Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52840.roa
File:                     AS52840.roa (raw, json)
Hash identifier:          4UdCguVoHjUNceWyr2KOd3zi2wMlKVNHp04Dj8z2kY8=
Subject key identifier:   7F:98:D3:C0:AC:BB:77:98:E8:3B:0F:F8:EF:6F:CF:77:12:72:AC:23
Certificate issuer:       /CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
Certificate serial:       6672A3FE006C841C84B794A555292FD28522F1B5
Authority key identifier: AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52840.roa
Signing time:             Thu 12 Feb 2026 13:37:16 +0000
ROA not before:           Thu 12 Feb 2026 13:32:16 +0000
ROA not after:            Thu 11 Feb 2027 13:37:16 +0000
asID:                     52840
IP address blocks:        132.255.60.0/22 maxlen: 24
                          138.118.24.0/22 maxlen: 24
                          177.222.0.0/22 maxlen: 24
                          177.222.14.0/23 maxlen: 23
                          2804:be4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl
                          rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 03 Mar 2026 13:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:72:a3:fe:00:6c:84:1c:84:b7:94:a5:55:29:2f:d2:85:22:f1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE248C80EA5C4C5779C1297121D0BD8D2DC379F0
        Validity
            Not Before: Feb 12 13:32:16 2026 GMT
            Not After : Feb 11 13:37:16 2027 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:53:00:40:20:e9:95:5b:92:46:5f:ec:a6:
                    fb:fa:47:b4:3d:04:9f:ae:b5:d7:bc:ce:5a:b8:70:
                    2c:ec:16:bc:a6:20:dd:7d:97:78:aa:04:6e:1c:25:
                    ce:bc:e5:34:17:ff:85:1e:7e:bf:a0:06:ee:aa:59:
                    e5:a5:44:e0:34:f4:c5:22:5f:ff:20:da:d0:28:6f:
                    f3:b4:7c:68:9c:66:aa:3c:cb:0a:7a:b8:92:30:37:
                    aa:51:35:8b:8c:db:60:f0:d9:3a:16:95:3a:9e:88:
                    2d:77:82:43:51:88:ea:51:8c:d9:16:0b:66:20:3a:
                    84:72:90:d5:84:03:f7:48:30:f5:49:bb:e7:37:79:
                    e3:b2:0a:ac:8a:be:8a:be:3d:56:a1:dd:04:e6:c2:
                    af:02:e0:47:66:eb:73:a8:3c:dd:ff:bd:c3:cb:c3:
                    02:f1:2c:68:b2:c3:b8:00:03:34:05:75:cc:0f:e5:
                    b2:24:cd:31:58:5e:69:d7:02:e6:be:95:d5:2a:46:
                    d4:18:84:a2:94:f0:f5:e0:9c:c5:a7:4d:6f:0f:04:
                    b5:fa:6d:ad:f6:0d:05:06:aa:ca:19:df:94:3e:a1:
                    42:db:46:77:8f:69:78:f7:7c:56:d4:03:9d:e9:e4:
                    6c:fe:4a:f3:27:0b:f3:5c:aa:0a:63:56:97:c2:13:
                    b7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:98:D3:C0:AC:BB:77:98:E8:3B:0F:F8:EF:6F:CF:77:12:72:AC:23
            X509v3 Authority Key Identifier:
                keyid:AE:24:8C:80:EA:5C:4C:57:79:C1:29:71:21:D0:BD:8D:2D:C3:79:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE248C80EA5C4C5779C1297121D0BD8D2DC379F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyy9t7bAaY1SRtMjjkXwUMnEcxYueq65dZ9LaV1ND2yA/1/AS52840.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.60.0/22
                  138.118.24.0/22
                  177.222.0.0/22
                  177.222.14.0/23
                IPv6:
                  2804:be4::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:89:8e:65:f7:e3:f0:0c:a7:81:b6:9a:d0:83:ed:dd:88:d9:
         64:b5:e1:93:1e:cb:92:7f:f1:17:db:8c:de:e7:01:c0:54:b1:
         18:74:f8:34:4f:40:44:79:1c:a2:d9:fd:00:a9:d9:e1:94:08:
         36:38:65:3a:89:6d:ac:57:bb:38:27:4b:26:bc:7c:12:fd:b8:
         dc:11:7c:7d:18:a4:c2:61:61:85:f7:d7:29:1a:ef:7e:2f:26:
         4d:10:78:52:a6:e6:26:60:4b:c0:3f:f2:53:11:67:09:63:07:
         65:6e:78:dc:b7:65:e0:3c:90:be:a6:71:fb:f2:e8:31:ab:c7:
         9d:be:86:fc:75:43:c6:c8:4c:61:bd:d1:39:bd:a0:f0:95:76:
         7b:57:a1:19:68:27:d3:77:e6:35:ba:af:da:a9:70:50:b1:6a:
         d4:e2:2b:10:d0:a6:85:26:37:52:18:9d:77:a7:e3:3d:11:dd:
         a2:49:aa:70:36:a4:64:23:81:d5:0a:d9:ae:2b:78:01:36:29:
         20:b8:81:7a:45:6c:87:05:ec:ce:0f:e0:27:ae:31:b4:52:8b:
         bc:4e:ee:ce:22:72:00:c0:ab:0d:4b:f2:4d:d0:09:c0:64:f5:
         a4:5f:54:43:f1:71:1b:6c:d9:a0:b6:e7:88:11:83:d2:27:3c:
         d6:a9:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:13:44 2026 by rpki-client