Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
File:                     AS262493.roa (raw, json)
Hash identifier:          oyeRIKhHIMVbfthyrnQdyMhci+/9vRNuNshmpGaU5Cc=
Subject key identifier:   36:CD:75:6D:78:8C:96:22:5E:60:5D:D7:03:50:A2:5E:F8:9A:CF:B8
Certificate issuer:       /CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
Certificate serial:       59D38C2D419FA5F05F66430B0AB2160A3D97C610
Authority key identifier: F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa
Signing time:             Thu 22 May 2025 12:34:28 +0000
ROA not before:           Thu 22 May 2025 12:29:28 +0000
ROA not after:            Thu 21 May 2026 12:34:28 +0000
asID:                     262493
IP address blocks:        138.255.216.0/22 maxlen: 22
                          138.255.216.0/23 maxlen: 23
                          138.255.218.0/23 maxlen: 23
                          168.121.148.0/22 maxlen: 22
                          168.121.148.0/23 maxlen: 23
                          168.121.150.0/23 maxlen: 23
                          170.82.132.0/22 maxlen: 22
                          170.82.132.0/23 maxlen: 23
                          170.82.134.0/23 maxlen: 23
                          177.8.48.0/21 maxlen: 21
                          177.8.48.0/23 maxlen: 23
                          177.8.50.0/23 maxlen: 23
                          177.8.52.0/22 maxlen: 22
                          177.8.52.0/23 maxlen: 23
                          177.8.54.0/23 maxlen: 23
                          177.55.48.0/20 maxlen: 20
                          177.55.48.0/23 maxlen: 23
                          177.55.50.0/23 maxlen: 23
                          177.55.52.0/23 maxlen: 23
                          177.55.54.0/23 maxlen: 23
                          177.55.56.0/23 maxlen: 23
                          177.55.58.0/23 maxlen: 23
                          177.55.60.0/23 maxlen: 23
                          177.55.62.0/23 maxlen: 23
                          187.73.222.0/23 maxlen: 23
                          2804:fec::/32 maxlen: 32
                          2804:fec::/36 maxlen: 36
                          2804:fec:1000::/36 maxlen: 36
                          2804:fec:3000::/36 maxlen: 36
                          2804:fec:4000::/36 maxlen: 36
                          2804:fec:5000::/36 maxlen: 36
                          2804:fec:6000::/36 maxlen: 36
                          2804:fec:7000::/36 maxlen: 36
                          2804:fec:8000::/36 maxlen: 36
                          2804:fec:a000::/36 maxlen: 36
                          2804:fec:b000::/36 maxlen: 36
                          2804:fec:c000::/36 maxlen: 36
                          2804:fec:d000::/36 maxlen: 36
                          2804:fec:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl
                          rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 01:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:d3:8c:2d:41:9f:a5:f0:5f:66:43:0b:0a:b2:16:0a:3d:97:c6:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F62FA540E59B857020C4B20954230E0C0AE8CA0E
        Validity
            Not Before: May 22 12:29:28 2025 GMT
            Not After : May 21 12:34:28 2026 GMT
        Subject: CN=36CD756D788C96225E605DD70350A25EF89ACFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ad:10:4b:59:7b:23:d6:81:65:85:91:24:a0:
                    c6:71:4e:43:c6:ed:ac:7c:39:ba:eb:bb:d2:71:a3:
                    5b:70:4f:4b:43:5b:9a:61:6a:71:7c:a3:51:45:2f:
                    ef:3f:eb:58:d9:83:bc:47:9a:89:90:eb:b6:ef:b0:
                    43:3f:f8:b3:1d:20:08:3d:6b:ba:b6:1b:85:2f:35:
                    23:4c:61:22:4b:d0:cd:79:da:1e:20:d1:6c:07:95:
                    aa:26:b0:75:78:e1:2c:c2:eb:f1:12:9f:95:76:bf:
                    84:3f:1b:a7:e8:0e:e9:59:ec:59:99:39:eb:f6:b7:
                    ed:f7:23:00:49:7d:d5:8a:58:54:c1:8e:77:b9:28:
                    e4:d7:a1:78:21:25:5d:29:c8:9e:c1:60:e0:8f:ba:
                    f0:6a:29:be:97:49:05:dd:e8:6e:87:c8:03:d1:df:
                    05:19:19:91:d1:0a:c4:6f:c3:c2:8d:ee:77:04:f0:
                    2e:cf:60:25:3d:a9:7d:48:74:6b:9c:35:dd:d2:d4:
                    ab:6a:b8:06:e5:34:ae:c1:eb:7f:f3:85:2a:cf:ce:
                    98:5f:93:9f:58:6e:43:8e:62:e1:12:42:16:58:13:
                    b5:e2:43:8a:d9:e9:11:4d:9d:ee:9f:3a:7c:06:34:
                    48:37:7d:7a:69:ce:d8:31:29:3f:e7:25:d1:8d:3b:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CD:75:6D:78:8C:96:22:5E:60:5D:D7:03:50:A2:5E:F8:9A:CF:B8
            X509v3 Authority Key Identifier:
                keyid:F6:2F:A5:40:E5:9B:85:70:20:C4:B2:09:54:23:0E:0C:0A:E8:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/F62FA540E59B857020C4B20954230E0C0AE8CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F62FA540E59B857020C4B20954230E0C0AE8CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/0/AS262493.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.216.0/22
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                  187.73.222.0/23
                IPv6:
                  2804:fec::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:bb:1b:7c:bb:69:27:f1:36:12:98:04:7f:e2:00:65:ff:2d:
         b7:a0:bf:44:f6:97:a3:db:f7:19:66:a5:3e:df:2a:19:cc:ec:
         2d:c2:b6:5b:50:e4:d7:bd:e4:53:56:62:76:98:8b:d9:28:88:
         9c:97:a4:17:b5:ea:09:dc:a3:e8:ce:d7:83:13:b0:e3:6f:21:
         a3:60:4f:57:f8:02:46:39:c0:92:ea:10:3e:f5:dd:3e:c7:e2:
         0e:92:fc:d3:29:9b:4a:7c:4f:58:d0:7c:7f:d4:63:31:aa:16:
         41:ad:83:2a:c3:ea:7f:be:68:50:75:d3:95:fb:3c:89:83:1a:
         a9:16:e7:79:f8:64:71:fb:30:4c:2f:62:73:1d:d6:40:be:b0:
         3d:9d:7f:f2:3d:25:b8:26:56:f4:7a:4c:7c:0a:61:3c:27:16:
         0a:26:40:9c:ae:ee:9d:9a:18:c5:36:cd:8c:fd:2f:4d:ce:66:
         66:02:f7:bd:a5:8a:8e:bb:79:3c:6e:ae:e1:82:7c:8a:ec:2c:
         d7:a3:76:2c:6b:35:6d:33:c3:a4:8e:6e:0a:7f:a9:c6:04:d1:
         98:cb:cc:e1:ca:0e:73:ff:04:7a:e2:ac:fb:4b:5e:b7:18:54:
         1e:f1:10:be:5d:82:7e:61:8b:b8:9d:0e:96:b3:cc:85:77:09:
         ba:e3:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:17:26 2025 by rpki-client