Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          9y40OCHLVZmTkMhVloYWQlKZcHYxc0A/ltkjXgDCCeU=
Subject key identifier:   B7:02:74:04:15:3D:73:3B:ED:6D:C9:E9:44:92:79:A1:87:80:9D:C9
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       77495AE992B662BFD23D37BFE9B2CFC7A308546F
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
Signing time:             Thu 12 Feb 2026 13:38:38 +0000
ROA not before:           Thu 12 Feb 2026 13:33:38 +0000
ROA not after:            Thu 11 Feb 2027 13:38:38 +0000
asID:                     52468
IP address blocks:        2804:574:3::/48 maxlen: 48
                          2804:574:4::/48 maxlen: 48
                          2804:574:5::/48 maxlen: 48
                          2804:574:6::/48 maxlen: 48
                          2804:574:8::/48 maxlen: 48
                          2804:574:a::/48 maxlen: 48
                          2804:574:aaaa::/48 maxlen: 48
                          2804:574:c000::/48 maxlen: 48
                          2804:2b78:8000::/33 maxlen: 33
                          2804:2b78:8001::/48 maxlen: 48
                          2804:2b78:8002::/48 maxlen: 48
                          2804:2b78:8003::/48 maxlen: 48
                          2804:2b78:8005::/48 maxlen: 48
                          2804:2b78:8007::/48 maxlen: 48
                          2804:2b78:8008::/46 maxlen: 46
                          2804:2b78:800c::/48 maxlen: 48
                          2804:2b78:800d::/48 maxlen: 48
                          2804:2b78:800e::/48 maxlen: 48
                          2804:2b78:800f::/48 maxlen: 48
                          2804:2b78:8010::/47 maxlen: 47
                          2804:2b78:8012::/48 maxlen: 48
                          2804:2b78:8013::/48 maxlen: 48
                          2804:2b78:8014::/47 maxlen: 47
                          2804:2b78:8016::/48 maxlen: 48
                          2804:2b78:8017::/48 maxlen: 48
                          2804:2b78:8018::/48 maxlen: 48
                          2804:2b78:801a::/48 maxlen: 48
                          2804:2b78:801b::/48 maxlen: 48
                          2804:2b78:801c::/48 maxlen: 48
                          2804:2b78:801d::/48 maxlen: 48
                          2804:2b78:801f::/48 maxlen: 48
                          2804:2b78:8020::/44 maxlen: 44
                          2804:2b78:8032::/48 maxlen: 48
                          2804:2b78:8033::/48 maxlen: 48
                          2804:2b78:8034::/47 maxlen: 47
                          2804:2b78:8036::/48 maxlen: 48
                          2804:2b78:8037::/48 maxlen: 48
                          2804:2b78:8038::/48 maxlen: 48
                          2804:2b78:8039::/48 maxlen: 48
                          2804:2b78:803a::/48 maxlen: 48
                          2804:2b78:803b::/48 maxlen: 48
                          2804:2b78:803c::/48 maxlen: 48
                          2804:2b78:803d::/48 maxlen: 48
