Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233362e302f32322d3234203d3e20323634383836.roa
File:                     3230312e34392e3233362e302f32322d3234203d3e20323634383836.roa (raw, json)
Hash identifier:          XN9CCx0lFBew1qncC5wGxraVjsVHLo0ghIcjDF6grNM=
Subject key identifier:   69:E4:C2:AE:38:EE:C8:57:E3:8F:56:1A:8B:F1:43:8A:DE:53:A7:75
Certificate issuer:       /CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
Certificate serial:       345F70141F2063B424E4AAD11B604F2BF0A893CB
Authority key identifier: 09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233362e302f32322d3234203d3e20323634383836.roa
Signing time:             Tue 28 Apr 2026 08:33:09 +0000
ROA not before:           Tue 28 Apr 2026 08:28:09 +0000
ROA not after:            Tue 27 Apr 2027 08:33:09 +0000
asID:                     264886
IP address blocks:        201.49.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl
                          rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 03:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:5f:70:14:1f:20:63:b4:24:e4:aa:d1:1b:60:4f:2b:f0:a8:93:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09B74F5AE0A9C9687059CF905757A70385D63DD2
        Validity
            Not Before: Apr 28 08:28:09 2026 GMT
            Not After : Apr 27 08:33:09 2027 GMT
        Subject: CN=69E4C2AE38EEC857E38F561A8BF1438ADE53A775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ca:b9:35:3e:30:bf:2b:0c:ab:f2:94:c4:53:
                    fa:a7:ee:c6:4e:71:51:ff:61:60:24:09:5d:4e:13:
                    6e:c8:94:59:f5:a5:09:14:da:16:6c:3f:40:bc:ba:
                    ee:a5:5a:14:fe:a3:a1:07:37:1e:d5:35:26:a3:00:
                    27:56:88:5c:0c:fa:f6:38:ca:08:62:4b:16:f5:67:
                    3d:ed:69:3d:5f:e3:1d:f6:19:a0:ba:35:25:7a:a9:
                    1a:cb:c2:4b:5e:a4:e7:a3:aa:fe:bb:27:5a:d3:c7:
                    35:cf:da:1b:0c:9f:be:43:a2:a9:22:f7:13:ec:e8:
                    47:f1:ce:03:68:1c:d8:5b:8d:20:2d:b4:f6:86:a4:
                    bc:f2:f4:eb:ec:fa:5a:e2:c9:85:17:7b:8a:aa:3e:
                    06:d3:bc:4f:76:19:da:4f:3c:d8:78:2f:90:3d:bd:
                    8c:8f:20:c9:3f:1b:f1:99:49:20:4d:a1:4b:4f:e3:
                    a1:90:fd:37:10:9a:75:f9:39:ac:d6:de:09:5b:ac:
                    95:66:e6:08:41:0f:e3:f1:b3:08:16:f1:91:0c:e2:
                    50:ea:0e:41:25:2f:2d:a5:88:63:1e:bd:af:2c:35:
                    bf:58:dd:de:84:7e:06:ba:b5:30:b6:04:99:78:cf:
                    fd:ad:bf:cc:af:ed:f7:3a:2f:ca:9f:d8:c6:87:0d:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E4:C2:AE:38:EE:C8:57:E3:8F:56:1A:8B:F1:43:8A:DE:53:A7:75
            X509v3 Authority Key Identifier:
                keyid:09:B7:4F:5A:E0:A9:C9:68:70:59:CF:90:57:57:A7:03:85:D6:3D:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/09B74F5AE0A9C9687059CF905757A70385D63DD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B74F5AE0A9C9687059CF905757A70385D63DD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/afXFMkQypJjaSaUzt3EQQoJNcVuzhhmdBNu1W4XEo3i/0/3230312e34392e3233362e302f32322d3234203d3e20323634383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:cc:c2:2e:5a:a9:0b:33:52:f9:28:9f:84:1c:03:74:eb:db:
         d7:4d:c4:04:28:4a:42:36:e7:12:5d:2d:99:e7:e8:ee:6f:af:
         9e:0d:4f:6d:1e:b0:c2:40:84:9a:f1:de:69:4b:0c:e1:fa:28:
         a1:82:39:38:d2:13:52:56:c6:03:7d:db:ea:b7:8c:04:a0:e1:
         cd:39:6b:ca:38:fb:1a:93:f5:09:66:6f:32:c5:aa:25:cf:32:
         70:f9:d4:4b:28:52:01:84:2e:38:95:14:14:41:bf:5c:19:df:
         4f:61:9d:4c:cb:3c:82:04:b7:ef:43:b0:3b:03:a4:14:81:ca:
         7b:1a:23:48:b6:9d:63:ca:00:4f:ca:90:e6:50:42:38:8b:e2:
         97:e1:61:98:72:6f:2c:bb:0a:57:6d:4a:e6:31:7e:06:db:92:
         06:1e:3b:cb:4a:ba:a2:99:a3:32:37:07:75:f7:91:ba:90:1f:
         d4:22:82:fa:ca:09:33:93:44:95:f5:fe:0c:aa:49:b9:6a:f7:
         88:00:97:aa:39:ba:ea:92:1a:85:9d:5d:5a:52:6c:e6:40:41:
         3d:70:7d:c9:d7:8c:1a:d0:59:bc:b4:59:4c:15:e4:e1:82:dd:
         31:df:1c:97:af:52:4c:04:98:b4:68:57:55:c6:61:93:30:27:
         8f:38:f2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:43:51 2026 by rpki-client