Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          AsCsJVUoCki8+VzPp+w1DzIMlDHA4JlJEUjoyuGfixs=
Subject key identifier:   01:8F:D6:FE:6A:D5:78:66:DA:AD:33:AB:85:E9:67:6D:39:E5:A9:EA
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       403D3CCD1398746548908FB5C3C7F93EA2B7E826
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:42 +0000
ROA not before:           Thu 27 Aug 2026 16:09:42 +0000
ROA not after:            Thu 26 Aug 2027 16:14:42 +0000
asID:                     262757
IP address blocks:        186.224.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:3d:3c:cd:13:98:74:65:48:90:8f:b5:c3:c7:f9:3e:a2:b7:e8:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:42 2026 GMT
            Not After : Aug 26 16:14:42 2027 GMT
        Subject: CN=018FD6FE6AD57866DAAD33AB85E9676D39E5A9EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:9d:79:be:f7:77:88:4f:52:88:1f:d5:0a:
                    ba:88:6f:87:f2:b4:30:5c:58:05:e4:67:c2:4f:3c:
                    2f:ca:ed:35:15:69:fc:e6:70:6e:79:04:31:58:52:
                    6d:05:cf:5a:63:f4:1b:ac:be:69:5d:07:ad:7a:24:
                    41:03:b8:f6:63:37:cd:37:a5:27:03:66:59:91:e6:
                    bc:4c:1e:64:e0:f8:e4:3b:cc:07:99:49:41:a2:90:
                    0e:45:1f:7c:3d:31:e2:e6:c8:2a:32:87:6f:34:5f:
                    c4:73:36:88:bd:19:69:41:29:0e:00:30:d1:61:ad:
                    ac:a4:c9:18:b4:db:6e:f1:34:be:81:bc:a2:31:6c:
                    87:db:7e:8c:6d:79:1a:22:ab:6a:67:7b:83:d7:21:
                    63:6b:81:0d:f5:a8:03:f1:d4:e9:5a:2f:b3:64:56:
                    92:26:ca:62:39:48:2c:0f:31:5c:ac:74:37:3a:c1:
                    83:f0:de:19:9e:aa:a2:4c:8d:0f:ce:58:8c:76:3b:
                    3f:d0:aa:44:51:7e:b3:09:9a:ba:84:61:11:ea:1f:
                    75:56:22:b6:6b:f7:d5:72:59:c2:27:36:2a:5a:de:
                    bb:b8:b9:ca:a4:77:cf:74:35:24:3d:00:4c:58:dd:
                    9a:24:62:5f:cc:b1:9a:83:ec:11:1a:27:72:4f:86:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8F:D6:FE:6A:D5:78:66:DA:AD:33:AB:85:E9:67:6D:39:E5:A9:EA
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131332e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:9f:e2:4d:77:94:e2:3a:72:e3:c4:2b:49:57:44:07:64:35:
         c1:8e:06:78:52:fe:d5:ba:10:30:19:a4:f2:18:3d:b2:77:e3:
         bf:71:08:6f:fe:83:92:d1:e9:c0:bc:74:f5:7c:71:b7:a0:5e:
         b7:ed:e6:34:84:c7:8f:12:4b:43:f7:30:de:49:bb:f5:67:21:
         2e:27:00:d0:c4:7d:3d:da:c1:05:47:1a:97:1d:71:1b:e9:67:
         b8:b5:8d:a7:e6:74:f5:42:9f:b7:38:ec:79:36:7b:cb:0a:63:
         07:30:3c:5a:ba:d1:5b:ee:12:e1:c2:ea:5b:5d:e3:c9:c5:af:
         36:55:3e:0d:7d:91:65:5d:26:02:00:bf:da:4c:44:26:74:77:
         ab:30:5f:ec:e4:de:e2:c9:85:bc:74:ce:2e:26:5a:f0:9c:e8:
         d0:e0:87:b0:9e:49:5f:20:f6:74:4d:b6:28:14:ca:8b:47:88:
         24:0a:c0:6d:b0:16:e7:57:52:ed:89:7e:20:83:bf:a3:f4:c3:
         ac:f7:b8:87:dc:b8:de:ff:bb:2f:80:34:c7:84:61:bd:29:96:
         25:5e:1f:d8:e9:9b:68:c4:ca:9e:3c:27:14:85:29:14:db:9d:
         35:5c:71:eb:03:43:04:73:55:7b:11:5f:ed:93:43:f1:76:25:
         17:61:3b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:44:07 2026 by rpki-client