Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa
File:                     3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          dUKQcDqjbkVZsNQnUF+DFB0QSdAelekkU3CWQJ/jDqU=
Subject key identifier:   52:B4:8E:AC:45:A7:EC:51:5A:71:9A:EF:0F:AF:F5:D0:5C:41:F5:4D
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       36FB1B1F6ED84D989B8C4D03A362F90B2A01BBA3
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa
Signing time:             Tue 01 Sep 2026 19:53:17 +0000
ROA not before:           Tue 01 Sep 2026 19:48:17 +0000
ROA not after:            Tue 31 Aug 2027 19:53:17 +0000
asID:                     264886
IP address blocks:        201.49.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 01 Nov 2026 10:21:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fb:1b:1f:6e:d8:4d:98:9b:8c:4d:03:a3:62:f9:0b:2a:01:bb:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Sep  1 19:48:17 2026 GMT
            Not After : Aug 31 19:53:17 2027 GMT
        Subject: CN=52B48EAC45A7EC515A719AEF0FAFF5D05C41F54D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e0:71:2d:21:1b:95:17:da:6d:3b:63:da:55:
                    f9:4d:fe:b0:bd:cc:49:be:a3:f4:7d:ba:fd:8e:b1:
                    04:fa:04:69:ba:f7:72:86:86:a7:7c:a5:7d:88:89:
                    63:1d:6c:99:60:58:6f:1d:62:67:53:84:1f:54:c3:
                    c0:5f:84:09:58:43:fc:71:eb:57:61:ac:a0:e6:27:
                    aa:94:ad:77:41:bb:57:98:78:02:60:d7:1b:4a:c1:
                    db:13:3f:57:c3:f9:76:ca:af:e0:cd:7b:e9:6c:9c:
                    da:cc:c7:0d:d3:69:d7:e5:c1:ff:48:d2:83:12:64:
                    c4:4b:59:b8:0f:15:1e:dc:da:eb:be:27:ad:2f:c6:
                    40:b0:ad:6b:a9:e0:6e:3b:ef:95:3c:ce:83:2f:6b:
                    63:b6:c6:1e:05:2d:c8:e8:9b:2d:d7:cf:f3:c6:bf:
                    01:bb:e6:3b:0e:3c:01:bc:58:4a:d7:7d:bf:bf:ff:
                    b4:3c:26:bb:98:ee:7b:e9:36:ca:04:f1:66:23:27:
                    82:27:e9:87:0f:da:64:70:70:13:0c:5e:71:30:02:
                    49:f5:f2:00:a3:b3:7d:9d:73:5b:43:83:8c:1b:8e:
                    4d:59:0d:81:80:78:03:b0:dd:ce:65:45:02:a0:bd:
                    14:22:22:5e:6b:4e:19:04:bd:01:b9:6f:83:73:dc:
                    84:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B4:8E:AC:45:A7:EC:51:5A:71:9A:EF:0F:AF:F5:D0:5C:41:F5:4D
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3232342e302f32342d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:a5:bd:15:b7:f0:31:ea:26:8c:27:6c:44:cb:55:a4:0c:0a:
         60:3d:a6:b6:9d:ac:00:bf:51:b0:70:bc:6a:47:43:87:00:65:
         bd:9e:72:d6:b5:0a:ba:43:d3:96:7b:60:1f:52:03:8c:d5:33:
         ce:bc:0c:90:6c:e7:2b:dd:dd:62:be:66:34:6c:3b:30:8c:7e:
         58:f6:d8:89:1d:66:14:55:25:95:a9:60:e1:8a:08:33:2b:e9:
         5f:97:de:ce:ff:e5:57:ca:b7:54:8a:03:bb:da:11:26:d2:c4:
         cf:0d:63:eb:38:b5:52:e7:a3:64:36:c5:9d:cc:cb:27:bb:11:
         06:00:1d:63:3e:3e:94:fb:13:4f:a1:92:76:43:9e:8e:91:20:
         63:a3:96:24:45:dd:1d:39:2e:fb:64:a8:82:cd:31:b2:b9:a8:
         93:2d:4e:56:fe:2b:48:b3:0d:81:5b:bf:c6:f0:06:42:eb:ab:
         9c:b6:ad:32:31:c9:f5:c5:fd:86:75:ee:e9:f0:40:60:00:ba:
         12:b3:af:a4:ab:30:2e:69:a6:4f:fc:54:73:67:53:a1:0b:d3:
         70:a4:93:08:0d:00:47:89:29:1c:cf:f6:e2:96:47:a9:a6:67:
         5b:5c:79:e8:fe:f8:e9:56:9e:6b:ca:5e:b1:65:0d:28:51:8b:
         16:e5:92:ac
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUNvsbH27YTZibjE0Do2L5CyoBu6MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4
NUQ2M0REMjAeFw0yNjA5MDExOTQ4MTdaFw0yNzA4MzExOTUzMTdaMDMxMTAvBgNV
BAMTKDUyQjQ4RUFDNDVBN0VDNTE1QTcxOUFFRjBGQUZGNUQwNUM0MUY1NEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4HEtIRuVF9ptO2PaVflN/rC9
zEm+o/R9uv2OsQT6BGm693KGhqd8pX2IiWMdbJlgWG8dYmdThB9Uw8BfhAlYQ/xx
61dhrKDmJ6qUrXdBu1eYeAJg1xtKwdsTP1fD+XbKr+DNe+lsnNrMxw3Tadflwf9I
0oMSZMRLWbgPFR7c2uu+J60vxkCwrWup4G4775U8zoMva2O2xh4FLcjomy3Xz/PG
vwG75jsOPAG8WErXfb+//7Q8JruY7nvpNsoE8WYjJ4In6YcP2mRwcBMMXnEwAkn1
8gCjs32dc1tDg4wbjk1ZDYGAeAOw3c5lRQKgvRQiIl5rThkEvQG5b4Nz3ISfAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUUrSOrEWn7FFacZrvD6/10FxB9U0wHwYDVR0j
BBgwFoAUCbdPWuCpyWhwWc+QV1enA4XWPdIwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9hZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNp
LzAvMDlCNzRGNUFFMEE5Qzk2ODcwNTlDRjkwNTc1N0E3MDM4NUQ2M0REMi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8wOUI3NEY1QUUwQTlDOTY4NzA1
OUNGOTA1NzU3QTcwMzg1RDYzREQyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9h
ZlhGTWtReXBKamFTYVV6dDNFUVFvSk5jVnV6aGhtZEJOdTFXNFhFbzNpLzAvMzIz
MDMxMmUzNDM5MmUzMjMyMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQz
ODM4MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADJMeAwDQYJKoZIhvcNAQELBQADggEBAD6lvRW38DHq
JownbETLVaQMCmA9pradrAC/UbBwvGpHQ4cAZb2ecta1CrpD05Z7YB9SA4zVM868
DJBs5yvd3WK+ZjRsOzCMflj22IkdZhRVJZWpYOGKCDMr6V+X3s7/5VfKt1SKA7va
ESbSxM8NY+s4tVLno2Q2xZ3Myye7EQYAHWM+PpT7E0+hknZDno6RIGOjliRF3R05
LvtkqILNMbK5qJMtTlb+K0izDYFbv8bwBkLrq5y2rTIxyfXF/YZ17unwQGAAuhKz
r6SrMC5ppk/8VHNnU6EL03CkkwgNAEeJKRzP9uKWR6mmZ1tceej++OlWnmvKXrFl
DShRixblkqw=
-----END CERTIFICATE-----
Generated at Sat Oct 31 23:42:34 2026 by rpki-client