Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130332e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130332e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          acv33771USy5rDgwOBSk5koequmHZLugX135Bb9XjB8=
Subject key identifier:   60:B5:C2:7D:3C:B2:55:F8:55:8F:CC:B6:8A:2C:AE:EA:F8:CE:01:8C
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       3376AC6AB7881CB09E93C93C67BCA13A999B44C8
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130332e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:29 +0000
ROA not before:           Thu 25 Sep 2025 16:03:29 +0000
ROA not after:            Thu 24 Sep 2026 16:08:29 +0000
asID:                     262757
IP address blocks:        186.224.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:76:ac:6a:b7:88:1c:b0:9e:93:c9:3c:67:bc:a1:3a:99:9b:44:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:29 2025 GMT
            Not After : Sep 24 16:08:29 2026 GMT
        Subject: CN=60B5C27D3CB255F8558FCCB68A2CAEEAF8CE018C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:f5:98:d6:89:00:57:5e:ee:f2:d5:21:e3:
                    48:3e:4d:eb:9b:d8:6e:41:8f:0f:9c:c5:f8:0c:06:
                    32:e1:6d:a3:5d:23:11:1c:83:28:18:5d:d1:8f:9f:
                    6e:67:2b:f1:b9:10:4d:0c:30:50:f5:ce:24:6a:04:
                    31:e0:49:6a:df:ae:0c:99:e3:68:db:60:69:7a:6f:
                    a8:90:84:73:de:65:b4:7a:83:7a:c3:e8:a8:f8:2a:
                    31:aa:86:34:a1:cf:44:f0:21:2b:20:2f:28:e8:9f:
                    f6:88:e2:39:85:e6:be:a8:45:7c:fa:7c:4b:bc:ee:
                    f1:2f:e6:c8:f8:29:58:93:c5:55:8c:30:73:48:52:
                    0d:64:43:25:36:62:a6:c9:8f:28:0d:83:a9:e9:74:
                    13:0a:2f:21:a6:68:53:0f:26:19:16:c8:23:89:f7:
                    d8:4b:d2:03:bf:af:d7:d3:cc:27:ec:3c:3d:16:58:
                    9e:04:13:35:0a:ba:22:72:7d:dc:02:dd:7f:cb:5b:
                    01:90:1c:4e:51:4a:fe:f7:e4:4b:de:fe:8c:fd:d4:
                    94:56:57:5a:d8:b8:04:71:cd:ab:6c:a3:c0:10:b7:
                    f6:8e:27:7a:61:75:e1:45:94:33:49:ec:bb:a0:92:
                    e4:8a:c7:21:6b:97:3a:31:95:7f:13:35:5d:e4:8e:
                    18:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:C2:7D:3C:B2:55:F8:55:8F:CC:B6:8A:2C:AE:EA:F8:CE:01:8C
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130332e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:14:fa:11:76:b1:0e:48:cc:c2:7c:fe:a0:3e:d6:e1:97:df:
         e0:e2:07:50:47:9f:80:23:fe:0a:cd:76:10:46:87:a6:16:eb:
         80:ee:76:77:84:5d:7a:c1:5f:ad:4e:ce:a6:a8:a3:aa:b9:8b:
         10:f7:69:4a:43:52:11:4f:82:23:67:40:89:69:20:06:db:60:
         a1:51:d2:67:88:df:9b:f7:06:ff:11:33:f2:ac:d6:d6:b7:00:
         5f:d9:1c:ec:f4:a3:37:2d:ce:43:af:19:bb:cf:07:22:53:55:
         43:f7:ae:fc:ff:74:c4:47:6b:e4:cd:94:2f:7a:79:35:7c:4f:
         68:5e:ad:da:cd:39:49:7e:e3:2e:92:0f:85:ef:b0:68:3e:bd:
         ab:d7:22:92:e3:b0:50:f2:30:d7:85:cd:46:95:72:fb:10:72:
         d7:59:51:37:64:5d:73:9b:8f:4e:3b:9b:a5:fb:f2:7c:40:63:
         25:d8:92:b0:72:45:5f:9f:52:4b:8d:51:59:60:ed:c6:49:bc:
         4d:e8:6a:f1:43:49:56:60:53:9b:28:af:df:ed:7f:26:2e:98:
         0c:74:18:b6:9e:f5:ed:84:9c:d3:c4:45:87:50:e0:59:4a:d7:
         2b:70:b5:be:0a:b8:92:0d:34:17:e4:f0:42:cc:84:af:be:05:
         e7:d8:f5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:39:41 2026 by rpki-client