Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa
File:                     3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa (raw, json)
Hash identifier:          O8p6NIQkL4nZ5MjJ4129HFU3Ye61PzaWDmJVpDqt43w=
Subject key identifier:   34:3F:9C:8A:89:C7:65:12:81:A1:BD:DE:9D:4C:9A:55:E8:8B:C6:E8
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       6A57C33BE80943F140D8D73808505BD6F7B51BC4
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:29 +0000
ROA not before:           Thu 25 Sep 2025 16:03:29 +0000
ROA not after:            Thu 24 Sep 2026 16:08:29 +0000
asID:                     262757
IP address blocks:        186.224.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:57:c3:3b:e8:09:43:f1:40:d8:d7:38:08:50:5b:d6:f7:b5:1b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:29 2025 GMT
            Not After : Sep 24 16:08:29 2026 GMT
        Subject: CN=343F9C8A89C7651281A1BDDE9D4C9A55E88BC6E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:11:b4:c0:5b:e0:93:0a:4e:15:97:99:60:6e:
                    7c:e6:29:ff:01:75:5a:aa:43:9c:14:68:97:28:d2:
                    ac:c2:3b:4d:05:a3:42:14:39:de:68:b1:65:2b:f2:
                    47:1b:b9:ef:b1:95:c1:fc:70:ec:b4:7b:bb:ab:bd:
                    29:4e:72:a2:19:44:2b:80:b4:6d:db:30:81:7a:d5:
                    3f:54:b8:91:6e:6f:01:ca:fa:80:84:58:f0:db:49:
                    d8:6a:d2:e7:aa:6b:2d:90:19:e5:2c:c7:04:4d:81:
                    6a:38:3f:59:0a:29:34:8a:6a:38:61:f8:5d:a8:bc:
                    c2:28:ce:72:39:56:56:2b:30:44:d3:c7:44:c5:02:
                    07:f3:f9:84:75:f9:ea:44:14:46:94:ff:1c:19:59:
                    c7:1f:be:22:79:60:a7:cd:2e:ec:e7:65:8c:25:d4:
                    69:dd:70:7f:4d:99:99:d4:00:8c:59:ff:00:9b:46:
                    19:43:20:d2:9f:4c:55:6f:73:80:48:42:56:91:a0:
                    0f:e9:a6:a2:d0:3e:94:37:a3:a5:a8:fa:5b:b2:fa:
                    2a:eb:0a:d8:03:f7:51:07:dd:e0:61:15:03:c0:88:
                    38:32:66:9e:8b:47:5d:75:59:be:d1:20:10:8a:b4:
                    a1:30:3e:d9:f0:5d:12:0f:ca:be:39:26:b1:d1:18:
                    66:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:3F:9C:8A:89:C7:65:12:81:A1:BD:DE:9D:4C:9A:55:E8:8B:C6:E8
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32302d3230203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:7d:e6:12:64:08:17:2f:71:32:88:6f:fd:ba:26:5f:32:
         13:50:75:5c:bd:ac:b1:3b:cc:3f:76:ee:d5:6b:09:f5:9c:95:
         15:a4:39:16:90:2b:5f:94:12:c1:79:b5:d8:3d:fd:0a:9f:34:
         63:34:37:8c:7b:d8:01:64:10:1a:97:81:10:0c:28:70:20:e4:
         22:9a:d4:34:9a:5e:de:03:f6:d0:7d:23:48:c9:0f:24:ec:b2:
         a2:8e:2b:03:f0:5f:6f:5c:32:ba:57:94:58:c8:dc:63:16:1d:
         91:3e:39:32:18:9a:a0:70:4b:21:91:6b:38:21:cb:f6:d0:2c:
         80:5f:cc:fd:2c:72:2c:0f:43:89:63:28:57:21:52:66:46:60:
         85:35:90:1f:ba:e6:88:a4:df:5e:6c:75:f7:bf:18:01:b8:8c:
         e3:ec:34:ef:fa:11:df:84:a3:21:cb:a5:97:68:96:03:d5:11:
         f2:79:7f:14:c0:6f:69:3b:26:aa:84:dc:89:eb:3a:ea:60:01:
         2a:18:e7:3b:cf:51:c7:64:41:d4:3e:ef:f5:0e:73:b5:21:2c:
         c5:4e:3d:26:72:d8:59:51:35:4c:95:ef:ce:d6:15:5b:9f:56:
         1f:07:72:42:8f:0b:f7:99:ec:03:02:a9:d9:c9:5c:14:3f:72:
         05:b4:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:24:47 2026 by rpki-client