Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3131322e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          neEQwasaee+sJOYXg72SOGlF0QESWTqWwycGbq4eU/k=
Subject key identifier:   87:D2:8D:7A:91:DE:FB:47:7B:6B:8A:12:19:2F:3F:56:7D:78:1F:5F
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       72D675C9B088F17B967344D92049C3B7EB20DDEB
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:28 +0000
ROA not before:           Thu 25 Sep 2025 16:03:28 +0000
ROA not after:            Thu 24 Sep 2026 16:08:28 +0000
asID:                     262757
IP address blocks:        186.224.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d6:75:c9:b0:88:f1:7b:96:73:44:d9:20:49:c3:b7:eb:20:dd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:28 2025 GMT
            Not After : Sep 24 16:08:28 2026 GMT
        Subject: CN=87D28D7A91DEFB477B6B8A12192F3F567D781F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:96:64:29:53:28:e3:23:0d:f9:7b:ce:5e:eb:
                    52:61:15:e1:71:1b:da:fc:69:26:98:6e:05:55:54:
                    91:df:14:6f:4c:d2:f3:37:a0:90:88:6a:e2:d4:5a:
                    cc:88:34:2d:23:2d:16:52:b9:da:49:83:e7:52:86:
                    f4:2b:b0:c6:af:42:7b:cf:24:83:fa:6d:4d:37:9f:
                    8e:54:e5:f9:af:ff:54:cb:83:2e:30:78:22:7d:a8:
                    13:89:6d:9f:32:c7:18:c1:0d:52:38:7b:66:7a:27:
                    5c:15:d0:5d:34:06:66:2a:80:d4:bc:50:5d:0d:b6:
                    70:50:ca:39:7c:c1:16:32:d8:7d:52:a3:40:47:ae:
                    c1:8b:be:af:47:74:fe:54:7f:ba:50:6a:14:55:16:
                    81:f3:5c:c1:0f:15:a1:cc:1d:82:b0:5c:46:eb:df:
                    cc:47:49:bb:82:bf:71:d9:b1:4b:36:86:9b:dd:ca:
                    15:8f:6b:81:03:ed:d2:6b:78:22:2b:0c:d8:6b:7b:
                    dc:43:f6:ac:5a:9a:c9:65:8e:57:10:44:c1:fd:05:
                    56:30:0a:62:61:28:2f:bd:08:82:24:73:ed:4c:94:
                    f7:d3:7c:62:4b:a8:5f:76:ea:24:4f:fb:30:ac:67:
                    b8:b5:db:3a:47:3d:32:3e:5d:6f:d5:5b:9b:13:58:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D2:8D:7A:91:DE:FB:47:7B:6B:8A:12:19:2F:3F:56:7D:78:1F:5F
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131322e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:09:54:f5:24:1a:32:34:fb:80:a4:1e:8b:92:8e:55:6b:81:
         d9:3d:27:fa:d6:6a:43:12:4a:20:3d:fb:39:64:ee:65:82:26:
         49:27:a8:1a:04:5b:e2:22:fe:b6:80:f2:44:af:f9:85:93:03:
         49:39:47:1b:10:b1:7a:a9:47:16:df:e5:e7:73:ab:c9:b9:09:
         0a:31:d5:fb:8a:96:8c:ee:5e:36:cd:03:27:c9:9b:3e:3a:1d:
         4b:46:cd:8e:2a:d9:b1:3a:dd:57:04:b3:31:03:9c:fd:0a:15:
         8f:0c:d1:73:85:27:87:e1:82:55:51:27:0d:1e:a4:d9:9a:89:
         47:03:13:94:9d:ba:e9:12:e5:30:aa:09:ec:b3:40:43:77:46:
         d9:dc:f1:2c:6c:28:d5:98:e1:1a:8e:61:a2:df:a2:13:56:5f:
         aa:2a:00:fa:57:09:87:72:52:23:39:94:78:c0:c3:e7:ca:1f:
         78:52:83:1f:95:cf:64:36:4c:5f:95:bf:3e:46:59:43:35:4e:
         0c:12:55:9a:aa:37:45:58:03:c9:e5:9a:bb:7b:33:90:00:33:
         82:a3:e2:c6:7d:a0:35:44:0e:c0:a9:10:fc:3f:6a:e3:2e:d0:
         25:f4:8b:e6:51:14:3a:99:96:26:2b:8d:f8:49:b4:45:71:80:
         38:44:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:20 2026 by rpki-client