Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          8D2M8zSB4T9TEROdDSNNrsBIZt5qfuEYa+2foMZ5WGY=
Subject key identifier:   43:37:B8:D7:78:0F:45:A4:35:4D:1A:BF:AB:25:05:09:AF:AB:58:F5
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       614397DB01043BA24FE48AFEE6AF55C9857B2494
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:31 +0000
ROA not before:           Thu 25 Sep 2025 16:03:31 +0000
ROA not after:            Thu 24 Sep 2026 16:08:31 +0000
asID:                     262757
IP address blocks:        186.224.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:43:97:db:01:04:3b:a2:4f:e4:8a:fe:e6:af:55:c9:85:7b:24:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:31 2025 GMT
            Not After : Sep 24 16:08:31 2026 GMT
        Subject: CN=4337B8D7780F45A4354D1ABFAB250509AFAB58F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:b0:16:d9:7b:bc:1e:02:4d:f5:92:fd:57:
                    02:0f:c1:1a:ff:b3:dc:32:99:68:d1:57:88:a6:29:
                    80:fc:da:b9:0b:4d:ef:db:bd:d3:fe:e3:fe:3b:c1:
                    9d:a8:d7:bd:b4:fe:d5:86:73:01:ae:06:3f:98:ee:
                    ad:9a:1a:87:09:61:6f:79:2f:30:1a:92:c8:39:ec:
                    a6:e7:f5:9a:ce:e1:51:a9:bf:5d:e9:cf:43:e7:15:
                    f4:92:a2:5c:af:69:62:8e:e9:40:04:a4:af:4e:53:
                    73:d8:d6:aa:66:f9:55:9b:d6:31:e3:44:5f:4f:61:
                    81:30:7a:fe:c4:78:ea:fc:8c:e9:19:cf:d9:19:0a:
                    0b:1a:70:86:f4:9e:54:c4:ab:f5:40:51:30:91:8b:
                    53:48:0d:62:0f:c4:cd:16:bf:15:3c:aa:6c:1e:60:
                    a8:47:49:ce:0d:4f:59:e6:34:9c:86:61:de:cd:f5:
                    2f:29:09:a2:4a:e5:49:c7:7c:12:69:52:29:24:de:
                    2a:0b:1b:55:94:81:bb:51:43:b2:7d:d0:fe:c4:29:
                    4c:cf:86:65:95:ec:57:ed:26:21:93:2d:fb:31:75:
                    a1:01:80:fb:e3:0a:85:a4:4c:1d:59:80:20:dd:39:
                    ea:72:39:c9:9f:af:12:bf:4a:2b:e0:c7:97:15:2e:
                    21:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:B8:D7:78:0F:45:A4:35:4D:1A:BF:AB:25:05:09:AF:AB:58:F5
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:57:11:67:a2:03:4c:f4:6d:9a:03:a3:84:aa:d1:c1:ef:
         aa:89:02:d9:d5:b4:1f:75:c1:b8:2d:0a:21:73:c6:39:09:97:
         8f:9a:af:e7:70:6f:f3:da:9c:ad:e9:e8:df:3b:ba:8f:be:7e:
         b9:43:99:68:ed:32:99:ca:3d:7c:d0:32:e1:dd:48:6a:a2:ba:
         45:35:12:7c:ba:fa:b9:c4:9e:29:5a:53:59:32:a0:67:ba:c4:
         2a:9f:6c:30:f5:94:6f:06:c6:90:64:22:ec:f2:97:85:48:29:
         eb:40:66:7b:cd:c5:ef:41:f4:05:fe:60:c2:6e:dd:77:78:95:
         89:a8:29:e9:53:e2:48:2e:9d:6d:c9:bd:a0:d2:2c:1a:1b:eb:
         2e:63:83:fa:85:4a:6c:52:51:01:cc:3a:cf:c9:a9:f8:85:49:
         14:f3:22:6e:0e:bc:4c:db:26:1d:aa:15:3f:d8:d2:00:19:1a:
         23:14:30:a5:e5:44:96:8a:54:a0:e6:4c:63:a5:bd:50:ae:bc:
         49:a8:4a:f3:09:d5:13:9f:ce:27:ed:82:23:db:b3:e3:50:25:
         c6:24:ff:10:9e:14:2e:ff:96:05:ed:b8:ea:c7:4a:16:da:4e:
         51:3d:9f:44:3f:91:e5:73:ec:9e:d8:2c:d6:f9:17:98:25:e1:
         a1:3c:17:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:58:37 2026 by rpki-client