Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS266448.roa
File:                     AS266448.roa (raw, json)
Hash identifier:          0YbbYE8vUxmDre3zhYnpNQCRpHbsznFgmLueNc9/vFw=
Subject key identifier:   BE:69:DD:B8:78:39:D5:87:94:5C:BA:F0:FF:B7:71:B3:02:5E:CE:E0
Certificate issuer:       /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial:       4DAF282AF76EE8D15BA0AD437D21C9FFCD07B6FC
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS266448.roa
Signing time:             Thu 25 Sep 2025 18:24:29 +0000
ROA not before:           Thu 25 Sep 2025 18:19:29 +0000
ROA not after:            Thu 24 Sep 2026 18:24:29 +0000
asID:                     266448
IP address blocks:        170.82.220.0/22 maxlen: 24
                          2804:37fc::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
                          rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 03:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:af:28:2a:f7:6e:e8:d1:5b:a0:ad:43:7d:21:c9:ff:cd:07:b6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
        Validity
            Not Before: Sep 25 18:19:29 2025 GMT
            Not After : Sep 24 18:24:29 2026 GMT
        Subject: CN=BE69DDB87839D587945CBAF0FFB771B3025ECEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:34:f8:08:42:cb:2a:f5:62:3c:e2:64:bf:71:
                    70:83:1a:fe:6b:2f:f5:b1:97:78:1b:93:8f:18:00:
                    f7:20:af:dc:36:ec:f7:9f:82:30:15:e1:f7:80:2a:
                    1f:ab:40:7a:1b:a9:cd:e6:c2:9e:24:ae:a1:87:55:
                    57:65:04:b5:3a:71:74:f3:1c:76:4e:25:bb:1f:70:
                    5a:fe:1d:ca:4f:f2:d5:d6:0e:e2:a9:f5:0f:a8:bd:
                    98:51:83:09:59:b8:46:1c:6a:ec:94:73:21:21:fd:
                    8e:3e:5d:c4:93:0f:cc:3a:cc:bb:e8:62:51:fb:12:
                    98:e2:11:bc:75:51:02:f2:bb:c7:42:ea:50:80:7c:
                    d6:f8:91:17:8c:33:2a:e0:a9:fa:a2:cc:05:3d:65:
                    04:9d:ed:93:19:1f:96:a0:2b:57:1c:ab:da:4d:b0:
                    ef:39:2c:e9:b7:22:57:25:24:96:1d:ea:ef:84:80:
                    8f:82:b4:dc:fa:bf:99:e3:bf:f7:c0:70:c0:3a:29:
                    86:bc:dc:b6:14:5b:c7:12:5f:08:a0:2c:11:71:9c:
                    c9:b9:a2:ca:e7:80:a5:41:4d:ec:84:3f:72:9d:56:
                    62:d8:30:c0:c2:f5:52:55:8c:8d:c9:f5:06:f6:5a:
                    94:b4:28:68:fa:93:d8:58:24:d3:d3:90:d0:c6:89:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:69:DD:B8:78:39:D5:87:94:5C:BA:F0:FF:B7:71:B3:02:5E:CE:E0
            X509v3 Authority Key Identifier:
                keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/AS266448.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.220.0/22
                IPv6:
                  2804:37fc::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:56:fe:22:40:92:f7:8f:7a:12:85:f8:fa:91:fc:f1:66:
         bc:c9:41:df:68:f6:5a:87:d5:54:e8:fa:6a:b5:bd:47:68:c9:
         62:3c:06:4a:6d:8c:29:5a:37:c0:c8:c7:1a:80:2f:ee:77:01:
         7b:75:89:90:ec:08:5b:57:79:d9:78:87:5e:b0:90:78:17:6e:
         68:07:79:3f:78:4f:d2:50:6b:6c:f6:70:47:dd:3a:a8:8d:a2:
         3b:85:27:04:c4:ce:05:a7:e8:b5:e3:96:b0:16:3a:a4:0a:0c:
         00:9c:04:f1:c5:dc:82:9c:6d:6a:73:d5:4c:43:82:c9:90:79:
         51:6f:98:f6:b6:19:c4:f8:c4:12:aa:f4:5a:b1:c9:4f:17:81:
         fa:ac:cd:e8:8d:c5:13:c3:1e:1c:f3:f0:e8:37:6e:45:b2:31:
         9a:4e:5e:02:6e:e6:a4:72:46:66:d8:e4:2f:c7:36:ff:06:5c:
         9e:5c:37:51:18:c5:f8:8a:cc:d4:45:f9:bd:47:72:e4:db:98:
         2c:1b:1a:46:75:bf:dd:55:e2:f4:3f:d4:2d:f7:8d:6a:8c:24:
         58:75:8d:e5:b2:75:91:b4:e5:34:31:90:5e:ef:f2:b7:b0:3e:
         f4:ee:be:40:ca:b2:06:94:5f:2a:62:e7:2d:28:a7:57:5d:72:
         03:a9:7e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:50:46 2025 by rpki-client