Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS272748.roa
File:                     AS272748.roa (raw, json)
Hash identifier:          LCyYej0s6wcyQpzQEgNCzhjFKE/S50caJKoK/2UBp9I=
Subject key identifier:   EA:B7:55:6B:D2:B5:E4:FB:B4:E8:6F:4C:3E:D9:71:E6:FD:1F:91:36
Certificate issuer:       /CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
Certificate serial:       7211C3BC074E8D0BB123EBCC2C2B836343DFACA9
Authority key identifier: 61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS272748.roa
Signing time:             Tue 29 Sep 2026 17:23:24 +0000
ROA not before:           Tue 29 Sep 2026 17:18:24 +0000
ROA not after:            Tue 28 Sep 2027 17:23:24 +0000
asID:                     272748
IP address blocks:        186.226.90.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 16:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:11:c3:bc:07:4e:8d:0b:b1:23:eb:cc:2c:2b:83:63:43:df:ac:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617ABB72EF15B21D2E59DAB9087F83A02F381271
        Validity
            Not Before: Sep 29 17:18:24 2026 GMT
            Not After : Sep 28 17:23:24 2027 GMT
        Subject: CN=EAB7556BD2B5E4FBB4E86F4C3ED971E6FD1F9136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:42:ca:75:79:fd:6d:f1:86:87:eb:c4:19:e2:
                    48:07:69:91:38:4f:b3:c3:06:ba:ce:79:a7:17:be:
                    dc:00:74:aa:4b:a2:ff:2e:96:e9:a7:0e:c2:57:c4:
                    9b:8e:3e:76:05:65:9a:94:8e:97:68:02:30:9f:51:
                    7b:f3:c9:b4:5c:d2:de:9e:7e:6f:00:6c:d1:1a:71:
                    c4:b3:40:46:5a:97:07:d5:a1:1e:8b:58:0b:9c:50:
                    1a:9e:9f:db:be:27:a1:0b:64:17:2e:c8:57:19:a6:
                    0f:58:a4:86:88:80:84:2f:2e:c6:65:a6:d9:31:21:
                    33:c2:20:df:fa:f0:4a:a5:03:41:2c:ab:24:98:e1:
                    3c:62:20:2e:c6:48:4c:7f:47:0a:c4:0c:0f:ec:9d:
                    52:0a:11:cc:0a:a5:e7:a6:77:8d:72:e9:aa:b7:97:
                    fa:dd:f8:c2:8c:1c:74:94:09:12:78:f9:cf:2f:16:
                    48:03:97:76:1c:42:3d:2c:7f:84:bc:df:1b:fc:a9:
                    93:86:96:ef:ec:71:67:59:fa:f4:52:66:2b:bd:a5:
                    7a:34:bd:a3:01:c4:ae:ff:75:f8:5f:a2:87:ac:91:
                    55:47:dd:18:02:0f:8d:c0:f4:13:9f:65:ee:14:3c:
                    a5:67:21:49:a6:e1:d6:b4:44:4b:92:2f:96:ea:3b:
                    2d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B7:55:6B:D2:B5:E4:FB:B4:E8:6F:4C:3E:D9:71:E6:FD:1F:91:36
            X509v3 Authority Key Identifier:
                keyid:61:7A:BB:72:EF:15:B2:1D:2E:59:DA:B9:08:7F:83:A0:2F:38:12:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/617ABB72EF15B21D2E59DAB9087F83A02F381271.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/617ABB72EF15B21D2E59DAB9087F83A02F381271.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/0/AS272748.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.226.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:11:20:69:b2:dd:c1:a9:78:36:eb:ab:7a:ca:bf:bb:a7:
         7c:32:03:ae:02:7e:0e:5a:05:2b:d8:d5:16:da:f9:8b:d8:cf:
         f8:77:9c:77:4b:24:d3:a0:eb:5c:d7:bd:8d:4f:e7:d6:73:9d:
         0e:32:13:a0:60:c1:e1:de:d4:28:1f:ed:f0:4f:2b:44:f7:5f:
         bd:7c:8a:cf:5e:6a:e8:49:0c:54:d5:30:b6:3f:ea:e1:3e:47:
         e7:f7:88:ba:65:e9:aa:b6:78:14:72:8c:0d:5b:64:e1:9f:8e:
         cd:eb:b3:5b:84:01:ea:22:46:66:78:a3:3e:56:2d:ff:40:7d:
         cb:c3:de:45:cb:14:93:b9:7e:b7:cc:d9:14:1d:43:14:71:3c:
         c6:43:08:97:c1:f7:0e:3a:51:3f:ad:f3:c5:68:ac:e2:1f:ec:
         3d:de:7f:24:70:d2:7b:4d:80:4b:3c:ca:2f:94:87:a6:5f:dd:
         81:21:2a:87:46:7b:12:eb:27:99:31:6b:3a:51:65:dc:ad:c8:
         04:5f:1b:07:c9:02:c7:8d:7d:72:ec:72:cf:d6:dc:e6:0f:38:
         37:b9:ac:b4:10:e9:18:11:7a:c5:b6:57:7a:15:59:24:e7:6e:
         74:7f:4b:8d:72:e9:a8:bf:13:eb:8a:c3:6a:bd:47:af:11:cf:
         07:0a:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:51:29 2026 by rpki-client