F7:0D:E1:AB:C8:1E:F1:E5
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262673.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.96.0/19
                  186.235.192.0/19
                  187.73.64.0/19
                  201.162.64.0/18
                IPv6:
                  2804:187c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:77:eb:79:c9:da:73:7c:38:82:5b:7f:f1:75:4d:2a:a7:35:
         97:16:4e:77:fc:4a:73:42:0f:19:87:40:a9:87:f0:31:de:ab:
         8d:41:ec:fa:f8:c4:2e:fe:ff:b7:22:ef:8a:7b:9b:a3:25:36:
         d9:66:d1:88:d0:4a:94:ec:c2:ac:a8:aa:e7:1b:64:d5:f5:a9:
         87:b7:f1:cd:7c:c1:2c:61:80:65:bf:9e:d2:8e:d5:bb:3d:93:
         77:03:a3:f0:25:b1:a8:48:d8:2a:38:bb:c3:22:09:59:8c:c0:
         68:1f:c7:37:31:2a:e2:3c:0b:a6:18:69:3c:c2:e1:b6:16:f7:
         2d:8a:aa:3a:f9:3d:46:63:78:e8:1d:07:d7:14:de:b4:9f:c4:
         29:6f:96:d6:70:02:23:74:58:82:c4:de:fa:de:9a:20:e0:ca:
         93:fc:f1:a2:63:02:7d:22:a2:ed:53:63:58:39:cf:45:7f:95:
         5a:81:35:87:89:88:ac:06:31:e8:92:2d:db:f0:a9:86:6e:d3:
         c0:49:4e:34:de:13:b0:d8:71:0d:f1:b0:e9:16:f4:73:29:91:
         7b:74:0a:71:29:50:0c:7d:6a:03:fc:6b:0f:94:af:be:77:6d:
         72:a2:37:6e:46:e9:e2:82:6e:fd:ba:cd:27:96:1d:16:85:2f:
         bc:35:29:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:19 2025 by rpki-client