Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          2Tuz4YclTuVXs8NaJiF8tayU96lXORKya0e8KFiY2XU=
Subject key identifier:   8B:46:15:29:BE:EA:44:3D:11:BD:22:CC:2D:3B:FF:50:B6:1B:C5:87
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       269FE0CB48EDA35BC4F01663BC4BE8CF99EB52E1
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:37 +0000
ROA not before:           Thu 27 Aug 2026 16:09:37 +0000
ROA not after:            Thu 26 Aug 2027 16:14:37 +0000
asID:                     262757
IP address blocks:        186.224.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9f:e0:cb:48:ed:a3:5b:c4:f0:16:63:bc:4b:e8:cf:99:eb:52:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:37 2026 GMT
            Not After : Aug 26 16:14:37 2027 GMT
        Subject: CN=8B461529BEEA443D11BD22CC2D3BFF50B61BC587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:e9:4d:17:c4:ef:91:8c:d4:41:90:19:08:
                    65:a5:c9:61:3c:4e:62:15:31:67:1c:78:11:bc:69:
                    26:eb:7e:66:ed:1a:90:89:12:87:62:78:40:97:56:
                    14:61:f0:8c:c6:89:15:a5:97:cb:0a:9b:8f:75:88:
                    6d:63:6d:64:e2:65:1b:55:ee:b2:21:38:92:92:75:
                    06:d4:da:57:36:d5:a9:8d:8d:ce:6b:e2:61:d2:7f:
                    34:f8:99:93:79:fe:1a:96:23:37:fb:fd:12:a1:ba:
                    d7:06:11:2c:46:b3:08:65:65:8b:63:13:21:2e:99:
                    d4:4c:84:ff:bb:81:e7:33:b7:05:c0:8f:68:7e:10:
                    39:f9:fc:8f:10:f3:af:72:ba:ca:8d:10:31:09:e8:
                    f7:b2:e1:e0:ab:09:e9:9b:1a:ce:88:c8:fd:d8:f4:
                    48:f5:58:a5:93:8c:01:41:d5:39:b0:45:df:33:65:
                    5e:34:46:52:9a:cc:60:70:6c:82:ae:7d:e6:c6:8d:
                    aa:fd:aa:d2:71:51:bb:c7:67:cf:12:65:bf:a1:b6:
                    02:b8:35:f6:6e:19:a3:d7:89:0b:6b:63:ac:d4:5e:
                    7d:eb:ee:a4:bf:cd:76:f6:db:e8:65:fc:94:58:4b:
                    f4:1e:46:7a:be:a9:4b:d7:d8:68:4a:32:f1:93:42:
                    c4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:46:15:29:BE:EA:44:3D:11:BD:22:CC:2D:3B:FF:50:B6:1B:C5:87
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131312e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:19:9e:85:ad:56:46:1f:41:a5:04:73:28:39:35:ca:74:44:
         da:2a:a7:cb:e6:c0:cc:ed:5b:cf:26:27:e1:f9:b0:30:1b:12:
         33:61:46:51:48:c6:d6:90:3c:c2:17:4a:3b:d3:68:84:05:03:
         c3:ca:0c:54:ef:09:04:f1:78:1e:8f:e9:f9:ff:be:61:b6:0e:
         78:f2:80:11:eb:50:d6:f4:58:e9:cb:5f:1f:e8:20:52:1c:b6:
         1f:15:43:e5:fd:be:3a:f7:c8:03:96:8a:62:23:0b:75:fc:1f:
         77:a9:9d:7b:d6:2f:64:49:10:7e:64:fb:2e:0c:38:35:93:cd:
         24:32:2f:dd:93:40:d2:21:f5:e6:ad:3b:6a:91:c0:40:d9:df:
         22:4a:bf:60:92:28:32:07:f1:62:a7:a8:42:90:79:84:c9:49:
         08:a4:1c:a6:90:da:67:c3:07:49:9b:69:98:7a:cc:6c:d1:27:
         2c:f5:42:c1:53:15:a2:95:8e:9c:b3:0c:c0:39:1e:29:61:b1:
         6d:3c:bb:a8:e9:e8:bd:be:db:ed:4d:4b:82:c6:86:99:bc:c7:
         96:2c:16:37:c0:da:69:32:e3:5a:16:d8:e4:e5:01:f4:37:be:
         59:84:06:8a:15:0e:c1:f7:b4:d8:f9:29:20:1e:53:cd:aa:90:
         93:b2:49:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:25:03 2026 by rpki-client