Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa
File:                     3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          WHR79WU0/ir8PEtMatEg5e3blddKwBK4zMFmKBwxHO0=
Subject key identifier:   6C:94:C0:9F:97:CF:89:AC:3B:8F:46:C5:61:9D:16:62:B3:5C:DA:F0
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       0D6F0A8568D51E96F37619B43873D383958C0521
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa
Signing time:             Tue 28 Apr 2026 08:25:36 +0000
ROA not before:           Tue 28 Apr 2026 08:20:36 +0000
ROA not after:            Tue 27 Apr 2027 08:25:36 +0000
asID:                     264886
IP address blocks:        179.108.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6f:0a:85:68:d5:1e:96:f3:76:19:b4:38:73:d3:83:95:8c:05:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Apr 28 08:20:36 2026 GMT
            Not After : Apr 27 08:25:36 2027 GMT
        Subject: CN=6C94C09F97CF89AC3B8F46C5619D1662B35CDAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e1:74:8b:38:68:7e:6a:16:19:79:70:33:e6:
                    78:0c:70:cb:ec:f6:75:82:a2:f8:ae:97:95:97:1a:
                    27:42:9d:55:3c:4e:49:25:ea:b8:6d:30:e5:80:cd:
                    fb:54:37:39:04:b4:38:bc:fb:c1:f5:c9:35:5b:e0:
                    0b:8f:3d:0f:d6:a0:0c:53:d9:0b:77:c1:e7:1d:b1:
                    77:7e:84:b0:fe:b2:74:10:fc:68:db:7c:b5:1e:79:
                    aa:fa:77:6f:66:e8:fe:59:67:79:ae:b9:ac:1c:7a:
                    21:fe:e4:8b:9a:81:6b:32:2a:7a:af:7b:ae:ca:8b:
                    60:9f:c7:92:5c:55:3a:f2:c8:b8:3f:a4:8e:53:18:
                    dc:6d:17:28:ae:9f:c3:90:ea:64:ac:a3:b7:51:2d:
                    a4:dc:64:97:4b:00:9f:bb:6e:32:9e:40:79:79:7b:
                    3c:4e:37:2f:27:2d:c1:ae:cf:b6:92:6b:89:bc:cb:
                    c9:e9:e7:7e:ad:e9:19:90:46:0e:ef:a7:5c:4b:45:
                    3e:4d:b7:8c:94:cc:d7:49:01:fa:13:3b:0b:c8:1e:
                    85:24:cb:92:bf:fa:6b:2a:98:4c:07:18:f3:55:9e:
                    d9:39:ca:b8:f8:10:af:09:6a:60:bd:7b:90:27:6d:
                    64:92:d3:2c:d4:02:23:6a:56:18:f8:9a:d1:be:9e:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:94:C0:9F:97:CF:89:AC:3B:8F:46:C5:61:9D:16:62:B3:5C:DA:F0
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3137392e3130382e34342e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.108.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:ad:b9:2a:56:0e:9d:d8:9a:91:3e:34:34:99:54:cb:5d:08:
         ac:8c:82:58:85:6e:72:a6:3f:33:51:6d:00:63:9e:2d:6f:3d:
         ed:09:c5:35:04:d8:a9:c9:52:f6:4c:a6:74:f6:4c:27:82:04:
         46:c9:67:bb:40:e0:5e:64:76:d2:f4:7c:4e:16:25:d8:40:9f:
         5f:82:6f:6c:a1:d8:9f:6c:83:ea:21:37:de:d9:32:33:34:17:
         7f:f2:15:10:a2:b9:db:ac:1e:c9:38:3b:cb:70:70:b9:c7:cf:
         88:b4:2b:71:e2:44:5f:ae:e5:f4:a6:3f:8b:93:50:a2:79:12:
         23:41:c8:60:49:81:b1:e5:7e:c0:44:08:ec:ff:01:8f:a9:3a:
         10:c6:5e:6f:8e:91:c1:84:c2:9d:e4:fd:ea:b8:d0:0a:a7:cc:
         ee:1e:0d:c3:06:1f:a3:2f:9e:36:8b:af:27:38:84:a3:8e:35:
         d7:1e:7d:2a:ce:ab:df:5a:4a:05:4d:c2:1e:13:d4:fb:be:c9:
         60:bc:1a:61:2a:7c:d2:35:64:4b:a3:97:80:0a:54:8b:6a:42:
         ab:3c:f8:ee:a4:08:b2:c6:bc:5c:bb:0e:52:15:03:4f:a1:68:
         62:8c:17:1d:78:91:09:7b:11:1c:3a:61:8e:fb:d0:2b:cd:ff:
         cf:28:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:17:25 2026 by rpki-client