Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          yFHRLwPiJor4XG39PGiWnCxMb+Hi3yt4Jubng7iD5K4=
Subject key identifier:   31:14:AA:30:7E:38:22:72:BB:A9:EC:AE:76:66:16:05:06:99:17:DB
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       6F3683CF7610506D9562E81B15F549BAF652167D
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
Signing time:             Fri 10 Jul 2026 17:01:03 +0000
ROA not before:           Fri 10 Jul 2026 16:56:03 +0000
ROA not after:            Fri 09 Jul 2027 17:01:03 +0000
asID:                     52468
IP address blocks:        189.84.237.0/24 maxlen: 24
                          189.84.238.0/24 maxlen: 24
                          2804:574:3::/48 maxlen: 48
                          2804:574:4::/48 maxlen: 48
                          2804:574:5::/48 maxlen: 48
                          2804:574:6::/48 maxlen: 48
                          2804:574:8::/48 maxlen: 48
                          2804:574:a::/48 maxlen: 48
                          2804:574:aaaa::/48 maxlen: 48
                          2804:574:c000::/48 maxlen: 48
                          2804:574:e001::/48 maxlen: 48
                          2804:2b78:8000::/33 maxlen: 33
                          2804:2b78:8001::/48 maxlen: 48
                          2804:2b78:8002::/48 maxlen: 48
                          2804:2b78:8003::/48 maxlen: 48
                          2804:2b78:8005::/48 maxlen: 48
                          2804:2b78:8007::/48 maxlen: 48
                          2804:2b78:8008::/46 maxlen: 46
                          2804:2b78:800c::/48 maxlen: 48
                          2804:2b78:800d::/48 maxlen: 48
                          2804:2b78:800e::/48 maxlen: 48
                          2804:2b78:800f::/48 maxlen: 48
                          2804:2b78:8010::/47 maxlen: 47
                          2804:2b78:8012::/48 maxlen: 48
                          2804:2b78:8013::/48 maxlen: 48
                          2804:2b78:8014::/47 maxlen: 47
                          2804:2b78:8016::/48 maxlen: 48
                          2804:2b78:8017::/48 maxlen: 48
                          2804:2b78:8018::/48 maxlen: 48
                          2804:2b78:801a::/48 maxlen: 48
                          2804:2b78:801b::/48 maxlen: 48
                          2804:2b78:801c::/48 maxlen: 48
                          2804:2b78:801d::/48 maxlen: 48
                          2804:2b78:801f::/48 maxlen: 48
                          2804:2b78:8020::/44 maxlen: 44
                          2804:2b78:8032::/48 maxlen: 48
                          2804:2b78:8033::/48 maxlen: 48
                          2804:2b78:8034::/47 maxlen: 47
                          2804:2b78:8036::/48 maxlen: 48
                          2804:2b78:8037::/48 maxlen: 48
                          2804:2b78:8038::/48 maxlen: 48
                          2804:2b78:8039::/48 maxlen: 48
                          2804:2b78:803a::/48 maxlen: 48
                          2804:2b78:803b::/48 maxlen: 48
                          2804:2b78:803c::/48 maxlen: 48
                          2804:2b78:803d::/48 maxlen: 48
                          2804:2b78:803f::/48 maxlen: 48
                          2804:2b78:8040::/44 maxlen: 44
                          2804:2b78:8050::/44 maxlen: 44
                          2804:2b78:8061::/48 maxlen: 48
