Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          aKSW9g+BShb/nWLJTOhEcP3/js6TUxTrPRDVQGE/lvA=
Subject key identifier:   3E:43:02:85:3D:8F:CA:DB:02:09:7B:AB:20:3A:6E:9E:6E:F5:D4:53
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       0936B35F0CCF521E874F43E476B4DEF838B7949C
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:37 +0000
ROA not before:           Thu 27 Aug 2026 16:09:37 +0000
ROA not after:            Thu 26 Aug 2027 16:14:37 +0000
asID:                     262757
IP address blocks:        186.224.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:36:b3:5f:0c:cf:52:1e:87:4f:43:e4:76:b4:de:f8:38:b7:94:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:37 2026 GMT
            Not After : Aug 26 16:14:37 2027 GMT
        Subject: CN=3E4302853D8FCADB02097BAB203A6E9E6EF5D453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:b4:70:27:f3:78:7d:ae:4f:d7:cf:3c:26:
                    a6:4b:ba:e9:23:48:ae:dc:84:a0:86:61:26:44:ce:
                    63:29:d8:a4:72:64:bc:24:18:49:2d:6c:b4:6f:51:
                    b7:23:9f:44:0a:68:6a:15:23:f1:eb:a1:bb:3b:01:
                    50:3b:be:3f:14:3f:65:13:c7:a6:53:d6:c1:1f:0e:
                    9b:7d:2d:8b:23:10:af:fd:6e:98:e1:33:22:02:d4:
                    a1:2b:01:00:4d:70:69:d0:43:6a:6b:dc:3e:70:99:
                    25:b3:5a:92:cd:4a:9a:37:a0:14:53:34:7f:07:3d:
                    c0:80:f8:16:c2:44:f1:eb:69:81:94:f5:34:4a:fe:
                    9b:2b:80:97:4c:54:1d:3e:d7:91:2a:e9:55:f5:26:
                    78:b3:69:8b:d0:c8:c4:50:cc:17:52:f5:47:4a:19:
                    e2:b8:3f:01:01:db:5a:29:fe:34:ac:14:ca:2c:b6:
                    89:66:22:5c:e9:58:4e:2e:f1:f3:78:8b:83:b1:33:
                    d0:c0:a9:17:46:81:b3:4e:cc:9f:0d:7c:79:5d:da:
                    c3:f4:b6:b8:82:e6:e4:0e:7d:ee:8e:8d:8e:ae:9c:
                    ff:23:ab:8b:0b:dc:dd:f4:2f:dd:48:8a:9a:99:65:
                    d8:fc:d6:77:55:50:a1:10:a7:3a:93:fc:96:49:3b:
                    de:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:43:02:85:3D:8F:CA:DB:02:09:7B:AB:20:3A:6E:9E:6E:F5:D4:53
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:a1:64:43:ff:b8:e1:22:8e:90:cc:87:bb:a9:e7:42:f9:
         a0:ee:71:93:38:9c:d6:f0:6c:c1:ea:75:31:c3:40:e1:2b:6d:
         49:69:de:fe:e3:ab:7e:f6:bb:9d:8c:8d:23:4a:0a:40:f6:0b:
         57:c4:76:ef:ab:60:28:2c:28:e8:80:58:12:ed:a2:c4:71:a1:
         78:ac:8b:a9:23:d1:3f:a7:1b:12:d2:db:6f:79:4e:cf:7c:0a:
         fc:81:93:c6:c1:07:fa:95:76:cd:b2:26:88:b6:ee:f5:c2:f9:
         96:aa:86:6d:39:f5:d9:71:f9:1d:09:8b:61:ce:cb:ca:20:02:
         40:10:50:fa:26:5c:24:4d:d2:af:12:63:e7:6e:8b:0b:a2:f9:
         f2:50:cc:e6:ae:91:b4:09:af:ac:e8:5a:ce:bf:f5:2c:c1:65:
         c1:2c:c2:e5:98:e7:f8:6d:02:0a:4f:43:0e:60:e8:33:9f:75:
         7f:c9:8f:e3:c0:12:0e:da:89:83:6d:30:a2:e5:a3:5a:29:76:
         42:52:ac:d6:a2:3b:0f:ec:1b:89:e3:92:9f:cb:20:1d:06:a8:
         16:99:04:dc:40:20:84:c9:96:51:df:55:20:04:25:c8:74:4b:
         1a:95:02:69:b6:d6:4b:90:04:f0:53:b8:86:b1:ad:65:65:7c:
         df:da:dc:f2
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCTazXwzPUh6HT0PkdrTe+Di3lJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNjA4MjcxNjA5MzdaFw0yNzA4MjYxNjE0MzdaMDMxMTAvBgNV
BAMTKDNFNDMwMjg1M0Q4RkNBREIwMjA5N0JBQjIwM0E2RTlFNkVGNUQ0NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6rRwJ/N4fa5P1888JqZLuukj
SK7chKCGYSZEzmMp2KRyZLwkGEktbLRvUbcjn0QKaGoVI/Hrobs7AVA7vj8UP2UT
x6ZT1sEfDpt9LYsjEK/9bpjhMyIC1KErAQBNcGnQQ2pr3D5wmSWzWpLNSpo3oBRT
NH8HPcCA+BbCRPHraYGU9TRK/psrgJdMVB0+15Eq6VX1JnizaYvQyMRQzBdS9UdK
GeK4PwEB21op/jSsFMostolmIlzpWE4u8fN4i4OxM9DAqRdGgbNOzJ8NfHld2sP0
triC5uQOfe6OjY6unP8jq4sL3N30L91IipqZZdj81ndVUKEQpzqT/JZJO97TAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUPkMChT2PytsCCXurIDpunm711FMwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzAzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrgajANBgkqhkiG9w0BAQsFAAOCAQEAnbmh
ZEP/uOEijpDMh7up50L5oO5xkzic1vBswep1McNA4SttSWne/uOrfva7nYyNI0oK
QPYLV8R276tgKCwo6IBYEu2ixHGheKyLqSPRP6cbEtLbb3lOz3wK/IGTxsEH+pV2
zbImiLbu9cL5lqqGbTn12XH5HQmLYc7LyiACQBBQ+iZcJE3SrxJj526LC6L58lDM
5q6RtAmvrOhazr/1LMFlwSzC5Zjn+G0CCk9DDmDoM591f8mP48ASDtqJg20wouWj
Wil2QlKs1qI7D+wbieOSn8sgHQaoFpkE3EAghMmWUd9VIAQlyHRLGpUCabbWS5AE
8FO4hrGtZWV839rc8g==
-----END CERTIFICATE-----
Generated at Wed Oct 14 15:15:36 2026 by rpki-client