Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AS262669.roa
File:                     AS262669.roa (raw, json)
Hash identifier:          dx0ygZd3BAmlMjT0Qr3B1jON9OtfM4K6AKxXpUJ2WDM=
Subject key identifier:   1D:8E:48:69:64:C5:35:66:81:7C:F3:09:05:38:5C:32:A6:66:9F:6F
Certificate issuer:       /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial:       261D6C6EC4630C001CF4F816F599F6AF5986F86E
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AS262669.roa
Signing time:             Thu 10 Jul 2025 14:39:24 +0000
ROA not before:           Thu 10 Jul 2025 14:34:24 +0000
ROA not after:            Thu 09 Jul 2026 14:39:24 +0000
asID:                     262669
IP address blocks:        138.94.224.0/22 maxlen: 22
                          138.94.224.0/23 maxlen: 23
                          138.94.224.0/24 maxlen: 24
                          138.94.225.0/24 maxlen: 24
                          138.94.226.0/23 maxlen: 23
                          138.94.226.0/24 maxlen: 24
                          138.94.227.0/24 maxlen: 24
                          143.202.148.0/22 maxlen: 22
                          143.202.148.0/23 maxlen: 23
                          143.202.148.0/24 maxlen: 24
                          143.202.149.0/24 maxlen: 24
                          143.202.150.0/23 maxlen: 23
                          143.202.150.0/24 maxlen: 24
                          143.202.151.0/24 maxlen: 24
                          170.78.68.0/22 maxlen: 22
                          170.78.68.0/23 maxlen: 23
                          170.78.68.0/24 maxlen: 24
                          170.78.69.0/24 maxlen: 24
                          170.78.70.0/23 maxlen: 23
                          170.78.70.0/24 maxlen: 24
                          170.78.71.0/24 maxlen: 24
                          177.22.224.0/20 maxlen: 20
                          177.22.224.0/21 maxlen: 21
                          177.22.224.0/22 maxlen: 22
                          177.22.224.0/23 maxlen: 23
                          177.22.224.0/24 maxlen: 24
                          177.22.225.0/24 maxlen: 24
                          177.22.226.0/23 maxlen: 23
                          177.22.226.0/24 maxlen: 24
                          177.22.227.0/24 maxlen: 24
                          177.22.228.0/22 maxlen: 22
                          177.22.228.0/23 maxlen: 23
                          177.22.228.0/24 maxlen: 24
                          177.22.229.0/24 maxlen: 24
                          177.22.230.0/23 maxlen: 23
                          177.22.230.0/24 maxlen: 24
                          177.22.231.0/24 maxlen: 24
                          177.22.232.0/21 maxlen: 21
                          177.22.232.0/22 maxlen: 22
                          177.22.232.0/23 maxlen: 23
                          177.22.232.0/24 maxlen: 24
                          177.22.233.0/24 maxlen: 24
                          177.22.234.0/23 maxlen: 23
                          177.22.234.0/24 maxlen: 24
                          177.22.235.0/24 maxlen: 24
                          177.22.236.0/22 maxlen: 22
                          177.22.236.0/23 maxlen: 23
                          177.22.236.0/24 maxlen: 24
                          177.22.237.0/24 maxlen: 24
                          177.22.238.0/23 maxlen: 23
                          177.22.238.0/24 maxlen: 24
                          177.22.239.0/24 maxlen: 24
                          187.73.240.0/20 maxlen: 20
                          187.73.240.0/21 maxlen: 21
                          187.73.240.0/22 maxlen: 22
                          187.73.240.0/23 maxlen: 23
                          187.73.240.0/24 maxlen: 24
                          187.73.241.0/24 maxlen: 24
                          187.73.242.0/23 maxlen: 23
                          187.73.242.0/24 maxlen: 24
                          187.73.243.0/24 maxlen: 24
                          187.73.244.0/22 maxlen: 22
                          187.73.244.0/23 maxlen: 23
                          187.73.244.0/24 maxlen: 24
                          187.73.245.0/24 maxlen: 24