                          2804:2b78:8062::/48 maxlen: 48
                          2804:2b78:8063::/48 maxlen: 48
                          2804:2b78:8064::/48 maxlen: 48
                          2804:2b78:8065::/48 maxlen: 48
                          2804:2b78:8066::/48 maxlen: 48
                          2804:2b78:8067::/48 maxlen: 48
                          2804:2b78:806a::/48 maxlen: 48
                          2804:2b78:8081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 Jul 2026 21:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:36:83:cf:76:10:50:6d:95:62:e8:1b:15:f5:49:ba:f6:52:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Jul 10 16:56:03 2026 GMT
            Not After : Jul  9 17:01:03 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:54:34:71:02:5a:76:51:61:bf:a5:65:65:20:
                    a5:84:1d:76:43:63:69:46:90:c6:d5:73:d1:23:7c:
                    c6:6f:0b:75:78:db:12:70:94:8e:6b:10:61:cf:95:
                    39:15:9f:48:52:34:ff:55:9d:e3:9e:43:35:54:9e:
                    46:4d:78:f9:ae:df:10:80:d0:29:40:36:d3:e8:07:
                    9f:b2:86:c9:94:3d:f1:7b:af:01:02:7b:3c:92:69:
                    a2:fa:8e:92:42:12:01:f9:a9:02:86:ba:cb:26:85:
                    36:b3:d3:62:b3:7a:aa:bc:7a:fb:80:17:53:d8:c7:
                    04:17:f4:c6:72:6d:f2:f4:c3:c9:d8:89:fc:4c:56:
                    28:63:e3:1c:2b:65:35:3a:68:0c:2e:16:7d:f8:83:
                    6a:e3:bf:7c:5a:7b:0b:4f:14:de:d3:7e:c9:ab:c0:
                    d9:7b:a8:28:fe:bd:68:bd:2d:97:a3:44:60:13:74:
                    c6:d2:e5:8b:5f:cf:da:de:fe:d8:af:fd:4d:f7:59:
                    33:25:af:9b:3c:f6:07:e9:4b:ea:0f:a0:38:34:64:
                    ed:ae:f8:80:92:b9:c2:f1:70:4d:95:16:a3:b5:0d:
                    ad:07:44:5a:d2:d2:9e:90:24:b2:a3:bc:24:fc:db:
                    cc:1f:30:2c:4e:74:b2:cc:ce:13:2e:1a:57:74:15:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:14:AA:30:7E:38:22:72:BB:A9:EC:AE:76:66:16:05:06:99:17:DB
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0-189.84.238.255
                IPv6:
                  2804:574:3::-2804:574:6:ffff:ffff:ffff:ffff:ffff
                  2804:574:8::/48
                  2804:574:a::/48
                  2804:574:aaaa::/48
                  2804:574:c000::/48
                  2804:574:e001::/48
                  2804:2b78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:b3:7c:a3:09:ed:75:bb:04:6f:1d:4d:c9:c8:2a:06:9c:8f:
         21:e9:7f:fc:71:ab:8f:8a:97:37:db:94:8f:e4:e9:36:25:0d:
         c6:6c:53:54:07:c9:fe:eb:3f:78:50:5b:e2:a6:5e:5d:b7:1d:
         17:22:a0:5a:86:9b:45:59:21:18:e8:f0:02:e8:2f:22:7a:07:
         fe:ba:da:a3:5a:c2:30:25:05:7d:c4:02:55:bb:b1:0a:bf:e1:
         0d:7c:46:96:ef:cd:8a:08:42:5c:e5:78:02:ce:66:29:06:66:
         24:e4:d3:ab:ca:8d:31:20:a3:54:b9:3f:da:95:0b:cc:6c:27:
         be:59:3d:df:83:d1:57:d1:eb:1b:3d:4f:85:67:28:88:0a:31:
         52:cd:41:5a:d8:e3:9a:f1:41:2a:c5:d7:77:76:cb:23:f9:49:
         5e:80:13:ae:3c:98:ad:3b:04:f9:60:07:34:fc:47:b3:47:f6:
         c6:fe:77:6e:66:36:59:e7:15:0a:21:71:4f:5c:ec:48:19:e3:
         4b:7d:8c:49:61:bb:a7:1a:ae:7b:22:95:58:5a:5a:1c:d3:5a:
         08:1c:9f:55:d2:cc:e8:e9:82:94:eb:9e:47:ce:e4:a7:78:cb:
         c5:2a:0d:3d:b0:0f:06:4a:2a:71:c0:55:6f:4c:18:13:a8:ae:
         33:f0:4c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:53:12 2026 by rpki-client