Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          0FOZQ4p3EYPnhNqYgRWH12bqkKHGsXEb/7LQlrPnTkQ=
Subject key identifier:   D3:F5:90:59:A4:6C:5C:D9:BE:FE:2B:CE:45:08:B2:AF:C8:67:D3:9E
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       1CCD264D347A4765F898F27781DF80618137CCD9
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:36 +0000
ROA not before:           Thu 25 Sep 2025 16:03:36 +0000
ROA not after:            Thu 24 Sep 2026 16:08:36 +0000
asID:                     262757
IP address blocks:        186.224.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:cd:26:4d:34:7a:47:65:f8:98:f2:77:81:df:80:61:81:37:cc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:36 2025 GMT
            Not After : Sep 24 16:08:36 2026 GMT
        Subject: CN=D3F59059A46C5CD9BEFE2BCE4508B2AFC867D39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:6a:8d:00:d4:be:b7:f7:35:a6:89:d1:ff:
                    bc:85:65:01:4d:17:02:cb:7c:6d:48:c5:7c:3d:23:
                    4b:05:4d:b6:87:a0:e0:8f:7e:2b:22:26:90:84:c6:
                    e7:5b:94:8d:a9:7b:79:63:cd:14:03:03:d1:da:0c:
                    bf:40:4a:95:a7:1d:c0:e6:d3:f6:b3:84:1a:ca:d5:
                    d0:d0:33:45:5f:1f:78:4c:69:78:25:39:f0:7e:29:
                    7d:7e:e7:cd:c4:14:74:05:56:68:8c:bd:42:b8:6f:
                    0c:a6:7b:36:12:9b:01:42:85:13:9d:0a:8a:36:ca:
                    6e:e8:38:cd:b3:18:e5:4a:e6:14:73:e6:7b:59:22:
                    da:89:cf:39:2b:7f:12:ea:e8:86:50:91:f2:de:66:
                    d2:32:e0:87:ff:95:b0:3b:d0:3e:a0:95:f5:f0:92:
                    83:29:5a:d5:6f:12:96:0c:03:27:9d:45:15:dc:6d:
                    41:3d:05:f9:60:db:73:80:bc:6b:e4:f6:13:89:13:
                    26:1c:ea:8a:59:39:5f:b1:e7:68:f8:52:a1:f4:55:
                    c2:d4:6e:da:52:42:c9:84:b0:77:aa:66:b7:8e:40:
                    40:e2:07:84:c3:f2:f1:aa:ab:d7:0c:37:4c:27:5f:
                    a4:cd:a8:c1:22:78:8a:ff:4a:db:38:a9:1a:c7:d9:
                    d4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F5:90:59:A4:6C:5C:D9:BE:FE:2B:CE:45:08:B2:AF:C8:67:D3:9E
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:87:15:66:d2:a4:aa:fc:ce:26:cd:65:e5:1e:fe:a5:39:82:
         dc:bd:7c:6d:e9:f0:7b:af:81:b9:5e:ab:10:9b:3e:76:1d:fe:
         30:0a:95:20:0e:9d:50:6d:10:0a:d6:bb:97:30:9a:1b:40:22:
         a4:53:b1:a4:fa:36:f8:2b:e4:d4:fe:b5:30:b2:9e:df:2d:14:
         45:86:3b:52:8c:8e:95:29:e0:48:e0:df:3f:05:38:3c:39:25:
         22:03:24:8a:c7:9e:3c:85:31:af:07:4d:df:18:7d:1f:7a:96:
         eb:f4:e3:9c:b5:71:6b:23:84:1b:71:85:35:bf:f2:34:e2:71:
         5c:7c:69:24:c8:af:72:62:3f:e3:6e:ca:a6:c0:46:0e:bd:f9:
         c6:5f:29:85:9e:c0:1e:73:2e:a4:54:72:ad:53:35:fd:78:11:
         86:18:55:f6:c5:76:f1:b7:66:ec:3c:a8:5f:d6:9b:24:d4:92:
         18:b1:39:fa:62:a3:37:b3:9f:32:18:1b:c0:64:c4:0e:c9:92:
         9b:eb:01:f7:74:37:3a:bd:45:29:41:b3:64:91:8a:d1:af:e1:
         5e:26:94:e6:bb:b3:59:b8:ad:1e:31:63:f0:4f:1b:5f:9e:58:
         3d:71:e2:d1:16:5f:7a:af:e4:76:6d:fc:1a:43:0b:fd:be:a2:
         70:40:b1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:39:14 2026 by rpki-client