Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS268852.roa
File:                     AS268852.roa (raw, json)
Hash identifier:          rFOBTqTLoG8Ri8cO5Hb+05EcdQqWuGAQkiMCFB6TRN4=
Subject key identifier:   BF:12:FD:CF:52:CE:1B:BA:66:E0:99:94:74:12:79:5C:8A:3B:48:DF
Certificate issuer:       /CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
Certificate serial:       30229A0AA4A226F5B33F164BC5670B8151485658
Authority key identifier: 61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS268852.roa
Signing time:             Tue 29 Sep 2026 17:23:24 +0000
ROA not before:           Tue 29 Sep 2026 17:18:24 +0000
ROA not after:            Tue 28 Sep 2027 17:23:24 +0000
asID:                     268852
IP address blocks:        45.174.132.0/22 maxlen: 32
                          2804:5b84::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:22:9a:0a:a4:a2:26:f5:b3:3f:16:4b:c5:67:0b:81:51:48:56:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
        Validity
            Not Before: Sep 29 17:18:24 2026 GMT
            Not After : Sep 28 17:23:24 2027 GMT
        Subject: CN=BF12FDCF52CE1BBA66E099947412795C8A3B48DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:67:b4:75:09:0c:0e:db:c2:be:af:27:00:40:
                    6f:6b:b5:51:7c:98:20:0a:16:81:07:14:44:7f:e3:
                    0d:ff:db:02:f4:28:03:0e:95:53:07:ea:c9:cb:90:
                    66:e0:0f:14:eb:41:a7:df:36:d4:2a:72:74:62:8a:
                    ca:e0:ea:8d:37:ae:1b:5a:bc:c1:23:43:59:25:59:
                    c8:57:b9:a4:f0:c8:c7:7b:e5:3c:93:99:21:2a:87:
                    05:b0:bf:20:e4:78:1d:75:5d:c3:f7:9c:49:99:ab:
                    cd:f6:42:e4:af:84:2b:53:00:8b:c8:7b:39:16:90:
                    b3:18:0f:78:bc:cd:9d:ac:e2:25:22:39:9c:4b:0b:
                    02:dc:a8:a4:e2:22:9e:71:f1:9c:59:5f:49:eb:df:
                    91:10:97:d0:46:bc:d4:a8:f3:de:89:0a:3e:2f:97:
                    f1:dc:58:95:10:fa:2c:32:aa:fc:d3:ae:a9:ff:0c:
                    5a:cb:ed:ad:f3:2f:5f:d3:63:13:93:3c:cd:30:fa:
                    dc:c2:3c:11:2f:10:d8:b4:7b:d8:75:e7:a6:77:c9:
                    2e:35:df:0b:ea:d3:82:60:4f:81:34:5e:8c:ff:ee:
                    69:f0:6e:1a:e3:06:c7:04:0a:fa:aa:3c:d5:29:73:
                    4a:ef:a4:24:e6:19:dd:76:78:10:c2:4c:d3:87:56:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:12:FD:CF:52:CE:1B:BA:66:E0:99:94:74:12:79:5C:8A:3B:48:DF
            X509v3 Authority Key Identifier:
                keyid:61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS268852.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.132.0/22
                IPv6:
                  2804:5b84::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:da:9d:97:03:c9:24:88:b3:3d:40:9e:f6:02:a6:29:d7:1b:
         a1:52:2d:1e:1d:5a:3c:74:fe:48:ea:f0:98:3e:8f:a5:ea:9a:
         2f:aa:40:d2:f2:cd:d0:9d:e3:d0:16:6f:4d:5b:84:99:d2:78:
         e8:b5:4d:87:e6:d7:f1:d4:ca:82:ee:e0:6f:6c:34:ea:9a:99:
         ec:f3:d8:9f:34:82:5f:a9:dd:c5:7b:27:fa:6d:94:48:43:76:
         e8:9e:dc:d5:e0:52:fc:3a:cf:7e:34:7d:01:47:fb:f2:ef:29:
         e6:dc:bc:ef:47:6d:ce:f1:dd:78:0d:84:72:f6:e4:a7:e8:1a:
         fe:56:08:f0:01:f1:c5:5d:4a:58:fa:3e:e5:2e:13:fb:0f:6a:
         75:c4:94:a3:31:79:52:c5:0a:2c:1f:f7:8c:e3:c0:92:0b:97:
         bc:d4:b2:e3:7f:c3:4e:09:c1:b3:af:32:2a:f5:19:25:62:bb:
         6b:47:61:2d:61:15:9e:2b:4a:70:fe:af:a0:c0:46:9a:fa:e3:
         33:ed:80:30:e6:be:ac:ab:0e:35:27:f0:9f:3b:e7:d5:6e:92:
         0a:24:dd:84:fc:36:85:4c:61:e1:f6:a4:96:91:0e:66:69:e0:
         19:fa:e2:cf:4d:97:31:35:02:73:db:1d:30:bf:54:de:85:d3:
         ed:48:47:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:51:29 2026 by rpki-client