Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130372e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3130372e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          If6T7v8FpL5psnHvTvJBGn+vj/slNDmnwHbOrcJpvuI=
Subject key identifier:   B2:1F:16:47:A2:15:9B:05:8D:30:F0:9F:A0:72:57:A4:7D:9B:41:39
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       4913EC9E4FC35B43A3E877EA2D0583C62205EA32
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130372e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:31 +0000
ROA not before:           Thu 25 Sep 2025 16:03:31 +0000
ROA not after:            Thu 24 Sep 2026 16:08:31 +0000
asID:                     262757
IP address blocks:        186.224.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:13:ec:9e:4f:c3:5b:43:a3:e8:77:ea:2d:05:83:c6:22:05:ea:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:31 2025 GMT
            Not After : Sep 24 16:08:31 2026 GMT
        Subject: CN=B21F1647A2159B058D30F09FA07257A47D9B4139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:64:66:d1:fa:68:db:d8:b6:83:cf:c7:a2:
                    83:45:02:90:e2:51:32:ba:06:d0:03:8b:a7:25:e5:
                    91:8e:41:2c:e5:b1:ea:12:4e:3b:36:0a:c1:d6:86:
                    24:c6:14:59:1f:9e:ac:32:39:b9:16:51:4a:ec:97:
                    d8:62:4c:ae:85:47:c0:31:af:1d:2a:9e:33:62:b4:
                    08:d5:71:cf:2d:7a:a9:78:4c:ed:52:91:44:98:3b:
                    20:c2:2b:d1:6a:52:c6:50:c1:02:24:a8:fa:f1:b5:
                    1e:0e:da:45:0d:90:9d:77:62:56:99:59:7c:a2:a9:
                    85:81:bb:9c:57:ee:dc:dc:b5:b2:e1:bd:2d:1b:f0:
                    06:36:94:dc:c9:ab:a4:27:a0:07:cd:eb:4b:ed:da:
                    38:cf:d7:1c:ee:7c:8a:78:c1:72:72:53:d5:1e:c3:
                    12:5a:80:cb:b9:5f:da:ee:01:7a:22:3c:3e:6a:61:
                    ea:c2:bd:2d:66:8a:1e:9e:d7:21:7a:c2:e8:6a:ec:
                    e1:9a:09:df:f5:4d:23:73:8e:cd:80:f3:46:e5:1e:
                    f3:f8:6f:21:35:88:5f:ee:1c:8b:9c:c7:49:3f:f2:
                    d3:78:4b:d8:20:a6:99:ff:ea:49:c7:2a:2f:bb:2d:
                    42:f9:06:db:90:1d:b9:6b:10:e6:ce:91:48:0f:f6:
                    28:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1F:16:47:A2:15:9B:05:8D:30:F0:9F:A0:72:57:A4:7D:9B:41:39
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130372e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:53:ff:17:a4:c2:30:69:82:50:63:76:d4:00:a5:70:49:c0:
         b8:07:a8:42:59:1c:55:24:dc:db:23:26:d6:ee:77:5f:1f:ff:
         84:9f:9d:1a:d4:e2:b7:6a:23:3d:75:fd:75:e9:c4:23:c5:3c:
         9d:2e:a2:3e:70:f7:c7:73:d1:03:c2:62:ca:37:e6:97:02:3d:
         fa:3e:35:a1:64:46:32:14:03:0a:4d:61:f9:36:89:86:84:08:
         ab:c1:56:d7:29:ed:90:19:92:34:8e:cc:48:0f:5c:f0:ea:b9:
         64:de:bd:30:af:3e:e2:30:9a:3d:bd:e3:23:84:85:73:ca:a7:
         a7:7c:cf:30:2b:60:28:9b:60:4b:19:62:6e:ae:ef:1b:b9:93:
         88:7c:6e:3f:c2:45:d7:6a:ad:14:d1:af:f6:58:34:88:4a:4e:
         06:48:10:3f:66:1e:4e:13:28:e2:3a:25:d4:49:16:1f:4a:d6:
         b2:db:73:86:51:27:f7:2c:26:44:50:86:9e:d4:a9:bc:b2:2c:
         1e:7e:d7:c2:a2:db:a2:8a:de:f7:05:65:74:0c:bf:66:29:91:
         dd:65:94:06:7b:de:ce:a4:c1:41:f6:8f:fe:af:bd:3a:26:01:
         f7:b5:95:56:49:54:06:dc:bb:4b:12:69:a2:f1:31:9e:a8:55:
         1d:46:98:8e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUSRPsnk/DW0Oj6HfqLQWDxiIF6jIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNTA5MjUxNjAzMzFaFw0yNjA5MjQxNjA4MzFaMDMxMTAvBgNV
BAMTKEIyMUYxNjQ3QTIxNTlCMDU4RDMwRjA5RkEwNzI1N0E0N0Q5QjQxMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbnmRm0fpo29i2g8/HooNFApDi
UTK6BtADi6cl5ZGOQSzlseoSTjs2CsHWhiTGFFkfnqwyObkWUUrsl9hiTK6FR8Ax
rx0qnjNitAjVcc8teql4TO1SkUSYOyDCK9FqUsZQwQIkqPrxtR4O2kUNkJ13YlaZ
WXyiqYWBu5xX7tzctbLhvS0b8AY2lNzJq6QnoAfN60vt2jjP1xzufIp4wXJyU9Ue
wxJagMu5X9ruAXoiPD5qYerCvS1mih6e1yF6wuhq7OGaCd/1TSNzjs2A80blHvP4
byE1iF/uHIucx0k/8tN4S9ggppn/6knHKi+7LUL5BtuQHblrEObOkUgP9ijnAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUsh8WR6IVmwWNMPCfoHJXpH2bQTkwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzAzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrgazANBgkqhkiG9w0BAQsFAAOCAQEAt1P/
F6TCMGmCUGN21AClcEnAuAeoQlkcVSTc2yMm1u53Xx//hJ+dGtTit2ojPXX9denE
I8U8nS6iPnD3x3PRA8JiyjfmlwI9+j41oWRGMhQDCk1h+TaJhoQIq8FW1yntkBmS
NI7MSA9c8Oq5ZN69MK8+4jCaPb3jI4SFc8qnp3zPMCtgKJtgSxlibq7vG7mTiHxu
P8JF12qtFNGv9lg0iEpOBkgQP2YeThMo4jol1EkWH0rWsttzhlEn9ywmRFCGntSp
vLIsHn7XwqLboore9wVldAy/ZimR3WWUBnvezqTBQfaP/q+9OiYB97WVVklUBty7
SxJpovExnqhVHUaYjg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:47:50 2026 by rpki-client