Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          XqG7VBYBX3tZNnt58hmDupocbwaUgi/4PueFR6q2OP4=
Subject key identifier:   C1:EF:02:DC:7D:69:C3:FB:3B:B8:C3:BE:AB:E4:AE:BE:D5:ED:A1:DB
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       7BCD6601746913595F981E96B900A307FA289495
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:29 +0000
ROA not before:           Thu 25 Sep 2025 16:03:29 +0000
ROA not after:            Thu 24 Sep 2026 16:08:29 +0000
asID:                     262757
IP address blocks:        186.224.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cd:66:01:74:69:13:59:5f:98:1e:96:b9:00:a3:07:fa:28:94:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:29 2025 GMT
            Not After : Sep 24 16:08:29 2026 GMT
        Subject: CN=C1EF02DC7D69C3FB3BB8C3BEABE4AEBED5EDA1DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:40:79:ff:5a:e9:6a:f2:30:74:75:0d:53:db:
                    d6:3d:ad:55:1f:03:ae:bb:02:10:76:aa:63:04:37:
                    f7:49:9a:d5:85:83:31:87:8f:6d:f7:14:da:ba:80:
                    21:ec:0b:42:f1:4a:15:69:04:1f:1d:12:59:5a:fa:
                    41:22:11:f1:a1:f1:fd:a1:5a:63:a6:25:2f:db:13:
                    b6:46:a9:85:e8:da:0a:66:89:5b:ce:c4:a3:23:bf:
                    c0:aa:50:74:5d:13:63:a4:f5:a8:53:f1:ea:87:3a:
                    a1:d5:94:f0:ae:c7:f5:72:2a:0e:c1:80:dd:d6:5c:
                    8d:59:00:6e:e7:bb:49:82:91:75:53:e6:42:5e:e1:
                    88:b7:60:b4:fe:f4:6f:54:c4:4f:d1:93:46:15:a6:
                    fe:bb:b1:d1:c0:91:eb:77:74:27:0b:45:b4:5c:6b:
                    c9:1a:6b:71:99:79:a9:53:d5:e9:af:67:a1:9a:30:
                    9a:99:1a:28:b5:14:9f:5c:41:9a:10:83:28:7a:e0:
                    4d:0a:d8:c6:72:cd:b3:76:e7:a1:e5:9c:57:22:8a:
                    4c:e7:9c:06:c4:77:2e:5a:88:30:6d:f3:bd:3c:a8:
                    16:05:20:06:67:c4:bb:ee:b3:d2:07:cb:be:6d:5d:
                    80:e0:64:b1:b9:01:54:d4:32:97:68:ba:dd:30:88:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:EF:02:DC:7D:69:C3:FB:3B:B8:C3:BE:AB:E4:AE:BE:D5:ED:A1:DB
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130362e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e1:37:e7:26:d4:29:d8:a7:5d:b8:72:38:0c:b2:9b:98:6b:
         7e:d3:2f:e2:9d:59:a7:e9:7e:cb:41:7d:df:04:25:a4:5e:5d:
         31:c3:6e:0e:eb:2c:f5:11:04:7e:e3:44:8a:b9:33:f2:bd:02:
         70:fc:e6:93:54:06:ec:b3:d0:b6:5f:e7:44:bb:57:77:b9:af:
         9c:aa:ac:47:59:0d:a6:39:94:bb:97:ba:35:1b:36:f1:bc:c7:
         f2:3b:55:7c:86:b6:ca:80:a1:7e:d0:b0:b2:c5:68:7c:7d:85:
         e3:cc:67:25:b4:a1:4f:a6:8f:5c:7c:86:7b:a6:91:3b:8e:f3:
         dc:f2:65:72:94:ba:12:a2:40:33:68:da:db:0e:0c:a4:01:4c:
         65:25:c9:a4:a1:cc:a9:19:4e:aa:dd:a6:71:47:03:fe:71:bc:
         f8:12:9c:3e:c7:e7:fc:8b:f9:80:a3:42:a2:c2:6f:c2:1d:31:
         49:14:44:0a:5a:d8:46:fd:b9:c6:a0:d7:1f:47:e3:7c:e3:06:
         53:fa:6e:45:e6:b0:5c:8e:88:3e:7b:d7:4f:8c:f1:da:6e:44:
         2d:ce:69:6f:f3:5b:fb:44:20:4c:b7:b9:54:b1:08:44:8f:cb:
         39:a3:cd:4f:3b:ad:36:77:d7:27:3f:df:67:81:b0:a2:6b:19:
         3b:eb:b6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:11:49 2026 by rpki-client