                          2804:2b78:803f::/48 maxlen: 48
                          2804:2b78:8040::/44 maxlen: 44
                          2804:2b78:8050::/44 maxlen: 44
                          2804:2b78:8061::/48 maxlen: 48
                          2804:2b78:8062::/48 maxlen: 48
                          2804:2b78:8063::/48 maxlen: 48
                          2804:2b78:8064::/48 maxlen: 48
                          2804:2b78:8065::/48 maxlen: 48
                          2804:2b78:8066::/48 maxlen: 48
                          2804:2b78:8067::/48 maxlen: 48
                          2804:2b78:806a::/48 maxlen: 48
                          2804:2b78:8081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:49:5a:e9:92:b6:62:bf:d2:3d:37:bf:e9:b2:cf:c7:a3:08:54:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 12 13:33:38 2026 GMT
            Not After : Feb 11 13:38:38 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:5a:9c:b9:ff:8a:23:88:ea:ac:8d:c8:a9:
                    3b:90:02:c4:a9:19:ec:0c:1b:07:7a:6e:e3:14:41:
                    da:5b:f9:8b:c3:7d:be:d3:35:b0:1f:46:d0:47:14:
                    d7:6a:26:cd:ea:2f:c9:8c:e7:1e:d7:83:fc:3e:5d:
                    08:61:3f:e4:06:8c:f2:02:42:2b:4c:ad:2e:79:62:
                    9e:86:63:a1:c1:9f:d0:00:94:7a:fa:91:5f:9f:5c:
                    93:3d:c0:d6:fa:53:d9:01:a3:af:a5:71:7f:fb:4c:
                    53:e8:03:ce:eb:a5:fa:69:ca:06:61:ad:3b:3d:ee:
                    33:70:55:4e:f7:94:08:6c:5f:94:d6:7e:70:ee:cb:
                    93:c8:04:eb:a4:f3:5a:44:40:00:ee:49:d1:cb:58:
                    36:29:85:83:84:f9:54:41:e0:ec:08:a0:e9:af:a0:
                    da:cc:1b:21:df:f7:c0:fa:6f:90:98:05:e4:66:92:
                    74:22:a5:de:fa:dc:3b:06:80:ce:71:1a:43:60:56:
                    4f:80:62:1b:56:dc:d4:91:94:2a:21:22:50:f6:30:
                    cd:f1:f1:e4:3b:02:97:eb:72:d8:77:83:fe:bc:86:
                    03:0f:4a:78:8f:a6:d2:6d:b6:be:53:57:41:21:4f:
                    68:bd:48:2b:2c:66:ce:25:d5:f2:a3:c0:87:32:2e:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:02:74:04:15:3D:73:3B:ED:6D:C9:E9:44:92:79:A1:87:80:9D:C9
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:3::-2804:574:6:ffff:ffff:ffff:ffff:ffff
                  2804:574:8::/48
                  2804:574:a::/48
                  2804:574:aaaa::/48
                  2804:574:c000::/48
                  2804:2b78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         59:34:06:3f:aa:80:dd:4c:be:24:cd:58:63:68:a0:24:e1:7b:
         8c:f5:0c:72:cc:fd:fa:27:f1:5f:fe:34:6e:8f:68:85:4b:71:
         b1:4a:79:1a:3c:7b:cd:c4:e8:27:82:1c:83:62:94:37:7e:d0:
         46:ac:d1:62:0e:9c:a1:8c:1e:4f:d8:eb:8b:84:ed:72:73:86:
         d7:0c:82:8a:01:7d:a2:0b:f4:71:d4:b7:33:cd:62:ed:ca:fa:
         bc:c9:b2:71:81:b7:b8:f5:db:9c:b8:21:40:6c:0c:6f:f5:81:
         16:9c:f5:cd:2e:77:12:27:16:81:ec:23:3c:c5:3a:27:52:62:
         4d:08:fe:a6:6d:94:21:35:5a:e0:d4:a0:a2:71:4c:36:0b:3a:
