Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262700.roa
File:                     AS262700.roa (raw, json)
Hash identifier:          HivUJk7EJ7g2/BOFpmwMVjjs4KmuPoKM7iFWof7ZukE=
Subject key identifier:   91:86:72:00:52:CC:FC:3E:64:F0:CC:CC:26:B8:BF:D8:52:E1:6A:6A
Certificate issuer:       /CN=15A0CACB6F5D6B45006136392255670B81DB66F8
Certificate serial:       074FBEE3E68C7C77F481DA028F5C74DC8E03B079
Authority key identifier: 15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262700.roa
Signing time:             Mon 29 Sep 2025 11:46:35 +0000
ROA not before:           Mon 29 Sep 2025 11:41:35 +0000
ROA not after:            Mon 28 Sep 2026 11:46:35 +0000
asID:                     262700
IP address blocks:        177.137.80.0/21 maxlen: 24
                          187.102.112.0/20 maxlen: 24
                          189.90.80.0/20 maxlen: 24
                          2804:d20::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl
                          rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 04:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:4f:be:e3:e6:8c:7c:77:f4:81:da:02:8f:5c:74:dc:8e:03:b0:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A0CACB6F5D6B45006136392255670B81DB66F8
        Validity
            Not Before: Sep 29 11:41:35 2025 GMT
            Not After : Sep 28 11:46:35 2026 GMT
        Subject: CN=9186720052CCFC3E64F0CCCC26B8BFD852E16A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:93:38:86:b3:17:5e:60:2a:70:d9:09:46:
                    54:cb:4b:ee:2c:0b:7e:03:e4:9a:60:ce:20:54:fa:
                    8f:75:30:46:ae:e3:d2:e4:0e:74:a5:11:77:95:f7:
                    cd:59:1a:44:62:59:df:8d:59:65:d8:87:1e:7c:e3:
                    d5:42:f8:fa:15:04:64:76:f0:2d:5f:32:d4:1c:2c:
                    45:e8:0b:31:9f:55:eb:57:b2:07:30:a3:fd:76:0f:
                    dd:a3:ba:43:e0:12:e1:02:86:61:16:f3:5c:44:9b:
                    b1:b4:77:ea:2d:9b:66:c9:08:cc:d0:51:81:25:bd:
                    12:e3:ba:91:83:d9:b7:f1:ee:bf:5b:1e:cb:e5:1f:
                    ef:d6:2f:c6:1e:d2:dd:f5:81:95:fa:b9:31:a4:43:
                    85:9f:82:fa:9e:d3:86:cf:af:cf:b1:27:9b:b4:d1:
                    e9:ce:b0:82:f6:83:04:b0:a2:f5:7e:6a:30:f8:c2:
                    23:54:5a:e6:bf:98:a9:84:dd:04:92:18:21:72:a1:
                    41:77:b4:39:bc:1b:ea:16:c5:d4:2a:bc:b1:b1:0d:
                    81:4a:da:c7:9e:43:90:7c:84:05:4b:9f:cd:30:58:
                    d2:39:c9:56:29:53:cd:e4:a7:f5:b0:cd:dd:99:2c:
                    64:60:8d:75:78:09:de:77:ba:83:2d:b3:6a:fa:63:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:86:72:00:52:CC:FC:3E:64:F0:CC:CC:26:B8:BF:D8:52:E1:6A:6A
            X509v3 Authority Key Identifier:
                keyid:15:A0:CA:CB:6F:5D:6B:45:00:61:36:39:22:55:67:0B:81:DB:66:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/15A0CACB6F5D6B45006136392255670B81DB66F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15A0CACB6F5D6B45006136392255670B81DB66F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/4/AS262700.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.80.0/21
                  187.102.112.0/20
                  189.90.80.0/20
                IPv6:
                  2804:d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:73:f7:3d:48:6a:fe:71:8d:59:39:15:49:e2:ed:9b:29:
         a7:c7:66:a9:9f:92:e1:b3:fb:76:8d:36:74:70:53:21:d3:fb:
         e2:7b:d1:4d:d9:30:8f:28:d0:f8:a3:04:8b:de:25:2f:5d:54:
         92:47:c0:1b:9e:8a:02:82:12:16:de:2d:7d:a2:19:58:9c:5a:
         b3:2e:04:7b:57:44:df:51:6c:5e:4e:5c:f5:68:3f:d5:92:2e:
         ef:08:de:2f:b4:3f:bd:91:2f:6c:ea:70:3b:3e:b6:f7:05:79:
         52:3b:07:07:9a:83:b6:c2:5c:12:74:1d:e8:cc:f8:44:72:24:
         24:12:bf:cc:43:ce:c2:f7:84:d0:e4:7f:61:5e:fa:68:61:38:
         6a:6d:7d:15:b0:87:3c:ca:d9:46:9a:62:b8:32:45:b9:40:a3:
         1c:fb:cb:83:43:1c:76:7b:a8:ad:2e:2e:68:4c:af:e1:ee:63:
         d1:79:ec:34:80:c0:0e:dc:f2:7b:11:e4:a5:d8:34:93:35:ea:
         10:db:f4:69:b8:69:1b:6a:9d:61:3b:af:0e:bf:02:47:6c:ef:
         a1:86:05:6b:24:f3:f3:5b:bd:85:de:46:27:a4:d4:17:ca:be:
         2f:02:04:28:0e:05:2e:1f:6d:cd:61:6d:fd:a3:d9:77:03:be:
         8a:3c:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:23:24 2025 by rpki-client