Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS262324.roa
File:                     AS262324.roa (raw, json)
Hash identifier:          dP0+Yy0MPYQn3Ackg0wgAngGhitRoBIDWjjQtxkVwY8=
Subject key identifier:   4C:CE:35:9A:BC:CA:F3:BE:7D:A5:7D:D4:39:28:1F:E6:5D:B1:2F:A1
Certificate issuer:       /CN=7426A9B7668752085C0ABFFFBF83F4FAB056E7EC
Certificate serial:       412B08CD44357D06A54F9BFA4C48237BBBBD47EB
Authority key identifier: 74:26:A9:B7:66:87:52:08:5C:0A:BF:FF:BF:83:F4:FA:B0:56:E7:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS262324.roa
Signing time:             Fri 10 Jul 2026 14:01:01 +0000
ROA not before:           Fri 10 Jul 2026 13:56:01 +0000
ROA not after:            Fri 09 Jul 2027 14:01:01 +0000
asID:                     262324
IP address blocks:        143.202.128.0/22 maxlen: 22
                          177.67.28.0/22 maxlen: 22
                          177.67.28.0/24 maxlen: 24
                          177.67.29.0/24 maxlen: 24
                          177.67.30.0/24 maxlen: 24
                          177.67.31.0/24 maxlen: 24
                          177.124.136.0/22 maxlen: 22
                          177.124.136.0/24 maxlen: 24
                          177.124.137.0/24 maxlen: 24
                          177.124.138.0/24 maxlen: 24
                          177.124.139.0/24 maxlen: 24
                          2804:7d0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.crl
                          rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 15:15:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2b:08:cd:44:35:7d:06:a5:4f:9b:fa:4c:48:23:7b:bb:bd:47:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7426A9B7668752085C0ABFFFBF83F4FAB056E7EC
        Validity
            Not Before: Jul 10 13:56:01 2026 GMT
            Not After : Jul  9 14:01:01 2027 GMT
        Subject: CN=4CCE359ABCCAF3BE7DA57DD439281FE65DB12FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:0b:15:72:77:4a:7c:56:d4:b6:2d:9c:77:
                    7b:c8:bf:65:02:22:6b:8b:e2:de:55:a1:17:3d:ec:
                    f2:7c:d1:8c:35:44:c1:a3:38:87:1c:f6:0c:6c:ae:
                    26:99:21:9f:77:5c:ae:c0:33:33:03:af:8b:9d:7a:
                    1c:da:8c:8b:58:36:9a:9a:8a:94:3a:ae:52:d6:32:
                    2e:8a:ec:d6:38:fc:48:a0:03:fd:de:37:65:ad:a8:
                    a5:ad:15:2b:b9:7a:45:bb:fd:b9:01:4f:66:0b:f9:
                    77:36:f0:a9:f1:ab:d6:86:4b:55:77:39:56:ee:91:
                    97:ce:93:e5:c2:06:91:c0:17:e9:08:f7:59:a4:31:
                    36:78:f5:d7:76:b6:f0:61:60:49:97:22:00:bb:e9:
                    6a:62:f7:15:d4:e5:6d:1d:49:74:4e:ba:98:a4:e8:
                    58:68:53:29:e1:cf:92:f0:a2:c6:9e:9d:d8:89:55:
                    83:9c:93:cc:e9:2d:05:7c:a4:13:b6:5f:8b:77:da:
                    be:d9:44:de:80:66:24:2c:2e:3f:93:05:eb:26:e0:
                    eb:46:c2:84:4a:25:e4:14:29:49:b7:df:b2:3c:62:
                    87:ce:16:41:84:c1:f6:40:73:2e:27:99:aa:d5:d1:
                    99:ec:52:f0:19:c6:e5:1e:3d:26:65:7e:5d:5f:43:
                    74:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CE:35:9A:BC:CA:F3:BE:7D:A5:7D:D4:39:28:1F:E6:5D:B1:2F:A1
            X509v3 Authority Key Identifier:
                keyid:74:26:A9:B7:66:87:52:08:5C:0A:BF:FF:BF:83:F4:FA:B0:56:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7426A9B7668752085C0ABFFFBF83F4FAB056E7EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EndHsxQJzVpNbrCc8gb4bMb4EHBWAFVmpdDoomJQNnU/0/AS262324.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22
                  177.67.28.0/22
                  177.124.136.0/22
                IPv6:
                  2804:7d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:7b:52:c8:83:22:a3:bb:81:e0:90:11:e2:1f:ca:dc:3e:7d:
         cd:eb:18:94:f1:1a:01:f4:70:c7:9f:c6:09:0c:c3:ef:af:04:
         94:14:67:eb:09:39:30:95:d6:93:7b:aa:ef:b1:a2:8e:02:4a:
         f4:f1:8a:f1:46:8c:96:62:99:40:9a:6a:f1:f2:78:6b:4b:32:
         6c:23:66:1a:a6:81:e2:bc:57:8d:61:62:53:87:a8:78:59:30:
         31:41:3b:08:5a:26:d1:3f:24:dd:56:3f:7e:ac:02:f0:29:56:
         36:4e:5b:67:56:3e:16:49:d1:16:c5:f9:ff:7f:80:c6:9d:4c:
         73:7c:73:49:79:34:67:0f:2b:16:c9:ff:56:af:78:8e:42:f5:
         84:e1:ff:2b:4d:99:71:1a:07:52:63:4e:70:89:b7:39:63:aa:
         ad:3a:eb:92:57:72:db:a6:c4:b2:50:52:8b:c5:f8:ec:ff:db:
         8f:eb:86:d3:79:cd:e8:96:13:9c:f3:f3:22:7c:8e:78:56:75:
         92:07:16:fd:7a:15:cb:24:cf:f9:81:ff:c9:1a:8f:6b:c7:28:
         68:3e:e9:37:b6:fa:88:4f:77:53:5e:84:cd:27:20:d2:18:94:
         ed:f7:99:15:24:86:6c:a6:ed:e5:58:52:01:aa:7d:18:ca:ec:
         5c:4e:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:10 2026 by rpki-client