Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130352e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130352e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          4RlHXF36SN9mCA2D3+rPWQ2NztAm1V9w7+w3lSnb6og=
Subject key identifier:   7A:4B:3C:47:26:1D:1F:23:CF:C0:F2:50:7F:42:B2:C1:75:2E:91:C9
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       07B7C34F976C02710D05B828D7A5A1C33CFA7288
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130352e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:34 +0000
ROA not before:           Thu 25 Sep 2025 16:03:34 +0000
ROA not after:            Thu 24 Sep 2026 16:08:34 +0000
asID:                     262757
IP address blocks:        186.224.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b7:c3:4f:97:6c:02:71:0d:05:b8:28:d7:a5:a1:c3:3c:fa:72:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:34 2025 GMT
            Not After : Sep 24 16:08:34 2026 GMT
        Subject: CN=7A4B3C47261D1F23CFC0F2507F42B2C1752E91C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5c:19:c5:ac:81:4d:81:b4:86:c1:b0:b4:4e:
                    dc:a7:af:56:ce:fa:c0:06:ba:03:c8:59:ff:d6:8b:
                    bd:d0:40:7d:2a:75:39:bb:68:7e:33:e6:5a:d3:82:
                    a0:f6:72:ac:ae:0b:12:1a:d1:cd:7b:2b:bb:e1:58:
                    aa:f3:0b:40:a1:ee:19:eb:1e:a5:6a:90:d0:86:60:
                    2b:09:71:23:63:f8:d2:da:66:71:6e:4a:a9:f0:8e:
                    80:a3:32:c3:a3:4d:ec:7b:60:c5:8a:b6:fe:8e:48:
                    71:61:71:df:8f:13:38:a5:33:cb:18:f4:60:6c:a2:
                    9e:81:93:ca:ce:72:a4:17:69:c7:da:5a:56:6c:8c:
                    9b:9d:3c:0c:e0:2d:89:72:4e:09:02:01:b7:b4:a8:
                    84:80:ea:9a:f7:e5:29:ec:a2:5d:bf:bc:ce:ca:2e:
                    c2:2e:6d:b7:69:a6:28:22:52:5f:92:99:86:2e:cc:
                    13:d3:0c:23:22:0e:22:e1:75:24:f9:c8:0f:80:30:
                    70:d8:c0:cc:e1:48:58:a5:76:2a:d6:a9:9e:4f:a9:
                    b8:7c:8f:24:4b:99:7b:9a:a1:4a:70:b6:ac:ea:18:
                    16:68:e2:89:68:cb:f7:f7:10:32:f2:e9:25:22:bf:
                    3e:1a:1e:de:4f:bd:f9:71:23:a4:1e:f9:c0:5c:b1:
                    af:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:4B:3C:47:26:1D:1F:23:CF:C0:F2:50:7F:42:B2:C1:75:2E:91:C9
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130352e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:05:4c:3b:10:c3:6d:08:a8:f6:99:9f:a7:18:45:32:96:86:
         ed:48:ce:f8:ad:e2:1f:c3:47:0a:85:dc:2b:ae:1c:5d:7e:72:
         89:ec:4b:ec:52:85:52:07:66:f0:6a:7c:4f:0a:2f:8e:56:c3:
         ed:c1:62:7a:17:b6:95:62:29:3e:22:3a:7a:27:2e:30:71:11:
         3a:7a:c2:2d:65:9c:33:9d:87:c0:77:5b:57:e7:ef:72:6b:15:
         45:e7:89:3b:1d:9e:25:fc:72:56:11:bc:73:5a:87:a3:a8:46:
         fd:9c:1d:23:b7:78:09:a2:a9:ea:78:5d:e8:e7:91:98:67:f4:
         0e:54:c3:f6:9a:f8:79:12:de:f4:73:ad:c8:96:ef:50:1a:04:
         dc:07:ad:72:68:c6:33:b6:d2:cb:c4:9c:cf:50:a5:82:4a:f1:
         c7:f6:e9:07:11:f8:c7:dd:c7:8b:6d:c4:90:bd:df:fd:21:4a:
         be:e7:b6:2c:62:ae:e6:b9:37:e7:7a:cf:34:a4:25:46:f9:95:
         14:c3:e0:35:15:f5:92:7f:17:85:8e:43:ec:bd:bd:8a:6b:23:
         e6:f4:c8:26:9a:a0:c5:4a:01:e4:b9:24:21:fc:cd:5e:57:24:
         ba:22:a5:66:5d:27:04:90:05:0f:2e:74:5d:45:60:bb:6e:57:
         b2:a8:07:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:06 2026 by rpki-client