Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130302e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3130302e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          5nc2MqEOvyXrKPsMDI7sFisIH+1Z2S0FeNjxCd9OhM0=
Subject key identifier:   51:9B:F6:16:03:B5:0C:19:A8:70:5C:9F:A8:42:F5:B8:03:55:6B:26
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       69EC42102260929E366A0DC0B72BF721E2F82AB6
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130302e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:36 +0000
ROA not before:           Thu 25 Sep 2025 16:03:36 +0000
ROA not after:            Thu 24 Sep 2026 16:08:36 +0000
asID:                     262757
IP address blocks:        186.224.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ec:42:10:22:60:92:9e:36:6a:0d:c0:b7:2b:f7:21:e2:f8:2a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:36 2025 GMT
            Not After : Sep 24 16:08:36 2026 GMT
        Subject: CN=519BF61603B50C19A8705C9FA842F5B803556B26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:53:4c:f0:4a:6e:14:f3:98:fa:52:7b:45:
                    34:bc:8c:c2:ad:22:fb:77:20:b3:38:f4:12:ed:de:
                    ab:55:6b:89:2d:25:cd:11:b8:23:ac:f0:ed:d4:e6:
                    5f:0f:ef:f7:6f:b0:20:c8:54:62:30:c5:bf:c6:a6:
                    06:f7:d7:db:0e:fb:a7:dc:e2:ec:4b:93:b4:8b:65:
                    e7:cc:9b:c6:56:44:39:53:fb:8f:ae:b5:15:c1:08:
                    54:ff:e2:b1:28:3d:0d:ea:02:3c:f1:9a:73:9b:0f:
                    a1:5b:b9:ae:d9:cc:1b:1f:d6:1c:71:0f:51:3c:fe:
                    d7:dc:92:d7:8b:44:60:fd:f6:b2:7b:78:ed:7b:d0:
                    24:5e:86:f7:37:5a:d0:7b:3e:c3:2d:a6:4b:44:c8:
                    a1:d3:e8:6b:75:d8:6b:39:69:f9:26:a8:e8:7d:d6:
                    b6:9f:f9:fd:ef:9c:3c:84:98:77:a8:40:c7:7c:3c:
                    fd:36:d3:d6:87:68:db:17:6d:fa:d6:e3:19:8b:16:
                    29:3c:7f:33:62:12:e8:fb:4d:65:64:b7:90:ab:54:
                    d7:6c:0e:75:ce:36:1b:ae:92:f5:95:4b:a4:f8:d6:
                    40:4e:5b:46:97:8a:c8:eb:4a:0f:be:02:c6:8f:c9:
                    3c:0b:ce:59:21:d7:1a:b7:07:73:58:b0:b2:1d:43:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:F6:16:03:B5:0C:19:A8:70:5C:9F:A8:42:F5:B8:03:55:6B:26
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130302e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:26:49:1e:2e:a4:1b:f2:17:e7:28:3c:ec:c4:10:34:73:b0:
         34:ec:bd:77:ab:f8:d7:d6:02:31:9c:70:02:d9:25:68:1b:93:
         e1:48:6a:8a:ca:d0:2d:d4:33:a3:8f:a3:a6:2b:b5:3e:12:6a:
         fa:67:83:02:cf:45:63:0c:fb:20:29:a3:ca:d0:5b:13:dc:7c:
         53:ba:49:5a:29:9b:f9:10:ae:4e:68:ad:52:6c:32:12:b6:22:
         cf:d9:59:df:2f:03:82:8e:37:9e:41:da:1e:46:16:94:93:49:
         91:98:7c:27:cc:c1:8c:8d:c6:0f:08:cd:5c:9c:82:d1:dd:a1:
         2f:23:b8:6e:5a:35:59:e4:22:96:e0:85:49:4e:80:38:16:61:
         bd:51:a5:6a:52:a2:df:57:8c:6d:4e:bd:7e:13:9e:d9:3f:45:
         29:30:02:43:5d:bc:e9:96:c4:18:66:4c:38:4b:c6:11:66:33:
         c7:82:9b:6c:67:2d:1b:98:7b:df:ff:0d:b1:37:31:a2:37:ca:
         39:e2:2e:dc:61:d3:17:1b:f4:25:15:b0:6a:0c:85:ab:d7:b4:
         9c:f2:81:42:8a:41:9a:13:9b:05:7f:2e:5c:9c:5e:3d:83:91:
         96:05:86:50:dc:ab:ac:f1:e7:9f:cd:1f:9a:67:f7:67:55:31:
         9b:c5:f9:6d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUaexCECJgkp42ag3Atyv3IeL4KrYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNTA5MjUxNjAzMzZaFw0yNjA5MjQxNjA4MzZaMDMxMTAvBgNV
BAMTKDUxOUJGNjE2MDNCNTBDMTlBODcwNUM5RkE4NDJGNUI4MDM1NTZCMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5FNM8EpuFPOY+lJ7RTS8jMKt
Ivt3ILM49BLt3qtVa4ktJc0RuCOs8O3U5l8P7/dvsCDIVGIwxb/Gpgb319sO+6fc
4uxLk7SLZefMm8ZWRDlT+4+utRXBCFT/4rEoPQ3qAjzxmnObD6Fbua7ZzBsf1hxx
D1E8/tfckteLRGD99rJ7eO170CRehvc3WtB7PsMtpktEyKHT6Gt12Gs5afkmqOh9
1raf+f3vnDyEmHeoQMd8PP0209aHaNsXbfrW4xmLFik8fzNiEuj7TWVkt5CrVNds
DnXONhuukvWVS6T41kBOW0aXisjrSg++AsaPyTwLzlkh1xq3B3NYsLIdQ8YxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUUZv2FgO1DBmocFyfqEL1uANVayYwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrgZDANBgkqhkiG9w0BAQsFAAOCAQEAriZJ
Hi6kG/IX5yg87MQQNHOwNOy9d6v419YCMZxwAtklaBuT4UhqisrQLdQzo4+jpiu1
PhJq+meDAs9FYwz7ICmjytBbE9x8U7pJWimb+RCuTmitUmwyErYiz9lZ3y8Dgo43
nkHaHkYWlJNJkZh8J8zBjI3GDwjNXJyC0d2hLyO4blo1WeQiluCFSU6AOBZhvVGl
alKi31eMbU69fhOe2T9FKTACQ1286ZbEGGZMOEvGEWYzx4KbbGctG5h73/8NsTcx
ojfKOeIu3GHTFxv0JRWwagyFq9e0nPKBQopBmhObBX8uXJxePYORlgWGUNyrrPHn
n80fmmf3Z1Uxm8X5bQ==
-----END CERTIFICATE-----
Generated at Wed May 13 15:37:17 2026 by rpki-client