Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          9CJ7Y40LafbBTJ/5fbL25u9Q/MiDh7al5CcsMKKpXsI=
Subject key identifier:   9D:A5:61:FB:35:6F:0A:D3:D2:25:F5:77:B2:20:EF:48:25:30:B4:99
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       1E4ADA7BDA0A15888C7C89DA831EA203F5BE6721
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:28 +0000
ROA not before:           Thu 25 Sep 2025 16:03:28 +0000
ROA not after:            Thu 24 Sep 2026 16:08:28 +0000
asID:                     262757
IP address blocks:        186.224.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:4a:da:7b:da:0a:15:88:8c:7c:89:da:83:1e:a2:03:f5:be:67:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:28 2025 GMT
            Not After : Sep 24 16:08:28 2026 GMT
        Subject: CN=9DA561FB356F0AD3D225F577B220EF482530B499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:01:37:94:22:d8:40:0b:7c:e7:26:a2:cd:
                    9d:a3:74:b2:7a:4c:1d:12:f7:56:7b:a5:f6:0d:41:
                    01:42:3c:e7:5d:48:bc:33:0b:e4:1e:83:06:90:19:
                    8c:3b:cd:20:96:28:ab:1a:85:1c:fc:22:85:08:fd:
                    37:a4:12:67:6f:ec:50:73:b3:ec:0b:6c:a7:ff:51:
                    9b:a8:f8:ea:e8:aa:c0:f1:dd:5c:61:3c:d6:bd:df:
                    98:54:9e:1c:45:7b:9a:c2:5d:d2:be:13:c5:79:0d:
                    df:1c:2a:99:ce:2a:6e:2d:46:0d:c1:aa:51:86:ab:
                    f4:2f:34:88:2f:cd:86:75:f0:40:83:f8:b6:7a:70:
                    f1:92:b6:48:da:ef:08:f9:8b:7e:92:43:64:7f:57:
                    2f:d7:ba:cd:34:3f:2b:a6:7a:57:5a:ee:2b:77:ed:
                    f5:50:67:61:47:9f:44:5e:13:4f:09:4d:fa:22:a0:
                    63:57:7d:54:29:b3:ac:7e:91:87:4a:d6:f7:c0:ca:
                    5d:c2:a9:67:2c:e3:73:e4:06:7b:1b:e0:b1:d4:d8:
                    e7:3d:a5:d9:ff:c7:b6:b8:cd:26:68:78:20:92:84:
                    45:f1:22:e6:93:72:af:2d:22:74:15:3a:1d:14:49:
                    e1:92:d5:78:36:4d:26:ed:3a:a0:26:7b:8a:5d:b1:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A5:61:FB:35:6F:0A:D3:D2:25:F5:77:B2:20:EF:48:25:30:B4:99
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131302e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:09:03:98:b3:48:4e:fb:1a:f7:b4:e1:0b:a9:55:33:d5:2f:
         d2:3b:4d:01:d3:55:3a:fd:32:45:c3:b3:26:72:ea:f3:da:ac:
         20:49:2f:29:64:30:41:a0:43:fe:54:09:da:5a:ac:1b:a3:9b:
         b7:24:67:b5:26:98:9a:f1:c4:44:80:9b:6a:51:18:78:81:8c:
         07:82:1d:b3:d3:b8:df:d3:6d:d5:30:b5:c4:c4:6a:e1:55:64:
         d1:0d:a5:ef:bd:d3:e7:9b:37:12:98:9c:ea:3c:20:72:d8:1b:
         06:5b:fc:de:3d:f4:af:1e:7f:8f:a4:8c:81:a8:70:5c:3e:ad:
         56:8d:bf:c4:11:be:ab:db:8e:f7:f9:f8:7f:8f:f3:40:12:b0:
         d8:be:52:39:71:b0:66:41:31:3d:e3:fe:bb:4f:73:8a:59:5b:
         27:7f:fe:d2:07:97:d2:2f:f7:15:1b:1e:52:89:f6:df:17:c5:
         e5:64:ab:ec:53:e4:1c:6f:c0:42:6c:ed:3b:44:42:e0:63:e9:
         63:f9:2e:56:73:7a:e4:e5:a6:af:53:b2:8a:58:f2:34:d9:4d:
         40:b6:ae:13:6f:cf:3f:5b:83:f6:4e:93:69:7b:22:0e:32:36:
         72:40:2c:0c:50:73:3d:23:84:c2:9b:ce:59:00:42:30:d5:d2:
         af:00:ee:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:05 2026 by rpki-client