Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS266130.roa
File:                     AS266130.roa (raw, json)
Hash identifier:          AC8PfJaqT6IojVRbwGz3VzFjxB5hN9fPe/B3itB1rD0=
Subject key identifier:   FF:81:C7:C0:E0:B2:07:EC:04:F7:7C:1E:EF:2A:DC:3F:1C:B4:A1:09
Certificate issuer:       /CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
Certificate serial:       64B6AA255E9075D23579AE431CC00CFE922E194B
Authority key identifier: 5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS266130.roa
Signing time:             Tue 22 Sep 2026 04:39:20 +0000
ROA not before:           Tue 22 Sep 2026 04:34:20 +0000
ROA not after:            Tue 21 Sep 2027 04:39:20 +0000
asID:                     266130
IP address blocks:        45.6.108.0/22 maxlen: 24
                          45.174.156.0/22 maxlen: 24
                          2804:3b1c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl
                          rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 18:24:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b6:aa:25:5e:90:75:d2:35:79:ae:43:1c:c0:0c:fe:92:2e:19:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD
        Validity
            Not Before: Sep 22 04:34:20 2026 GMT
            Not After : Sep 21 04:39:20 2027 GMT
        Subject: CN=FF81C7C0E0B207EC04F77C1EEF2ADC3F1CB4A109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5d:17:65:bc:79:d1:87:cf:7b:dc:4a:e4:f7:
                    28:e7:87:54:07:b9:8b:28:96:9c:f0:cf:bf:09:68:
                    29:8c:ff:65:6a:24:14:0c:c2:0c:c1:4b:1b:f5:86:
                    25:14:be:68:e6:c4:1d:fa:46:7f:33:5b:2b:ab:67:
                    bd:98:d5:1b:0c:92:f0:2c:7e:c1:49:03:41:00:e7:
                    67:23:59:94:93:34:60:bd:c5:26:a7:a2:80:46:7c:
                    a3:a9:53:18:bd:49:36:a8:6f:75:9b:44:c0:e8:74:
                    eb:2f:bd:69:cb:f5:5e:e0:08:14:ef:71:e6:fa:f7:
                    a9:47:b6:97:a6:48:58:71:62:33:9e:d7:e4:e3:55:
                    c3:d4:66:c1:4e:27:c7:33:c7:cc:78:d6:56:cc:63:
                    a7:17:d1:10:15:38:f7:06:b1:eb:61:01:e9:7b:ef:
                    34:60:be:b3:b8:96:87:d4:64:b1:ed:e2:4f:ab:eb:
                    9d:65:4a:d6:7f:9c:b8:d9:dd:80:c1:fd:d4:f0:1c:
                    cc:1f:fe:11:f4:3a:a8:18:f5:46:2e:f1:27:bd:7e:
                    bb:99:9f:2a:69:46:2d:00:bb:b1:5e:ab:de:75:3d:
                    a3:39:ca:ca:1e:af:3f:0e:41:84:ba:40:2b:04:5e:
                    f4:0b:c9:dd:f5:a5:32:d7:cd:86:2e:79:b3:f9:d2:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:81:C7:C0:E0:B2:07:EC:04:F7:7C:1E:EF:2A:DC:3F:1C:B4:A1:09
            X509v3 Authority Key Identifier:
                keyid:5B:E9:14:75:EB:6C:86:AA:40:F3:A1:3A:A0:C3:C3:8D:B9:62:7B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5BE91475EB6C86AA40F3A13AA0C3C38DB9627BCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/1/AS266130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.108.0/22
                  45.174.156.0/22
                IPv6:
                  2804:3b1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:5c:7f:c6:eb:e2:cf:f2:37:fe:4e:b9:bb:57:3a:34:cb:
         14:40:64:5d:71:67:8a:f7:9d:ad:3d:77:ff:fe:43:cb:ef:ed:
         11:46:93:10:77:2c:84:4f:52:a8:d8:4a:41:b6:60:aa:a6:1f:
         87:1d:ec:d9:6a:39:25:6f:cf:79:f0:55:41:7c:98:fa:f5:50:
         30:8a:fd:53:7d:a3:41:be:e1:ad:02:33:91:ac:85:84:a3:b7:
         04:c8:1d:a8:fa:20:8c:aa:39:92:81:6a:c7:ae:fc:a7:fd:2b:
         cf:aa:f8:44:e2:38:bc:7b:09:50:9e:45:9a:5f:c4:55:89:0a:
         49:67:44:f4:19:75:fa:f9:f2:12:2c:f5:af:fb:f0:f2:88:e6:
         76:90:a6:33:8e:5b:cc:03:fc:12:2f:9a:9a:33:9e:50:05:97:
         7c:16:2f:cf:f2:76:49:44:de:3e:84:e0:78:a8:91:9a:3f:10:
         ec:26:c1:82:90:91:75:b5:c0:99:f0:eb:dc:95:1c:9d:0e:11:
         4a:50:05:87:b2:f6:b7:9b:65:76:9c:f6:a9:bb:6e:ff:ad:d3:
         fd:26:69:c2:1e:54:2d:4c:33:53:1e:6c:41:2c:d2:b9:7e:39:
         48:cc:62:77:00:39:60:76:06:f4:1d:2d:59:2a:50:1b:44:a5:
         83:07:da:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:37:51 2026 by rpki-client