         4f:c4:2d:17:13:a7:60:20:e6:0a:fd:1e:9a:a2:df:c8:4d:98:
         05:b3:19:c6:fd:26:ea:ad:ad:90:28:1b:43:8b:ec:8d:e5:e9:
         9f:b0:c2:d5:d0:42:21:2a:89:3c:c8:c4:9c:e7:91:61:dd:a0:
         b8:1d:91:07:bf:7d:ef:25:aa:77:f6:99:63:50:0e:c3:b1:18:
         cf:af:d2:cf:fb:28:47:51:a0:9f:06:50:6d:66:b3:78:aa:a5:
         bb:c5:72:20:9b:62:ea:ec:ed:26:2f:d8:e2:07:31:46:b6:28:
         f6:52:3c:c0
-----BEGIN CERTIFICATE-----
MIIHRzCCBi+gAwIBAgIUd0la6ZK2Yr/SPTe/6bLPx6MIVG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUyNDhDODBFQTVDNEM1Nzc5QzEyOTcxMjFEMEJEOEQy
REMzNzlGMDAeFw0yNjAyMTIxMzMzMzhaFw0yNzAyMTExMzM4MzhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUI0QTVBOUNCOUZGOEEyMzg4
RUFBQzhEQzhBOTNCOTAwMkM0QTkxOUVDMEMxQjA3N0E2RUUzMTQ0MURBNUJGOThC
QzM3REJFRDMzNUIwMUY0NkQwNDcxNEQ3NkEyNkNERUEyRkM5OENFNzFFRDc4M0ZD
M0U1RDA4NjEzRkU0MDY4Q0YyMDI0MjJCNENBRDJFNzk2MjlFODY2M0ExQzE5RkQw
MDA5NDdBRkE5MTVGOUY1QzkzM0RDMEQ2RkE1M0Q5MDFBM0FGQTU3MTdGRkI0QzUz
RTgwM0NFRUJBNUZBNjlDQTA2NjFBRDNCM0RFRTMzNzA1NTRFRjc5NDA4NkM1Rjk0
RDY3RTcwRUVDQjkzQzgwNEVCQTRGMzVBNDQ0MDAwRUU0OUQxQ0I1ODM2Mjk4NTgz
ODRGOTU0NDFFMEVDMDhBMEU5QUZBMERBQ0MxQjIxREZGN0MwRkE2RjkwOTgwNUU0
NjY5Mjc0MjJBNURFRkFEQzNCMDY4MENFNzExQTQzNjA1NjRGODA2MjFCNTZEQ0Q0
OTE5NDJBMjEyMjUwRjYzMENERjFGMUU0M0IwMjk3RUI3MkQ4Nzc4M0ZFQkM4NjAz
MEY0QTc4OEZBNkQyNkRCNkJFNTM1NzQxMjE0RjY4QkQ0ODJCMkM2NkNFMjVENUYy
QTNDMDg3MzIyRUYxMzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAq0panLn/iiOI6qyNyKk7kALEqRnsDBsHem7jFEHaW/mLw32+0zWw
H0bQRxTXaibN6i/JjOce14P8Pl0IYT/kBozyAkIrTK0ueWKehmOhwZ/QAJR6+pFf
n1yTPcDW+lPZAaOvpXF/+0xT6APO66X6acoGYa07Pe4zcFVO95QIbF+U1n5w7suT
yATrpPNaREAA7knRy1g2KYWDhPlUQeDsCKDpr6DazBsh3/fA+m+QmAXkZpJ0IqXe
+tw7BoDOcRpDYFZPgGIbVtzUkZQqISJQ9jDN8fHkOwKX63LYd4P+vIYDD0p4j6bS
bba+U1dBIU9ovUgrLGbOJdXyo8CHMi7xMQIDAQABo4ICVTCCAlEwHQYDVR0OBBYE
FLcCdAQVPXM77W3J6USSeaGHgJ3JMB8GA1UdIwQYMBaAFK4kjIDqXExXecEpcSHQ
vY0tw3nwMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0Z5eTl0N2JBYVkxU1J0
TWpqa1h3VU1uRWN4WXVlcTY1ZFo5TGFWMU5EMnlBLzEvQUUyNDhDODBFQTVDNEM1
Nzc5QzEyOTcxMjFEMEJEOEQyREMzNzlGMC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9BRTI0OEM4MEVBNUM0QzU3NzlDMTI5NzEyMUQwQkQ4RDJEQzM3
OUYwLmNlcjB5BggrBgEFBQcBCwRtMGswaQYIKwYBBQUHMAuGXXJzeW5jOi8vcnBr
aS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vRnl5OXQ3YkFhWTFTUnRNamprWHdVTW5F
Y3hZdWVxNjVkWjlMYVYxTkQyeUEvMS9BUzUyNDY4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAAjBAMBIDBwAoBAV0
AAMDBwAoBAV0AAYDBwAoBAV0AAgDBwAoBAV0AAoDBwAoBAV0qqoDBwAoBAV0wAAD
BgcoBCt4gDANBgkqhkiG9w0BAQsFAAOCAQEAWTQGP6qA3Uy+JM1YY2igJOF7jPUM
csz9+ifxX/40bo9ohUtxsUp5Gjx7zcToJ4Icg2KUN37QRqzRYg6coYweT9jri4Tt
cnOG1wyCigF9ogv0cdS3M81i7cr6vMmycYG3uPXbnLghQGwMb/WBFpz1zS53EicW
gewjPMU6J1JiTQj+pm2UITVa4NSgonFMNgs6T8QtFxOnYCDmCv0emqLfyE2YBbMZ
xv0m6q2tkCgbQ4vsjeXpn7DC1dBCISqJPMjEnOeRYd2guB2RB7997yWqd/aZY1AO
w7EYz6/Sz/soR1GgnwZQbWazeKqlu8VyIJti6uztJi/Y4gcxRrYo9lI8wA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:42:11 2026 by rpki-client