Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e20323735363331.roa
File:                     3138362e3230392e3130332e302f32342d3234203d3e20323735363331.roa (raw, json)
Hash identifier:          Yw/P4VT81m5suphQT92wHLdzw97fYR+SiJJ1BHYcvuY=
Subject key identifier:   02:60:50:CB:09:5A:39:A7:08:D2:56:DD:9D:C7:0D:2D:EF:69:05:83
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       71733E8A000609BFFBD6364163F12B2D9619735A
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e20323735363331.roa
Signing time:             Tue 27 Oct 2026 14:03:45 +0000
ROA not before:           Tue 27 Oct 2026 13:58:45 +0000
ROA not after:            Tue 26 Oct 2027 14:03:45 +0000
asID:                     275631
IP address blocks:        186.209.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 05 Nov 2026 05:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:73:3e:8a:00:06:09:bf:fb:d6:36:41:63:f1:2b:2d:96:19:73:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: Oct 27 13:58:45 2026 GMT
            Not After : Oct 26 14:03:45 2027 GMT
        Subject: CN=026050CB095A39A708D256DD9DC70D2DEF690583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3a:36:5e:ba:2f:b9:b7:ce:82:00:5c:74:00:
                    8c:cd:b5:db:29:41:1f:f7:bc:94:03:2a:27:94:40:
                    9c:30:a6:1c:26:a7:d5:10:d5:32:44:74:fd:d3:2b:
                    57:d4:86:91:ad:b7:82:83:9b:53:fa:60:5e:85:78:
                    48:f5:9b:13:b6:91:64:2e:a5:10:45:fb:bc:74:a6:
                    34:e6:10:d0:fb:54:26:fc:3b:a0:ae:73:d9:9a:e3:
                    e1:ac:58:ef:11:a2:fb:a7:c6:5c:5a:fe:57:40:ad:
                    3a:25:db:14:3e:5d:c1:47:eb:c0:41:29:8a:14:0a:
                    57:71:5d:91:80:a1:24:51:25:4c:d3:47:42:40:28:
                    c2:7d:f0:75:f4:02:23:f0:30:2a:cb:44:ae:19:74:
                    d9:e1:ef:d3:5c:ad:55:98:6d:5a:fb:5a:7d:b9:30:
                    bc:39:5e:52:fd:43:88:fa:77:9c:98:e9:57:5f:bf:
                    d0:3b:7a:95:e4:73:03:a5:18:97:34:a7:f9:03:7f:
                    70:6e:55:20:ff:f3:33:76:7f:80:a2:d4:53:50:b9:
                    8e:80:d4:d5:b8:3e:5f:66:0c:53:47:8a:35:17:3c:
                    39:e7:87:95:4b:e8:60:58:03:c5:fe:ce:92:94:79:
                    1d:df:ca:11:f4:f9:4e:01:aa:79:31:c1:aa:a1:1e:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:60:50:CB:09:5A:39:A7:08:D2:56:DD:9D:C7:0D:2D:EF:69:05:83
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130332e302f32342d3234203d3e20323735363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:44:7b:6f:ca:7c:1a:6c:42:06:18:b8:75:5e:12:03:b4:
         bd:f3:81:31:3c:ca:39:fd:2c:98:6f:3d:8a:c9:75:d5:22:da:
         96:95:99:6f:57:35:e8:b4:57:36:94:69:a7:85:e4:08:63:03:
         d2:f5:d4:34:60:ec:cb:c8:9a:d3:9f:a5:78:3c:2a:9a:5c:00:
         9a:73:43:f0:ba:6a:a3:3a:c8:29:29:8f:46:a9:d2:4c:60:33:
         96:34:02:2b:af:f8:6e:35:b9:f4:ca:44:50:69:4a:1d:d0:c5:
         ef:79:07:fd:4c:b7:5f:32:25:66:d3:59:d5:f5:5e:fb:9a:b5:
         31:01:c0:1e:8a:90:98:e5:a2:89:30:18:86:10:a3:4c:4a:bc:
         7f:de:4a:07:ba:3d:90:46:53:a9:64:45:91:5b:4f:f4:7c:b5:
         69:9a:6e:bb:d9:79:22:90:9f:da:10:0e:ae:b9:0d:23:c4:b6:
         00:69:90:23:ff:7b:92:37:06:f4:f6:ff:2e:07:41:8e:c0:52:
         af:75:7d:07:b0:64:f2:a6:19:6e:b7:47:2a:b9:68:0d:13:c7:
         8d:c2:5a:51:94:9c:ba:f9:4c:42:d4:80:98:64:17:80:ca:0b:
         d5:ec:10:86:62:89:20:1d:55:de:b7:1d:52:2a:23:db:1a:c7:
         d5:69:61:7d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUcXM+igAGCb/71jZBY/ErLZYZc1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg3RUNENDQxREM4MzA4QTNDNTU3MEQxRDY1REY0MzAy
NzgwRUQwODAeFw0yNjEwMjcxMzU4NDVaFw0yNzEwMjYxNDAzNDVaMDMxMTAvBgNV
BAMTKDAyNjA1MENCMDk1QTM5QTcwOEQyNTZERDlEQzcwRDJERUY2OTA1ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OjZeui+5t86CAFx0AIzNtdsp
QR/3vJQDKieUQJwwphwmp9UQ1TJEdP3TK1fUhpGtt4KDm1P6YF6FeEj1mxO2kWQu
pRBF+7x0pjTmEND7VCb8O6Cuc9ma4+GsWO8Rovunxlxa/ldArTol2xQ+XcFH68BB
KYoUCldxXZGAoSRRJUzTR0JAKMJ98HX0AiPwMCrLRK4ZdNnh79NcrVWYbVr7Wn25
MLw5XlL9Q4j6d5yY6Vdfv9A7epXkcwOlGJc0p/kDf3BuVSD/8zN2f4Ci1FNQuY6A
1NW4Pl9mDFNHijUXPDnnh5VL6GBYA8X+zpKUeR3fyhH0+U4BqnkxwaqhHrRvAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUAmBQywlaOacI0lbdnccNLe9pBYMwHwYDVR0j
BBgwFoAUiH7NRB3IMIo8VXDR1l30MCeA7QgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC84ODdFQ0Q0NDFEQzgzMDhBM0M1NTcwRDFENjVERjQzMDI3ODBFRDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4N0VDRDQ0MURDODMwOEEz
QzU1NzBEMUQ2NURGNDMwMjc4MEVEMDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM2MmUzMjMwMzkyZTMxMzAzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzczNTM2MzMzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrRZzANBgkqhkiG9w0BAQsFAAOCAQEAb3tE
e2/KfBpsQgYYuHVeEgO0vfOBMTzKOf0smG89isl11SLalpWZb1c16LRXNpRpp4Xk
CGMD0vXUNGDsy8ia05+leDwqmlwAmnND8LpqozrIKSmPRqnSTGAzljQCK6/4bjW5
9MpEUGlKHdDF73kH/Uy3XzIlZtNZ1fVe+5q1MQHAHoqQmOWiiTAYhhCjTEq8f95K
B7o9kEZTqWRFkVtP9Hy1aZpuu9l5IpCf2hAOrrkNI8S2AGmQI/97kjcG9Pb/LgdB
jsBSr3V9B7Bk8qYZbrdHKrloDRPHjcJaUZScuvlMQtSAmGQXgMoL1ewQhmKJIB1V
3rcdUioj2xrH1WlhfQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 02:04:08 2026 by rpki-client