Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130312e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130312e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          6A1EeIxZ34n6pFjhbaqBsyCo5RymfbPLVWQ91Dm7+JI=
Subject key identifier:   FB:E8:76:CC:31:8A:52:21:D8:AC:56:7F:7E:43:7E:BD:8F:3B:72:6B
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       4C8AF9386012DD3B378E783C6FCCC6E1A1A342A5
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130312e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:33 +0000
ROA not before:           Thu 25 Sep 2025 16:03:33 +0000
ROA not after:            Thu 24 Sep 2026 16:08:33 +0000
asID:                     262757
IP address blocks:        186.224.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:8a:f9:38:60:12:dd:3b:37:8e:78:3c:6f:cc:c6:e1:a1:a3:42:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:33 2025 GMT
            Not After : Sep 24 16:08:33 2026 GMT
        Subject: CN=FBE876CC318A5221D8AC567F7E437EBD8F3B726B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c1:1d:0b:f7:00:2f:da:90:27:d6:29:b2:d3:
                    cb:f5:df:b8:ad:dc:f4:fc:f3:e2:82:dd:f0:49:56:
                    50:39:0c:30:75:c9:c4:0c:0f:1a:88:2b:42:f9:7c:
                    1b:9c:5c:e8:b3:ae:fb:14:23:b9:e1:8f:d7:aa:6c:
                    3c:37:a3:de:d7:a6:d0:15:40:e7:69:84:72:a2:2c:
                    b7:29:c2:2d:76:04:c6:dd:d0:bf:3e:c8:3d:44:49:
                    81:4c:67:20:18:22:d7:46:e9:09:3c:2d:74:97:0d:
                    c0:ce:17:46:7e:f4:11:f2:aa:e2:bf:33:56:0f:f0:
                    82:bf:fa:f3:d0:77:81:78:cf:8d:05:fd:0b:07:c2:
                    56:1f:d2:c4:f0:40:85:a5:6e:8c:a2:6c:54:4c:dd:
                    3f:06:54:08:94:b4:66:19:79:ea:16:ad:86:df:7a:
                    74:86:2b:19:3f:e6:2f:66:90:78:7c:f6:fe:55:f1:
                    83:48:75:c1:fa:ea:44:ab:45:ed:3c:ff:cb:b6:59:
                    8c:c6:ec:81:78:d4:93:4b:93:f2:78:6e:e6:48:53:
                    3a:f6:75:e6:a1:70:0b:a8:ac:43:d0:69:81:36:67:
                    d0:cd:24:56:73:d5:83:ba:35:eb:f8:b9:8e:3b:4f:
                    c7:45:70:f5:01:98:05:8e:75:61:90:67:e1:9c:3d:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E8:76:CC:31:8A:52:21:D8:AC:56:7F:7E:43:7E:BD:8F:3B:72:6B
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130312e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:5a:08:c4:97:bc:76:da:81:b6:91:98:d0:04:be:b4:14:d5:
         67:5f:ca:72:e9:6b:47:1e:fc:cc:d4:b1:63:bc:76:8d:b6:c7:
         99:8e:0e:fe:0d:a5:b3:54:85:21:1e:db:c3:fe:0e:c3:93:68:
         2c:bb:b1:c2:1d:36:a4:57:5d:07:0f:8a:a7:81:39:87:2c:2e:
         0b:00:15:80:97:01:e0:d1:c9:b5:1a:d0:f9:dc:c1:5f:02:4c:
         33:8c:ab:5f:0d:d9:ea:55:43:10:07:99:17:10:00:38:16:3a:
         51:9a:aa:5d:69:7c:9b:59:93:0e:cb:2b:5d:7b:97:9d:23:02:
         91:00:81:84:13:0c:de:51:bf:50:51:8e:96:01:49:01:40:fb:
         72:f5:d6:0d:83:c8:67:89:b6:69:0a:77:32:99:81:e2:a7:83:
         ea:4a:49:f4:20:74:08:be:ee:18:bd:e6:40:8f:0c:26:c7:89:
         b5:04:e8:62:bf:6e:6d:91:c6:c3:72:7b:fb:84:5f:ba:12:c6:
         26:49:b6:6d:c4:b0:00:58:9a:69:e2:06:0a:f7:84:62:06:55:
         1b:77:83:4d:3d:78:22:4c:43:b2:4d:3d:32:79:1b:4a:3e:4b:
         76:53:84:c6:99:99:2e:b9:82:7a:ea:b1:7c:18:0b:21:ab:17:
         c8:b9:0e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:00 2026 by rpki-client