Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131382e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131382e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          cSlMcYlZSqnOZGLGqk0kJH0/Yn/YYam8lRRm8Q5stCw=
Subject key identifier:   64:A8:F5:AC:9F:F3:84:00:B7:07:71:ED:DB:27:06:2E:EE:DC:08:81
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       32ECBD428D9AD385CFE87237F301B3BE6DBB7650
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131382e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:31 +0000
ROA not before:           Thu 25 Sep 2025 16:03:31 +0000
ROA not after:            Thu 24 Sep 2026 16:08:31 +0000
asID:                     262757
IP address blocks:        186.224.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:ec:bd:42:8d:9a:d3:85:cf:e8:72:37:f3:01:b3:be:6d:bb:76:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:31 2025 GMT
            Not After : Sep 24 16:08:31 2026 GMT
        Subject: CN=64A8F5AC9FF38400B70771EDDB27062EEEDC0881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:0b:bc:50:71:c0:46:ec:e0:82:18:a8:bb:
                    fe:4d:84:31:15:1b:1c:c0:db:e5:5c:cb:c9:7d:8e:
                    08:8e:13:68:49:9c:be:7e:51:80:de:39:ce:40:cb:
                    56:66:e0:1a:21:79:6b:d0:62:52:b6:f9:5f:9d:83:
                    4c:d6:19:03:11:32:f1:c7:73:c9:01:6b:38:a5:b9:
                    39:83:b1:ae:78:5e:13:72:80:be:eb:1a:db:de:78:
                    ac:d3:d5:79:89:dd:4c:1d:19:8e:74:0b:ae:52:cf:
                    cc:60:d8:25:af:ad:81:86:f9:f0:70:02:59:f5:2a:
                    2b:4d:73:c9:fb:66:0a:20:f0:7d:e6:45:32:cd:35:
                    6d:c4:d9:14:3b:06:13:06:3f:14:32:f7:1c:5f:8b:
                    d3:fb:1f:5d:27:b8:5c:98:83:d8:5b:43:c6:94:d6:
                    cc:8f:a8:f8:32:38:3d:26:dd:2a:a9:f6:f2:3d:64:
                    91:33:69:eb:04:ba:d8:48:11:86:7b:3e:f0:6e:16:
                    39:5a:67:d2:be:d4:5e:27:0b:74:e3:eb:79:ce:9e:
                    e3:fe:ed:79:f9:6a:ff:43:4a:45:93:ff:3a:9d:8b:
                    d9:cd:cb:16:8a:60:15:1d:32:5c:91:86:67:63:d3:
                    91:57:b7:06:96:99:9c:5b:8a:68:3f:9b:f6:d1:4c:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A8:F5:AC:9F:F3:84:00:B7:07:71:ED:DB:27:06:2E:EE:DC:08:81
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131382e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:e6:78:ae:bc:2f:12:19:ca:43:c5:ea:b5:1f:06:fd:e6:
         14:48:ec:53:be:bf:a9:82:cc:dc:36:da:a5:30:cb:78:5a:34:
         16:c0:a4:a2:d5:f0:39:90:a5:69:7c:63:a4:45:a4:57:7c:de:
         8c:0f:7c:c0:ed:32:43:50:11:1c:1f:a6:05:4f:18:e5:b1:bc:
         8b:1a:b5:80:35:f4:57:16:bf:65:e4:64:4b:28:24:c5:62:29:
         86:61:33:a8:6d:c2:78:9b:c8:3c:34:6a:05:2a:ee:2e:19:c4:
         ac:51:09:75:b8:c0:71:b7:66:c3:25:d1:93:72:42:d6:e4:62:
         88:88:42:78:e3:f0:46:21:cb:bc:12:66:53:07:26:b7:4b:9b:
         ca:5c:d9:49:20:df:2e:1e:b0:8c:f5:43:6e:40:e0:12:96:83:
         30:f5:48:a9:5f:fc:10:f7:6d:d8:a3:c8:a1:26:bb:e5:1a:6f:
         b2:b2:86:b8:bd:92:77:9b:73:99:63:35:5b:01:70:f6:ac:4d:
         27:64:86:7b:0b:27:8f:e5:0e:9a:bd:40:f6:cf:9b:1e:bc:a4:
         45:be:2a:a1:b5:2c:5f:0b:65:c4:b9:a2:53:1d:55:c5:ae:68:
         51:54:88:fe:00:55:30:1f:b3:2f:09:b9:9d:e5:6a:a1:54:39:
         2a:ec:c1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:54:41 2026 by rpki-client