Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232342e302f32322d3234203d3e20323634383836.roa
File:                     3230312e34392e3232342e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          CEdWSjlE/XHqKiMxIuqM/ESkCVBt9RhP72uLKAxXgis=
Subject key identifier:   F7:21:23:8B:9F:07:06:62:37:2B:AB:57:48:98:55:9A:03:BD:E6:0D
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       4D5BFA8E772BD61E805DC1CA52DB8B4B192A8FC5
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232342e302f32322d3234203d3e20323634383836.roa
Signing time:             Tue 28 Apr 2026 09:20:00 +0000
ROA not before:           Tue 28 Apr 2026 09:15:00 +0000
ROA not after:            Tue 27 Apr 2027 09:20:00 +0000
asID:                     264886
IP address blocks:        201.49.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:5b:fa:8e:77:2b:d6:1e:80:5d:c1:ca:52:db:8b:4b:19:2a:8f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Apr 28 09:15:00 2026 GMT
            Not After : Apr 27 09:20:00 2027 GMT
        Subject: CN=F721238B9F070662372BAB574898559A03BDE60D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:eb:dc:1a:5e:3f:3f:79:c7:26:4b:5c:31:
                    3e:70:7a:f7:e6:7b:9b:70:d4:df:f7:3c:f2:37:cf:
                    a7:22:85:21:4c:df:7a:d2:b0:97:85:20:32:e8:6c:
                    46:ec:01:b9:22:12:26:72:92:dd:8c:34:a3:03:30:
                    be:c7:9b:a6:0e:06:78:43:a6:00:cb:6f:54:23:28:
                    c1:27:ca:10:ae:53:7a:9e:b8:b5:b9:e9:28:f7:7c:
                    fb:dc:b6:26:07:9c:57:c2:b2:10:d9:ee:84:12:b1:
                    cf:e0:db:3a:a0:e1:9d:55:2c:ef:50:7a:ba:d6:e8:
                    a0:4d:20:45:d2:ba:e3:a0:a4:da:cf:82:64:7c:71:
                    c3:3b:91:59:cb:87:e4:f6:b3:23:a0:fa:54:b4:fb:
                    d5:83:57:ec:c7:e3:a9:c1:84:e3:7e:a8:19:83:0e:
                    a0:e0:c4:1a:5d:1c:9d:37:a7:98:e5:7e:86:86:01:
                    13:2a:5c:a2:0b:8f:2d:a1:20:09:84:38:4d:16:6f:
                    22:04:b7:49:0c:47:b2:a4:f1:c9:27:38:c2:6d:e1:
                    df:04:ea:d7:f9:2f:c2:07:ef:e8:e1:52:0d:57:1b:
                    aa:86:62:ad:36:59:06:de:63:0b:e5:3e:ae:9c:89:
                    73:d0:d5:96:0f:b6:17:80:18:e0:39:2b:0c:7f:a2:
                    61:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:21:23:8B:9F:07:06:62:37:2B:AB:57:48:98:55:9A:03:BD:E6:0D
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232342e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:25:32:6d:b0:4b:50:f3:2d:a6:52:62:f8:ae:40:42:ae:
         d6:b4:2b:c9:6c:f0:ce:3c:e7:bd:9b:22:a4:f9:2d:b4:f0:3f:
         89:2f:7a:54:57:6f:fd:42:60:1c:2d:29:c1:df:3d:5f:76:f2:
         cd:6b:e5:4c:39:b2:5f:46:4c:36:a7:81:3a:37:00:b9:f9:43:
         5f:dc:4c:9d:f1:67:22:81:50:6f:37:4d:68:ec:61:fe:c1:09:
         b7:d7:6c:a4:d4:45:51:2c:5a:bd:31:c9:d2:36:60:0a:3b:88:
         ec:f4:93:6e:80:7a:11:38:7b:7e:b4:9d:45:6f:bd:e0:54:fe:
         b7:c9:d7:9d:f0:dd:59:fc:57:62:87:3a:07:d9:45:86:3e:ac:
         21:0e:97:7e:7e:e1:c2:d7:e6:8e:a4:6d:c9:ba:b0:48:79:bf:
         9c:6e:38:5d:a8:81:66:c1:0c:79:9c:98:b1:07:05:ed:b7:61:
         4f:37:e6:6e:47:31:79:21:f7:72:7e:49:af:12:6a:34:63:c6:
         a0:27:bb:c8:f6:9d:d8:e1:6d:c6:26:b4:7d:21:95:8f:e5:98:
         33:f6:89:56:98:1a:6b:7e:96:2c:4d:78:f2:bc:1c:81:df:3e:
         94:b5:02:2f:7e:0c:28:68:b2:ca:e6:42:4f:44:c6:b1:1f:c5:
         21:28:38:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:53 2026 by rpki-client