Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          xsJwf1QLBEG/qpeSLAsMROUWJVKKjN8Wj/Dp46T339E=
Subject key identifier:   8F:58:C0:E6:91:FC:19:26:B6:FE:7F:71:E9:CA:9F:0F:F0:65:DE:B3
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       557DB00F7CAB7855568F3CB3A6B5F20244F981B2
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:44 +0000
ROA not before:           Thu 27 Aug 2026 16:09:44 +0000
ROA not after:            Thu 26 Aug 2027 16:14:44 +0000
asID:                     262757
IP address blocks:        186.224.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7d:b0:0f:7c:ab:78:55:56:8f:3c:b3:a6:b5:f2:02:44:f9:81:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:44 2026 GMT
            Not After : Aug 26 16:14:44 2027 GMT
        Subject: CN=8F58C0E691FC1926B6FE7F71E9CA9F0FF065DEB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f5:f4:a5:84:83:5e:e8:ea:ff:30:a0:2b:42:
                    35:c6:33:c1:29:bf:2a:f4:5f:05:62:c9:07:56:8f:
                    5c:3f:45:b8:61:0e:57:fc:92:d6:b0:99:74:e6:8f:
                    6a:c0:18:2f:92:24:fd:61:e6:d1:4c:c8:82:c6:26:
                    02:49:e5:68:af:3e:63:d4:b4:f9:29:cf:fe:41:57:
                    9b:53:ec:2b:bd:db:2e:d4:3e:3e:29:7f:a2:2e:6c:
                    32:d0:b7:19:85:09:4e:a6:39:f6:cc:5f:1b:d9:16:
                    9e:ea:71:78:b8:c5:3e:18:f9:05:2f:91:be:0f:4a:
                    17:be:44:7d:3e:4e:4c:fe:0b:13:2d:60:18:7e:b6:
                    bc:66:89:e1:d6:81:a8:b7:d5:16:77:54:b6:e9:f5:
                    f2:61:12:1f:99:da:99:92:68:c7:70:73:c0:16:96:
                    3a:07:b8:7c:28:42:2d:db:4d:9f:86:97:1c:e2:b0:
                    72:32:dc:e4:7e:61:5b:b9:7f:df:c8:55:46:1f:a2:
                    16:bd:fa:25:d4:ed:df:8c:92:59:92:07:dd:fd:e9:
                    4d:af:21:02:ba:0a:f5:ca:54:5d:e6:28:0e:39:0b:
                    1d:59:b3:79:03:85:6c:ca:33:33:5f:e8:77:73:c3:
                    7f:9a:49:2c:74:a5:5c:36:78:71:39:c1:4b:ab:b6:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:58:C0:E6:91:FC:19:26:B6:FE:7F:71:E9:CA:9F:0F:F0:65:DE:B3
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131362e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:e7:2c:1b:4b:2d:2d:ee:da:3b:dc:30:9b:72:04:f9:5f:
         05:d7:7a:37:ae:b0:92:5f:c9:c9:a5:ae:0e:b7:66:73:04:aa:
         a7:b9:d5:c7:d8:85:02:6b:db:c0:60:f7:c7:17:9d:b3:2f:30:
         16:9e:36:5e:6c:0d:e1:cd:44:df:09:ce:8d:34:58:79:a7:32:
         43:a7:41:9c:aa:53:71:b7:3b:53:29:d1:de:b9:64:02:e8:ff:
         92:2b:78:69:8a:4e:d0:c2:c1:58:2f:b2:51:da:8b:ff:01:2b:
         7a:40:cc:75:50:5d:97:ee:f0:16:7d:17:a1:b3:a6:ee:9d:8b:
         1b:67:0f:03:14:f3:42:72:9f:f6:2a:40:6f:51:75:b6:25:01:
         6a:29:4e:23:63:07:a2:d9:31:cf:d3:15:24:af:b1:2e:21:9c:
         78:cd:b4:5e:eb:83:17:0f:bc:de:e9:eb:f0:61:37:a5:04:68:
         20:6f:64:9e:b0:d9:28:01:59:ff:01:d1:03:17:6d:5f:e1:ca:
         32:40:d0:5d:6c:71:2b:44:d3:3e:7f:6d:6b:78:5f:55:e6:e6:
         a1:f6:a3:2f:c0:01:dd:7c:5d:bb:ed:8d:9f:b0:8c:c2:d7:f0:
         98:cf:4b:74:df:48:7e:55:6f:b4:3a:97:1f:f0:4d:47:86:54:
         08:db:98:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:17:55 2026 by rpki-client