Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130302e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130302e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          AZn77T6SI1yQM+0EU5YINRVVeZL7+i7mB1IvelLnMYg=
Subject key identifier:   09:47:22:66:7C:45:C7:50:AF:6F:8A:98:EF:99:5D:DD:EC:1D:A6:E8
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       7554776916BFD3E579CF3B10505A5F32D3BD1EE5
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130302e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:38 +0000
ROA not before:           Thu 27 Aug 2026 16:09:38 +0000
ROA not after:            Thu 26 Aug 2027 16:14:38 +0000
asID:                     262757
IP address blocks:        186.224.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:54:77:69:16:bf:d3:e5:79:cf:3b:10:50:5a:5f:32:d3:bd:1e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:38 2026 GMT
            Not After : Aug 26 16:14:38 2027 GMT
        Subject: CN=094722667C45C750AF6F8A98EF995DDDEC1DA6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9d:13:8a:d1:e6:00:53:0c:e3:7f:63:f3:b5:
                    9a:25:a2:c7:33:08:7c:0f:50:6d:42:b4:04:fd:73:
                    2f:e6:a2:d1:db:7c:29:0c:8e:05:7f:a1:96:99:c2:
                    3a:74:14:24:1f:81:e9:ac:62:50:58:81:34:35:66:
                    85:0d:b9:17:ea:8d:6d:f2:70:f8:77:5c:9a:bb:8c:
                    7d:3b:69:85:12:a0:da:32:ca:e9:9a:2e:17:96:d4:
                    90:95:c7:0f:41:38:01:c4:53:0c:e8:75:78:3d:0f:
                    ac:0e:50:a2:cb:05:05:08:e8:76:40:66:5e:56:0c:
                    50:cc:2c:8a:50:9c:02:ce:5f:cb:26:77:d8:2c:df:
                    3f:6f:87:f1:64:7f:6a:38:35:14:93:cf:be:e7:a1:
                    fa:86:39:f3:1f:85:48:2c:18:c7:a3:b7:f5:83:ad:
                    87:fa:ad:f9:6c:e6:c2:8c:05:47:b5:c4:8d:26:a9:
                    97:f3:50:55:da:87:2b:ea:1a:36:84:d7:fc:81:63:
                    04:1d:8f:ca:65:39:03:d4:07:65:53:6a:70:f4:73:
                    67:7e:a2:cb:dd:5a:30:7a:0d:a2:59:01:33:26:3f:
                    97:c3:49:a4:44:a0:e3:62:91:11:d8:37:ca:3e:c1:
                    ec:bf:52:ea:9b:0d:04:0a:97:d4:52:a2:89:67:15:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:47:22:66:7C:45:C7:50:AF:6F:8A:98:EF:99:5D:DD:EC:1D:A6:E8
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130302e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:bd:58:87:b9:70:8d:60:a9:3c:4a:00:e3:bd:d4:c4:da:03:
         7f:f9:45:88:5c:4b:9a:69:93:4a:da:ef:48:cf:60:00:0f:4f:
         eb:32:40:b2:bb:11:ea:ce:a4:01:1b:3f:8b:36:79:e6:13:55:
         35:40:c7:ae:34:68:5d:63:68:a2:fd:ed:e6:97:c7:19:10:df:
         39:fe:16:ad:a1:da:e2:37:17:cd:69:b7:cf:ef:b9:a3:bc:4c:
         5a:bc:97:c8:5a:61:fd:41:66:4a:e6:f8:02:c5:fa:86:3c:b1:
         ff:26:f7:82:19:ea:68:d9:19:6e:4b:81:87:59:cd:31:48:7a:
         e6:7b:cc:01:e9:7b:d8:f7:44:a4:47:e3:f5:0b:69:cd:4d:ce:
         86:7d:43:de:a5:24:06:cd:7c:6c:ea:4f:70:6e:3b:7e:87:68:
         00:6e:cb:93:16:41:99:29:3c:ea:63:93:0e:b6:c5:c6:14:3d:
         3e:b0:18:7c:74:9c:d9:5e:88:44:f4:0c:63:65:3d:5c:cc:42:
         7e:73:25:67:6a:45:3b:6e:5c:03:c7:65:d4:6c:73:91:41:70:
         fe:28:fd:a8:77:91:a6:10:c9:b0:6a:35:2b:11:42:f4:cf:4b:
         fc:8b:ae:ea:6a:55:59:a4:81:1f:23:57:dc:ad:73:d8:80:65:
         af:c9:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:13:38 2026 by rpki-client