Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e3132342e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          XwYi4f34sindz7mvEMZQ4BPNAxZRR+FGI+muXKsFyzA=
Subject key identifier:   2C:F3:E8:7A:C9:36:49:0B:02:8A:3F:33:48:80:15:46:A5:70:89:72
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       3E5AF8FF58A122BEDEBB9DA441CDD130F9113F2D
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32322d3232203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:31 +0000
ROA not before:           Thu 25 Sep 2025 16:03:31 +0000
ROA not after:            Thu 24 Sep 2026 16:08:31 +0000
asID:                     262757
IP address blocks:        186.224.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:5a:f8:ff:58:a1:22:be:de:bb:9d:a4:41:cd:d1:30:f9:11:3f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:31 2025 GMT
            Not After : Sep 24 16:08:31 2026 GMT
        Subject: CN=2CF3E87AC936490B028A3F3348801546A5708972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:df:24:63:d3:3b:39:b4:e1:c3:f3:10:c2:
                    60:4d:14:93:ee:22:12:65:da:eb:e4:00:aa:33:a6:
                    5d:84:cc:ff:3b:68:b7:7f:83:63:c6:ab:0e:b7:8e:
                    0c:8f:86:bb:0d:8d:c4:d9:6c:e6:1b:ee:8e:44:e7:
                    4b:5d:f7:bb:88:b2:43:41:c5:bf:5c:a7:fa:93:8a:
                    b7:63:97:04:4b:cb:a6:14:f2:73:e4:54:89:4b:eb:
                    cc:17:ee:f6:c1:76:d3:c5:2d:5c:62:fe:f1:f1:27:
                    6b:ad:d1:ac:54:85:47:d6:25:25:bf:51:de:6f:3e:
                    c3:3d:a6:6a:e3:f6:3f:2d:77:31:71:ef:f4:ca:1b:
                    d3:c3:f2:36:8d:84:16:ed:a3:3e:cf:fb:b0:12:bf:
                    95:d2:b1:fd:cc:24:84:d2:fe:42:6b:60:ad:7f:10:
                    44:ef:fd:73:88:d6:8b:bf:ed:c2:a0:81:f9:98:be:
                    39:63:99:b4:c9:f8:4d:86:92:49:5f:22:ac:da:d4:
                    d4:91:f7:c1:f2:4a:de:e1:9c:f1:ae:d9:61:32:31:
                    2b:3f:32:b4:1d:00:3c:ec:89:c9:1c:05:bf:9c:5e:
                    fc:7d:76:8c:14:cb:cb:d7:e1:3a:47:b4:f5:49:eb:
                    ea:53:b2:70:a0:7a:6a:57:c5:5f:50:50:a1:98:f9:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:E8:7A:C9:36:49:0B:02:8A:3F:33:48:80:15:46:A5:70:89:72
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:a1:b1:1b:ac:f8:2d:85:67:66:1f:92:b4:7a:73:70:85:
         a5:ed:c2:2f:84:36:a5:f3:6e:1c:fe:b6:7c:f5:b0:0b:81:c6:
         70:51:08:70:6b:46:ec:4a:35:8e:70:10:e2:79:20:06:9e:99:
         d1:e8:51:b3:25:b0:eb:8a:24:93:83:75:64:e6:1f:d9:fc:57:
         bb:17:de:b9:f3:a3:cf:c0:b1:90:68:99:2f:56:f0:a1:25:f3:
         c4:51:5b:70:c4:87:f2:3e:55:e4:36:40:08:ea:92:03:54:0a:
         94:a5:f2:f7:cc:eb:45:2c:ab:5e:16:ce:40:ab:2c:93:8c:14:
         8c:8b:b9:74:34:a8:8f:fb:3f:33:db:c7:19:c3:dd:e0:64:54:
         b8:29:8c:c8:4b:66:14:96:d2:33:8c:43:22:3b:ef:53:d4:75:
         fe:3a:89:b0:4b:34:b5:e8:91:df:1b:19:d8:fd:d5:e2:d2:fd:
         f6:cf:6c:e0:1b:a4:32:4e:2e:8c:2c:21:64:1f:7d:f1:f4:5b:
         61:d4:d0:c2:40:16:ad:75:78:ae:5e:76:33:d7:03:cf:b4:14:
         95:f4:ad:ab:65:b3:25:38:fe:a6:51:41:0f:7b:c4:6b:ce:8f:
         8c:92:23:76:4b:75:85:de:07:ce:f4:34:b2:ed:88:c5:e0:78:
         4a:fc:9e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:59:47 2026 by rpki-client