                          187.73.246.0/23 maxlen: 23
                          187.73.246.0/24 maxlen: 24
                          187.73.247.0/24 maxlen: 24
                          187.73.248.0/21 maxlen: 21
                          187.73.248.0/22 maxlen: 22
                          187.73.248.0/23 maxlen: 23
                          187.73.248.0/24 maxlen: 24
                          187.73.249.0/24 maxlen: 24
                          187.73.250.0/23 maxlen: 23
                          187.73.250.0/24 maxlen: 24
                          187.73.251.0/24 maxlen: 24
                          187.73.252.0/22 maxlen: 22
                          187.73.252.0/23 maxlen: 23
                          187.73.252.0/24 maxlen: 24
                          187.73.253.0/24 maxlen: 24
                          187.73.254.0/23 maxlen: 23
                          187.73.254.0/24 maxlen: 24
                          187.73.255.0/24 maxlen: 24
                          189.39.192.0/20 maxlen: 20
                          189.39.192.0/21 maxlen: 21
                          189.39.192.0/22 maxlen: 22
                          189.39.192.0/23 maxlen: 23
                          189.39.192.0/24 maxlen: 24
                          189.39.193.0/24 maxlen: 24
                          189.39.194.0/23 maxlen: 23
                          189.39.194.0/24 maxlen: 24
                          189.39.195.0/24 maxlen: 24
                          189.39.196.0/22 maxlen: 22
                          189.39.196.0/23 maxlen: 23
                          189.39.196.0/24 maxlen: 24
                          189.39.197.0/24 maxlen: 24
                          189.39.198.0/23 maxlen: 23
                          189.39.198.0/24 maxlen: 24
                          189.39.199.0/24 maxlen: 24
                          189.39.200.0/21 maxlen: 21
                          189.39.200.0/22 maxlen: 22
                          189.39.200.0/23 maxlen: 23
                          189.39.200.0/24 maxlen: 24
                          189.39.201.0/24 maxlen: 24
                          189.39.202.0/23 maxlen: 23
                          189.39.202.0/24 maxlen: 24
                          189.39.203.0/24 maxlen: 24
                          189.39.204.0/22 maxlen: 22
                          189.39.204.0/23 maxlen: 23
                          189.39.204.0/24 maxlen: 24
                          189.39.205.0/24 maxlen: 24
                          189.39.206.0/23 maxlen: 23
                          189.39.206.0/24 maxlen: 24
                          189.39.207.0/24 maxlen: 24
                          2804:13d8::/32 maxlen: 32
                          2804:13d8::/33 maxlen: 33
                          2804:13d8::/34 maxlen: 34
                          2804:13d8:4000::/34 maxlen: 34
                          2804:13d8:4000::/36 maxlen: 36
                          2804:13d8:4000::/40 maxlen: 40
                          2804:13d8:4100::/40 maxlen: 40
                          2804:13d8:4200::/40 maxlen: 40
                          2804:13d8:4300::/40 maxlen: 40
                          2804:13d8:8000::/33 maxlen: 33
                          2804:13d8:8000::/34 maxlen: 34
                          2804:13d8:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
                          rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 08:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:1d:6c:6e:c4:63:0c:00:1c:f4:f8:16:f5:99:f6:af:59:86:f8:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
        Validity
            Not Before: Jul 10 14:34:24 2025 GMT
            Not After : Jul  9 14:39:24 2026 GMT
        Subject: CN=1D8E486964C53566817CF30905385C32A6669F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5d:b7:f3:0a:0e:4b:23:65:fd:e0:08:d3:f0:
                    6c:be:eb:50:6e:9c:a0:b5:29:93:c8:a9:30:63:6f:
                    11:b6:55:b7:c9:5f:da:b1:49:36:b5:6d:46:a1:a9:
                    18:a1:f7:3e:3c:53:5a:43:9f:76:a1:e2:42:db:32:
                    fc:4b:87:5f:e3:a9:ad:80:77:20:36:20:3d:b5:49:
