Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
File:                     AS52468.roa (raw, json)
Hash identifier:          V6B5rrriQpPrdrV5pvHI0tUUOOG0M8a9fX4hudY27y8=
Subject key identifier:   FD:7A:1F:76:F0:C8:BF:F0:6D:05:8E:8D:7F:9A:82:75:2A:2A:9B:96
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       1B98789F97B79869AE747F8CB473837EBCF72E11
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa
Signing time:             Tue 15 Sep 2026 12:29:20 +0000
ROA not before:           Tue 15 Sep 2026 12:24:20 +0000
ROA not after:            Tue 14 Sep 2027 12:29:20 +0000
asID:                     52468
IP address blocks:        189.84.237.0/24 maxlen: 24
                          189.84.238.0/24 maxlen: 24
                          2804:574::/32 maxlen: 48
                          2804:574:3::/48 maxlen: 48
                          2804:574:4::/48 maxlen: 48
                          2804:574:5::/48 maxlen: 48
                          2804:574:6::/48 maxlen: 48
                          2804:574:8::/48 maxlen: 48
                          2804:574:a::/48 maxlen: 48
                          2804:574:aaaa::/48 maxlen: 48
                          2804:574:c000::/48 maxlen: 48
                          2804:574:e000::/35 maxlen: 35
                          2804:574:e001::/48 maxlen: 48
                          2804:2b78:8000::/33 maxlen: 33
                          2804:2b78:8001::/48 maxlen: 48
                          2804:2b78:8002::/48 maxlen: 48
                          2804:2b78:8003::/48 maxlen: 48
                          2804:2b78:8005::/48 maxlen: 48
                          2804:2b78:8007::/48 maxlen: 48
                          2804:2b78:8008::/46 maxlen: 46
                          2804:2b78:800c::/48 maxlen: 48
                          2804:2b78:800d::/48 maxlen: 48
                          2804:2b78:800e::/48 maxlen: 48
                          2804:2b78:800f::/48 maxlen: 48
                          2804:2b78:8010::/47 maxlen: 47
                          2804:2b78:8012::/48 maxlen: 48
                          2804:2b78:8013::/48 maxlen: 48
                          2804:2b78:8014::/47 maxlen: 47
                          2804:2b78:8016::/48 maxlen: 48
                          2804:2b78:8017::/48 maxlen: 48
                          2804:2b78:8018::/48 maxlen: 48
                          2804:2b78:801a::/48 maxlen: 48
                          2804:2b78:801b::/48 maxlen: 48
                          2804:2b78:801c::/48 maxlen: 48
                          2804:2b78:801d::/48 maxlen: 48
                          2804:2b78:801f::/48 maxlen: 48
                          2804:2b78:8020::/44 maxlen: 44
                          2804:2b78:8032::/48 maxlen: 48
                          2804:2b78:8033::/48 maxlen: 48
                          2804:2b78:8034::/47 maxlen: 47
                          2804:2b78:8036::/48 maxlen: 48
                          2804:2b78:8037::/48 maxlen: 48
                          2804:2b78:8038::/48 maxlen: 48
                          2804:2b78:8039::/48 maxlen: 48
                          2804:2b78:803a::/48 maxlen: 48
                          2804:2b78:803b::/48 maxlen: 48
                          2804:2b78:803c::/48 maxlen: 48
                          2804:2b78:803d::/48 maxlen: 48
                          2804:2b78:803f::/48 maxlen: 48
