Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131382e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e3131382e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          bykM4S8n4kJDMOl0WyTG6bdrGsWBmKtXEgOBwcw8nRw=
Subject key identifier:   CB:8D:E5:E4:A7:DE:DB:5F:F6:97:2D:2E:E9:C3:DF:77:12:C6:15:47
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       773B89A20FDCD7155826D20ADBDF90CAD6A7D87F
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131382e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:32 +0000
ROA not before:           Thu 25 Sep 2025 16:03:32 +0000
ROA not after:            Thu 24 Sep 2026 16:08:32 +0000
asID:                     262757
IP address blocks:        186.224.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3b:89:a2:0f:dc:d7:15:58:26:d2:0a:db:df:90:ca:d6:a7:d8:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:32 2025 GMT
            Not After : Sep 24 16:08:32 2026 GMT
        Subject: CN=CB8DE5E4A7DEDB5FF6972D2EE9C3DF7712C61547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3b:ae:fa:b2:2b:e6:96:1e:0e:86:38:7d:1a:
                    cb:4c:70:04:91:2f:cf:49:3e:cd:ac:b3:b9:63:44:
                    2d:a1:43:36:36:6c:39:cb:d4:f5:f4:60:d1:5e:2e:
                    f3:28:12:74:cf:6f:50:23:75:2e:eb:ed:db:6d:52:
                    26:d0:54:98:d2:91:5f:a1:a0:7e:49:6e:27:e6:3a:
                    15:76:76:46:8a:d6:62:ec:d6:7c:fd:f8:15:62:76:
                    c4:f2:65:36:d1:e9:24:d7:83:b0:ab:87:e5:cd:a6:
                    f2:ba:bf:cc:f5:89:2e:bf:a8:1e:cf:ad:c2:9a:f0:
                    17:9a:c5:54:3b:19:31:91:ec:15:4d:89:87:fb:84:
                    36:04:5e:b4:fa:2f:31:fa:b6:9b:7e:b1:e4:ae:52:
                    7f:d8:37:ba:29:eb:89:38:56:9d:0a:e0:65:b6:de:
                    02:f1:d8:d2:a6:b5:ea:3f:61:22:94:36:22:29:f8:
                    a1:0b:e5:e7:24:7d:53:e6:10:85:10:f4:0a:34:90:
                    7a:8c:81:a9:24:01:54:c8:5e:6d:c8:8b:b4:ff:38:
                    a2:55:5e:d8:97:c8:89:f4:bb:62:99:73:bd:33:8a:
                    aa:2a:1f:bb:27:e6:b4:91:93:35:57:77:f1:84:4b:
                    c8:e9:2a:7c:16:68:12:01:34:0b:6a:cb:50:9f:70:
                    be:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8D:E5:E4:A7:DE:DB:5F:F6:97:2D:2E:E9:C3:DF:77:12:C6:15:47
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131382e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:ed:ff:0a:95:93:89:48:eb:3c:d7:a8:12:34:b2:c6:3b:
         66:6e:4d:8b:64:ea:17:2d:f6:cf:8a:04:e1:a8:cc:88:ec:21:
         6e:b8:2b:8b:a2:63:93:6d:ae:21:72:ae:b4:0c:48:89:46:51:
         0a:17:ab:d6:ec:90:16:43:df:66:a7:19:da:cc:f9:ef:ea:50:
         ea:f6:56:f7:aa:b5:11:01:7a:0f:36:9e:10:dd:81:6a:51:46:
         e3:08:a7:1a:df:a8:06:85:16:b9:3e:4a:46:24:ca:bf:0b:50:
         47:79:c4:e0:f4:e7:af:97:3b:74:ab:9b:a1:ec:1e:eb:42:26:
         cf:7e:95:80:3e:05:c4:ff:86:da:80:06:a5:67:24:51:0b:9e:
         59:12:1c:12:04:0c:7c:38:1d:b8:ae:e3:3e:a0:20:10:ae:f8:
         1b:2e:e1:ea:8e:38:43:66:dd:e2:cb:90:d5:fc:50:18:8a:ae:
         02:8d:ed:66:34:2e:0b:7a:ba:5b:05:5e:41:d1:37:56:af:ae:
         42:8e:db:9b:c4:30:fb:4d:ba:7e:38:71:c2:19:d0:c6:98:60:
         cc:85:83:e7:42:1f:6d:49:fd:8c:7b:9f:30:b7:e3:3d:6f:50:
         f8:98:62:a4:2e:20:d2:16:50:d3:05:51:2d:c8:43:3b:6f:c6:
         6e:82:46:5e
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUdzuJog/c1xVYJtIK29+Qytan2H8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNTA5MjUxNjAzMzJaFw0yNjA5MjQxNjA4MzJaMDMxMTAvBgNV
BAMTKENCOERFNUU0QTdERURCNUZGNjk3MkQyRUU5QzNERjc3MTJDNjE1NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCO676sivmlh4Ohjh9GstMcASR
L89JPs2ss7ljRC2hQzY2bDnL1PX0YNFeLvMoEnTPb1AjdS7r7dttUibQVJjSkV+h
oH5JbifmOhV2dkaK1mLs1nz9+BVidsTyZTbR6STXg7Crh+XNpvK6v8z1iS6/qB7P
rcKa8BeaxVQ7GTGR7BVNiYf7hDYEXrT6LzH6tpt+seSuUn/YN7op64k4Vp0K4GW2
3gLx2NKmteo/YSKUNiIp+KEL5eckfVPmEIUQ9Ao0kHqMgakkAVTIXm3Ii7T/OKJV
XtiXyIn0u2KZc70ziqoqH7sn5rSRkzVXd/GES8jpKnwWaBIBNAtqy1CfcL5rAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUy43l5Kfe21/2ly0u6cPfdxLGFUcwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTMxMzEzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAbrgdjANBgkqhkiG9w0BAQsFAAOCAQEALPLt
/wqVk4lI6zzXqBI0ssY7Zm5Ni2TqFy32z4oE4ajMiOwhbrgri6Jjk22uIXKutAxI
iUZRCher1uyQFkPfZqcZ2sz57+pQ6vZW96q1EQF6DzaeEN2BalFG4winGt+oBoUW
uT5KRiTKvwtQR3nE4PTnr5c7dKuboewe60Imz36VgD4FxP+G2oAGpWckUQueWRIc
EgQMfDgduK7jPqAgEK74Gy7h6o44Q2bd4suQ1fxQGIquAo3tZjQuC3q6WwVeQdE3
Vq+uQo7bm8Qw+026fjhxwhnQxphgzIWD50IfbUn9jHufMLfjPW9Q+JhipC4g0hZQ
0wVRLchDO2/GboJGXg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:24:31 2026 by rpki-client