                    0d:f2:4d:bb:fa:47:f1:04:ce:53:14:57:fd:aa:c2:
                    01:f3:d9:76:ee:64:0a:3f:70:b3:67:8c:c1:12:de:
                    a8:07:25:09:1f:0c:ba:4a:2a:ad:90:d7:01:f3:df:
                    65:78:c3:58:3e:f9:de:e2:7e:46:b6:4b:30:80:46:
                    4e:82:e3:96:8c:5e:b9:04:7c:ed:81:aa:f6:b4:e3:
                    34:79:e4:15:43:66:ef:06:40:e4:5d:c9:91:06:30:
                    77:6f:fa:8a:d6:9e:68:10:7f:83:f9:e0:a7:0a:ba:
                    19:b2:c9:23:53:9b:f3:8e:22:d5:d5:82:79:16:24:
                    47:4f:19:d4:7d:09:7c:62:87:63:49:cd:ef:ac:06:
                    23:65:a3:ac:a5:37:7b:98:2f:1a:f3:19:ec:00:cb:
                    73:14:68:76:46:ad:3b:41:bc:ba:1b:ae:d5:8d:ae:
                    bf:2d:ae:af:39:43:a7:7d:3a:db:9e:a0:8e:1c:92:
                    a0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:8E:48:69:64:C5:35:66:81:7C:F3:09:05:38:5C:32:A6:66:9F:6F
            X509v3 Authority Key Identifier:
                keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AS262669.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.224.0/22
                  143.202.148.0/22
                  170.78.68.0/22
                  177.22.224.0/20
                  187.73.240.0/20
                  189.39.192.0/20
                IPv6:
                  2804:13d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:a5:b4:57:6b:4e:20:f0:5d:7a:c4:de:d6:66:ad:38:45:05:
         98:73:24:94:62:90:2b:d7:3c:4e:b0:fe:86:36:63:e6:39:e5:
         c5:39:6c:12:23:66:95:6a:ee:70:4e:c9:d2:f2:5c:1d:2a:17:
         cb:ea:12:36:0e:7e:57:fd:dd:74:f8:bc:6a:02:51:de:d4:c8:
         34:ca:a2:90:bd:54:68:1f:61:20:8c:af:c4:ab:8f:21:76:7f:
         1f:62:8b:f2:f1:7d:9d:d4:5f:d8:77:5a:b5:1f:b2:49:a5:6d:
         80:79:c0:e6:a7:c1:04:aa:ab:5e:64:88:0d:17:e9:e9:77:50:
         5e:36:79:cd:a6:fb:7b:03:85:4d:53:e7:0b:1f:ad:26:81:42:
         6e:d9:f0:7d:79:d4:02:bd:cc:4e:7e:e9:de:7f:f9:e5:07:0f:
         5e:5f:86:e0:59:b1:ad:70:62:b6:b1:26:08:6a:e6:af:55:5b:
         f3:a7:0d:35:f9:09:1e:41:57:5b:4f:11:97:25:ed:5a:fc:14:
         61:fe:81:e6:62:06:69:10:4d:6b:df:fc:65:2e:1f:31:97:08:
         7e:4e:0b:19:5f:33:b7:5a:ba:be:69:f1:3f:f7:f6:71:6a:c4:
         85:05:69:59:c9:0f:7a:f6:c0:42:74:68:ce:a0:7a:4d:80:3e:
         64:3f:2e:55
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUJh1sbsRjDAAc9PgW9Zn2r1mG+G4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUMxRkU5Mzg3NjQwQTc3N0I3M0Q5NDIxMUQ0QzhGRkE1
QzY2OTMwNDAeFw0yNTA3MTAxNDM0MjRaFw0yNjA3MDkxNDM5MjRaMDMxMTAvBgNV
BAMTKDFEOEU0ODY5NjRDNTM1NjY4MTdDRjMwOTA1Mzg1QzMyQTY2NjlGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjXbfzCg5LI2X94AjT8Gy+61Bu
nKC1KZPIqTBjbxG2VbfJX9qxSTa1bUahqRih9z48U1pDn3ah4kLbMvxLh1/jqa2A
dyA2ID21SQ3yTbv6R/EEzlMUV/2qwgHz2XbuZAo/cLNnjMES3qgHJQkfDLpKKq2Q
1wHz32V4w1g++d7ifka2SzCARk6C45aMXrkEfO2Bqva04zR55BVDZu8GQORdyZEG
MHdv+orWnmgQf4P54KcKuhmyySNTm/OOItXVgnkWJEdPGdR9CXxih2NJze+sBiNl
o6ylN3uYLxrzGewAy3MUaHZGrTtBvLobrtWNrr8trq85Q6d9OtueoI4ckqCHAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUHY5IaWTFNWaBfPMJBThcMqZmn28wHwYDVR0j
BBgwFoAUrB/pOHZAp3e3PZQhHUyP+lxmkwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXRnSEZyWXFvdGtucnpHTkhBMjJxUFhBcmJUMjJVc3BUR2NacmlETjZm
Z1UvMC9BQzFGRTkzODc2NDBBNzc3QjczRDk0MjExRDRDOEZGQTVDNjY5MzA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FDMUZFOTM4NzY0MEE3NzdC
NzNEOTQyMTFENEM4RkZBNUM2NjkzMDQuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby85dGdI
RnJZcW90a25yekdOSEEyMnFQWEFyYlQyMlVzcFRHY1pyaURONmZnVS8wL0FTMjYy
NjY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/
BD0wOzAqBAIAATAkAwQCil7gAwQCj8qUAwQCqk5EAwQEsRbgAwQEu0nwAwQEvSfA
MA0EAgACMAcDBQAoBBPYMA0GCSqGSIb3DQEBCwUAA4IBAQA0pbRXa04g8F16xN7W
Zq04RQWYcySUYpAr1zxOsP6GNmPmOeXFOWwSI2aVau5wTsnS8lwdKhfL6hI2Dn5X
/d10+LxqAlHe1Mg0yqKQvVRoH2EgjK/Eq48hdn8fYovy8X2d1F/Yd1q1H7JJpW2A
ecDmp8EEqqteZIgNF+npd1BeNnnNpvt7A4VNU+cLH60mgUJu2fB9edQCvcxOfune
f/nlBw9eX4bgWbGtcGK2sSYIauavVVvzpw01+QkeQVdbTxGXJe1a/BRh/oHmYgZp
EE1r3/xlLh8xlwh+TgsZXzO3Wrq+afE/9/ZxasSFBWlZyQ969sBCdGjOoHpNgD5k
Py5V
-----END CERTIFICATE-----
Generated at Sat Jul 12 16:55:31 2025 by rpki-client