                          2804:2b78:8040::/44 maxlen: 44
                          2804:2b78:8050::/44 maxlen: 44
                          2804:2b78:8061::/48 maxlen: 48
                          2804:2b78:8062::/48 maxlen: 48
                          2804:2b78:8063::/48 maxlen: 48
                          2804:2b78:8064::/48 maxlen: 48
                          2804:2b78:8065::/48 maxlen: 48
                          2804:2b78:8066::/48 maxlen: 48
                          2804:2b78:8067::/48 maxlen: 48
                          2804:2b78:806a::/48 maxlen: 48
                          2804:2b78:8081::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 Oct 2026 12:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:98:78:9f:97:b7:98:69:ae:74:7f:8c:b4:73:83:7e:bc:f7:2e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Sep 15 12:24:20 2026 GMT
            Not After : Sep 14 12:29:20 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:bc:0a:51:d4:1c:7b:34:84:13:0f:30:f7:
                    19:bf:41:52:f5:4c:d4:6c:75:cb:83:5c:47:b4:bd:
                    69:5b:60:b2:73:d1:ba:7b:6f:68:3a:6b:33:3e:98:
                    f4:15:7e:a1:6f:d6:59:5a:f9:e9:a7:a3:8b:a8:61:
                    5c:0d:66:7c:e4:a4:ac:84:44:30:55:92:53:af:dc:
                    d2:db:d5:5a:63:37:b2:fe:0d:08:37:ab:ba:48:df:
                    ba:fd:ed:ea:b4:1d:8d:49:55:cb:2a:fc:af:e4:3b:
                    b2:fd:bf:0f:94:28:65:a4:88:de:a9:69:71:fa:0b:
                    bc:04:72:59:87:06:5f:49:d7:c1:13:14:86:06:85:
                    ff:dc:47:22:69:78:67:4a:9b:52:74:79:db:8d:9f:
                    5e:9a:eb:b7:ab:b0:b2:e0:63:e3:9d:e8:0d:5f:93:
                    dc:73:57:ba:fd:95:9a:70:41:3e:7a:97:d1:6e:db:
                    f5:35:d3:35:db:10:ce:cc:1f:7b:7a:ff:25:19:b6:
                    45:1a:82:a9:9a:b2:07:75:6c:6c:3a:27:93:bc:31:
                    f7:e6:ad:2f:a8:f2:f7:b6:ee:e1:36:2f:47:e2:66:
                    fe:f8:e4:16:c6:b5:d8:01:8e:2d:8e:f6:53:a6:03:
                    c1:a8:e6:01:f4:fa:a6:23:33:a1:c0:72:0f:21:2d:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:7A:1F:76:F0:C8:BF:F0:6D:05:8E:8D:7F:9A:82:75:2A:2A:9B:96
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52468.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.237.0-189.84.238.255
                IPv6:
                  2804:574::/32
                  2804:2b78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:70:29:57:f1:6a:f6:42:c6:d3:56:45:55:ea:ad:99:82:34:
         7c:43:21:a1:15:d8:e1:23:9d:24:d7:a1:c5:db:c7:de:4b:c6:
         29:bf:f2:11:98:dd:e1:83:fb:7a:71:1a:cb:12:d8:02:83:63:
         da:f1:d5:e0:27:32:b2:b2:f7:9f:f6:c0:6c:e7:3b:e9:a2:25:
         fd:0c:23:e2:58:4e:21:e7:fa:de:bb:29:3c:c5:59:ea:48:9e:
         84:f9:28:69:da:1a:3d:1d:c5:04:e1:87:4b:a5:fd:ec:09:f4:
         2c:0e:f8:5f:71:16:93:2c:ca:5c:ef:92:60:f8:b9:8d:f1:b6:
         50:25:4e:1e:45:71:3d:4e:00:06:f8:fd:4a:6a:4d:28:d9:fb:
         60:4c:1e:62:62:02:08:42:45:ae:8a:76:7a:02:f0:46:de:40:
         1c:38:13:45:c7:b3:23:8c:df:d2:04:14:78:f2:16:0d:b6:f5:
         a0:19:3f:43:eb:c9:ac:33:40:df:f7:9a:be:77:b6:63:a9:0f:
         4f:fa:fa:0e:13:6e:01:cd:65:c7:7f:87:99:42:39:9d:c4:c5:
         d5:fb:e3:b9:48:4d:c2:2d:aa:32:8d:cd:15:38:a4:3b:c4:fc:
         15:a9:44:3e:21:c0:4e:08:e5:26:45:6d:a2:41:31:42:0d:c3:
         7b:e6:61:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:40:04 2026 by rpki-client