Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          qmSEBmeJsC2Dy4QkaOM1UyDY+zoYRCI3jgsxtD4KriY=
Subject key identifier:   30:33:1D:E9:46:19:EB:9E:C5:E7:04:B5:09:90:D4:18:17:82:7D:1C
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       4EF7550D7C109A49FA5FA5F793CE102D6656F51E
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:39 +0000
ROA not before:           Thu 27 Aug 2026 16:09:39 +0000
ROA not after:            Thu 26 Aug 2027 16:14:39 +0000
asID:                     262757
IP address blocks:        186.224.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:f7:55:0d:7c:10:9a:49:fa:5f:a5:f7:93:ce:10:2d:66:56:f5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:39 2026 GMT
            Not After : Aug 26 16:14:39 2027 GMT
        Subject: CN=30331DE94619EB9EC5E704B50990D41817827D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:ef:7a:2b:af:97:46:62:c9:c9:da:4e:80:
                    27:da:eb:58:50:75:de:7e:ce:92:96:40:12:b1:0b:
                    c0:29:c2:aa:1b:43:20:c2:a8:bf:e6:9e:a8:4e:20:
                    03:45:a3:03:da:7b:88:89:10:f8:9f:92:39:bd:4d:
                    5b:1b:8d:8f:d7:9d:b6:24:e4:f5:7d:7b:d8:25:20:
                    a6:05:52:c8:02:44:5d:7d:67:09:d4:0a:6a:e7:86:
                    f4:d8:4c:2e:5b:4d:a2:7d:22:df:dd:41:6a:0e:fe:
                    2e:a5:7a:99:ca:08:d6:f8:11:6e:e3:e5:16:b9:c5:
                    54:8e:b5:f8:f5:eb:b1:91:69:6f:24:f1:2f:e0:3b:
                    bc:bf:0b:cc:17:4c:eb:a8:43:fe:c7:30:eb:af:23:
                    53:2c:df:74:77:d2:7e:c8:82:90:39:01:82:68:db:
                    2a:2a:d2:69:f8:22:f8:bb:ec:00:ba:c5:38:5b:69:
                    9c:91:3f:62:81:9e:92:50:3c:ca:79:04:9b:8e:ac:
                    9a:e2:0d:cd:fa:84:e8:1a:91:ae:08:22:12:f5:15:
                    2a:14:23:2e:e7:ba:df:12:e4:9a:61:aa:4c:bd:73:
                    97:6a:f3:80:18:16:3c:63:b2:8b:6d:a0:35:73:57:
                    bd:b6:34:77:76:73:57:13:07:e3:e6:58:3b:8d:ca:
                    16:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:33:1D:E9:46:19:EB:9E:C5:E7:04:B5:09:90:D4:18:17:82:7D:1C
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131372e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:89:aa:7e:43:c2:4e:1a:7f:d9:98:d1:ab:da:b9:b6:25:d9:
         52:d8:6d:ef:5c:fc:a8:9b:a7:a7:e3:ae:ed:49:80:7c:c5:13:
         a6:47:92:64:02:ce:3c:fc:5c:0f:a6:af:a1:04:03:48:de:18:
         1c:e3:86:c6:53:4d:5e:f8:5b:fc:43:d4:8a:70:c7:3b:e6:04:
         b9:a3:b6:2b:e5:d0:1a:44:df:df:5c:9b:a8:90:f2:28:2d:9f:
         47:f8:47:a1:38:74:ac:4d:86:5f:8e:b5:a4:5c:8b:bf:3e:2f:
         3d:a5:0a:73:e4:25:e8:33:e2:1f:f3:fc:fe:8a:f4:b6:05:aa:
         4b:20:d2:ea:8a:56:dd:7c:1c:53:77:14:39:c9:b0:d0:fe:e9:
         ea:8f:31:26:c4:2a:b9:9f:15:8a:dd:e5:94:5c:87:73:de:94:
         79:8a:f0:aa:8e:f1:2f:de:82:19:e0:7d:ba:ab:0e:45:c2:f0:
         0b:65:79:6d:75:0b:8e:96:b1:f5:44:55:92:00:bf:62:a4:5e:
         eb:47:6f:83:5b:14:a0:49:4c:f8:f5:14:a7:eb:77:60:2b:1b:
         a8:40:d8:2c:a9:3a:af:8e:ac:f0:bf:fb:3f:ef:0c:b8:33:32:
         c0:2a:e1:08:c8:48:33:4d:36:c7:91:06:bf:fd:0c:c0:72:da:
         23:80:cf:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:40:18 2026 by rpki-client