Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          KV9NhnR5i5DrJBfWToEDpHrFRx7plsXV9stX1wXgjn8=
Subject key identifier:   FD:A6:C5:A9:3A:DA:0D:D3:A3:1B:71:E5:95:AB:15:AE:7D:FD:09:50
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       0A779F9FB01572071BD9D94C91AF380709F5F904
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:30 +0000
ROA not before:           Thu 25 Sep 2025 16:03:30 +0000
ROA not after:            Thu 24 Sep 2026 16:08:30 +0000
asID:                     262757
IP address blocks:        186.224.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:77:9f:9f:b0:15:72:07:1b:d9:d9:4c:91:af:38:07:09:f5:f9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:30 2025 GMT
            Not After : Sep 24 16:08:30 2026 GMT
        Subject: CN=FDA6C5A93ADA0DD3A31B71E595AB15AE7DFD0950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:db:03:58:0a:81:38:5f:48:71:9d:c7:a4:23:
                    ad:00:a5:cf:64:50:28:c1:61:cc:d2:48:09:7a:52:
                    b8:b3:04:d8:45:c9:f1:4b:71:36:14:2f:3c:98:5d:
                    c9:a8:3c:83:bd:c2:3d:96:e5:c5:18:aa:df:91:12:
                    54:f7:c9:db:20:ac:d8:c3:85:91:db:51:d9:5e:d8:
                    a4:9c:9a:b4:2e:d8:39:65:49:dc:99:bf:7d:76:f3:
                    c0:24:1a:41:5f:ac:cc:98:1f:11:4c:ba:a8:97:c0:
                    b0:77:21:3a:f5:a3:8c:e9:4f:b5:db:2f:ad:ac:09:
                    e9:dd:00:e8:0a:2b:ba:7d:6c:ee:7c:0c:6f:df:5d:
                    24:6e:5b:78:18:67:f7:57:20:29:87:f4:24:70:5a:
                    87:21:12:6f:06:fa:08:37:e7:b9:1d:39:1e:c8:87:
                    93:f4:3d:f6:2a:be:d7:c2:93:e3:24:59:24:d9:e4:
                    6a:3c:f7:aa:f7:c7:91:59:74:e6:fe:8a:dd:c2:07:
                    7f:58:6e:34:d9:cc:5f:7c:98:02:c4:70:c4:0c:3f:
                    2e:2d:70:1a:f7:70:08:c6:e3:25:a4:ff:1e:c3:5e:
                    dd:fc:4e:b6:16:ba:7e:d2:b1:cf:bc:37:57:c4:a5:
                    d1:15:7b:9a:e3:a9:18:a1:1e:94:b2:78:e7:d4:1a:
                    a1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:A6:C5:A9:3A:DA:0D:D3:A3:1B:71:E5:95:AB:15:AE:7D:FD:09:50
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3130382e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:eb:8e:a0:e5:2e:e0:66:a8:1b:ef:ec:17:6e:85:ba:27:
         43:3d:64:29:88:08:48:a3:d5:35:94:05:b5:f4:57:99:1d:8c:
         1e:6b:85:27:e6:10:47:25:52:f4:3e:70:66:fc:8e:0e:75:da:
         66:e2:50:02:b2:d6:c1:67:25:42:51:9e:d3:63:69:57:d9:3b:
         1e:28:d0:96:f8:34:5b:7c:eb:a3:e9:98:0f:21:c4:db:1f:1e:
         5c:74:a0:aa:02:80:d3:38:0d:d7:77:3f:67:5d:30:e3:3a:c7:
         f3:cb:f0:85:9a:93:71:12:21:1c:c0:2e:03:a6:a7:33:bc:ad:
         31:3b:42:0f:f7:e8:ed:a4:54:36:b5:ec:e6:12:bc:2f:7a:4f:
         f1:76:e7:93:00:9c:57:80:bb:5b:b8:c1:20:ff:bb:4b:a1:62:
         34:37:d1:5d:d8:d8:ea:4b:07:a9:c2:f8:77:06:12:16:ef:2b:
         c1:47:1c:3c:12:64:e6:e1:3a:46:6f:92:5a:2d:16:30:23:76:
         3b:1d:39:15:57:ec:5c:0a:d0:24:52:c6:d5:68:46:d4:47:3f:
         58:7a:6a:5b:a5:55:73:8b:be:5d:29:1e:47:ad:89:03:67:22:
         02:a7:cc:e9:32:d1:c2:9e:8b:4d:5c:24:47:34:b3:95:d0:48:
         1d:7a:20:d0
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUCnefn7AVcgcb2dlMka84Bwn1+QQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNTA5MjUxNjAzMzBaFw0yNjA5MjQxNjA4MzBaMDMxMTAvBgNV
BAMTKEZEQTZDNUE5M0FEQTBERDNBMzFCNzFFNTk1QUIxNUFFN0RGRDA5NTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu2wNYCoE4X0hxncekI60Apc9k
UCjBYczSSAl6UrizBNhFyfFLcTYULzyYXcmoPIO9wj2W5cUYqt+RElT3ydsgrNjD
hZHbUdle2KScmrQu2DllSdyZv31288AkGkFfrMyYHxFMuqiXwLB3ITr1o4zpT7Xb
L62sCendAOgKK7p9bO58DG/fXSRuW3gYZ/dXICmH9CRwWochEm8G+gg357kdOR7I
h5P0PfYqvtfCk+MkWSTZ5Go896r3x5FZdOb+it3CB39YbjTZzF98mALEcMQMPy4t
cBr3cAjG4yWk/x7DXt38TrYWun7Ssc+8N1fEpdEVe5rjqRihHpSyeOfUGqHDAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/abFqTraDdOjG3HllasVrn39CVAwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzAzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrgbDANBgkqhkiG9w0BAQsFAAOCAQEALnPr
jqDlLuBmqBvv7BduhbonQz1kKYgISKPVNZQFtfRXmR2MHmuFJ+YQRyVS9D5wZvyO
DnXaZuJQArLWwWclQlGe02NpV9k7HijQlvg0W3zro+mYDyHE2x8eXHSgqgKA0zgN
13c/Z10w4zrH88vwhZqTcRIhHMAuA6anM7ytMTtCD/fo7aRUNrXs5hK8L3pP8Xbn
kwCcV4C7W7jBIP+7S6FiNDfRXdjY6ksHqcL4dwYSFu8rwUccPBJk5uE6Rm+SWi0W
MCN2Ox05FVfsXArQJFLG1WhG1Ec/WHpqW6VVc4u+XSkeR62JA2ciAqfM6TLRwp6L
TVwkRzSzldBIHXog0A==
-----END CERTIFICATE-----
Generated at Wed May 13 15:36:47 2026 by rpki-client