Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          Aowpm/6WoCXutoQVG3rBXvpVkRF7YINr/QKKfyNlwXk=
Subject key identifier:   CB:ED:A8:0E:50:FA:9C:E0:64:F5:EF:01:77:AE:80:FD:FF:4B:06:1D
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       766D3622EA24F14972BEBB9AE2EEA178AFE7225B
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:46 +0000
ROA not before:           Thu 27 Aug 2026 16:09:46 +0000
ROA not after:            Thu 26 Aug 2027 16:14:46 +0000
asID:                     262757
IP address blocks:        186.224.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6d:36:22:ea:24:f1:49:72:be:bb:9a:e2:ee:a1:78:af:e7:22:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:46 2026 GMT
            Not After : Aug 26 16:14:46 2027 GMT
        Subject: CN=CBEDA80E50FA9CE064F5EF0177AE80FDFF4B061D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a4:13:33:11:91:bc:6e:13:37:f8:b4:3f:bd:
                    16:86:70:cc:95:76:9f:0b:2a:f9:84:80:8d:53:4d:
                    fd:1d:03:4a:68:15:6d:18:c7:0c:4b:99:c6:d7:22:
                    d8:e5:3a:81:1f:0a:b7:ab:07:0e:54:90:d3:cf:42:
                    61:59:10:a4:2a:e7:35:ff:d4:be:99:f9:b9:0f:ba:
                    4d:64:97:68:aa:3d:a0:b1:10:5b:b4:c6:91:29:2c:
                    5d:2c:6b:25:b4:90:3c:74:c8:91:6d:d2:07:af:53:
                    33:23:f4:97:52:1d:fe:29:c5:4d:28:64:89:26:a8:
                    6b:d3:82:35:6d:c4:9b:5a:e3:11:c2:21:88:6b:5e:
                    d3:87:5c:34:58:49:4e:47:f5:3d:22:69:d9:05:74:
                    84:00:5a:da:7f:20:fa:f1:40:c0:41:ef:2b:71:8e:
                    2e:95:ef:0c:31:06:e3:b9:bc:3d:a5:4d:22:f7:76:
                    fd:d8:1f:34:c7:34:4d:21:86:d3:ae:ee:6b:0c:a9:
                    d2:07:23:f3:59:c9:fc:67:2f:a7:0a:23:d2:2a:10:
                    fe:83:3b:8c:05:e1:74:66:98:2b:85:59:ad:8f:6c:
                    40:f3:bf:68:4b:03:aa:71:15:ce:4d:2c:3d:52:75:
                    cc:e0:b9:74:5e:89:4d:8b:47:98:1a:55:9c:3a:02:
                    8e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:ED:A8:0E:50:FA:9C:E0:64:F5:EF:01:77:AE:80:FD:FF:4B:06:1D
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132342e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:b8:9a:0e:b9:40:e2:c3:b9:b1:61:c9:f7:8c:58:1c:5c:04:
         47:42:db:c4:70:51:fe:f1:10:31:8b:97:0e:79:01:69:e3:d1:
         88:69:ac:61:d0:2b:65:26:9b:23:85:d7:33:d3:ee:70:3d:00:
         85:62:96:9a:20:da:38:14:88:24:8b:dd:43:7e:be:d9:28:35:
         2e:ed:96:43:cf:f1:76:89:85:10:dd:2c:12:80:7d:48:79:1b:
         22:62:46:c5:9d:a0:5e:83:40:c0:f8:d3:4b:8e:54:1a:f8:c4:
         53:aa:93:53:ec:4c:7f:73:54:dc:26:93:c7:39:28:59:22:a2:
         ae:f2:bb:01:40:9b:6b:11:44:2c:67:0e:18:59:2e:23:25:df:
         29:65:b2:c2:e3:13:37:06:8e:48:b7:cf:8d:26:02:54:d7:9b:
         2e:9a:4e:b6:1d:c9:89:80:b6:5a:b6:bc:9a:e5:22:77:e4:b6:
         92:61:7b:94:e6:5f:c3:58:b8:32:59:ad:f3:83:5c:7a:12:1e:
         34:b5:7b:bf:1a:8c:80:93:93:5e:f6:78:e7:79:46:c6:31:27:
         2f:26:37:22:fc:a5:71:8b:b8:73:c4:75:ec:98:ca:38:48:46:
         d4:60:fc:5e:fa:22:a6:c2:48:b9:cf:ea:b2:d3:e4:de:f7:19:
         fa:f4:41:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:28:24 2026 by rpki-client