Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131342e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131342e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          Fry5/57YR/qXwSsuo22fj+IL1wfFYZWHn2KcoTHDhI4=
Subject key identifier:   67:73:24:1F:5A:D5:15:EE:CF:A2:9D:A8:EE:F0:6A:0C:7B:F1:E3:E8
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       11090B57D57CE0F64D96AAA8A3FB62A6019ED5B5
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131342e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:36 +0000
ROA not before:           Thu 25 Sep 2025 16:03:36 +0000
ROA not after:            Thu 24 Sep 2026 16:08:36 +0000
asID:                     262757
IP address blocks:        186.224.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:09:0b:57:d5:7c:e0:f6:4d:96:aa:a8:a3:fb:62:a6:01:9e:d5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:36 2025 GMT
            Not After : Sep 24 16:08:36 2026 GMT
        Subject: CN=6773241F5AD515EECFA29DA8EEF06A0C7BF1E3E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:37:11:17:ee:19:e7:4d:a2:1a:45:5a:01:
                    27:b8:9a:fe:f1:20:e2:3b:27:0e:52:f2:27:be:4a:
                    44:77:09:19:c0:96:91:12:70:ed:53:c9:b8:be:a1:
                    f4:95:7c:95:32:a1:3b:91:3e:ed:5c:92:f3:5e:43:
                    ae:79:a4:6a:3b:5e:a2:5f:fa:2f:cd:e1:a9:5f:7a:
                    54:11:87:99:b9:34:b4:49:ca:cd:a1:de:e0:b5:b6:
                    14:c7:39:f6:da:a0:f2:dd:8c:b7:c6:bf:94:70:93:
                    79:1a:60:cb:3d:03:8d:fb:8b:6b:09:75:59:bd:0b:
                    45:7b:cf:06:e4:df:7d:1d:3e:63:41:b3:ff:2e:f3:
                    2c:a6:1b:7a:97:93:79:ba:81:5c:1f:63:11:72:f1:
                    04:5e:6c:dc:19:f4:c0:79:12:df:d8:85:b4:d9:8d:
                    62:64:d6:1f:f3:ab:dc:18:f6:95:d2:25:f8:48:ca:
                    44:6a:a8:4c:62:3c:9f:ca:e8:11:de:9e:97:2d:c7:
                    c0:49:89:c7:62:43:2c:d7:8d:63:e0:62:52:00:39:
                    42:9b:db:e3:3a:b3:c4:22:64:db:c3:68:15:4b:95:
                    a9:79:a5:a7:2d:4e:8e:84:1d:ef:24:85:ef:00:c5:
                    c6:4f:b4:8d:32:10:90:73:9b:ab:07:2d:2c:7a:45:
                    4a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:73:24:1F:5A:D5:15:EE:CF:A2:9D:A8:EE:F0:6A:0C:7B:F1:E3:E8
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131342e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:c6:78:68:67:56:3d:77:95:1b:93:21:61:60:81:55:02:8e:
         36:7b:1a:3d:ce:72:a6:d1:c6:a6:be:37:3a:a1:35:0e:4d:82:
         34:5e:e0:ac:a8:e3:d2:e2:91:2a:a7:59:6e:a3:80:33:7e:50:
         0e:31:31:7c:a4:c8:e7:3a:b7:06:58:8e:32:c1:f2:a2:10:7c:
         03:b9:b6:1c:c8:c0:f4:5a:84:fc:c9:9e:75:48:71:01:29:26:
         45:ab:b0:d5:01:f3:77:b9:f8:f1:5c:1b:2c:d5:be:31:92:24:
         a5:04:05:ca:be:9d:83:e3:76:78:dd:67:85:b9:53:c2:e7:eb:
         37:7c:64:c8:a0:e9:ed:cc:13:50:4c:4e:fc:74:ee:5c:36:30:
         fe:97:1e:47:23:7a:c7:15:df:68:9c:36:df:de:c1:5e:70:94:
         94:00:6a:0d:c0:be:b9:d7:18:fe:2c:9c:e6:6e:84:c0:32:b5:
         bc:bd:e0:64:c1:4a:2c:e9:bf:17:67:49:d9:4e:a5:d7:6b:17:
         68:74:92:cc:bd:38:f0:29:2d:67:fb:26:26:69:9a:a3:45:6d:
         81:eb:20:00:47:42:36:71:2c:7c:89:a5:31:1a:2e:86:1f:3e:
         92:9a:3d:08:00:7f:92:4a:9a:26:a6:f4:0f:4d:b6:03:96:3c:
         24:7f:a2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:59:43 2026 by rpki-client