Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          PQKYFIaomgpkr1dHnN8AfAzv8mFJzt9giOLjGrk8A4M=
Subject key identifier:   A5:22:C0:77:F6:D3:7B:73:18:29:8E:71:51:FC:43:F5:19:95:82:C6
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       462460395BDE5E7857571A4B5F6038620A4A540C
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:46 +0000
ROA not before:           Thu 27 Aug 2026 16:09:46 +0000
ROA not after:            Thu 26 Aug 2027 16:14:46 +0000
asID:                     262757
IP address blocks:        186.224.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 Oct 2026 12:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:60:39:5b:de:5e:78:57:57:1a:4b:5f:60:38:62:0a:4a:54:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:46 2026 GMT
            Not After : Aug 26 16:14:46 2027 GMT
        Subject: CN=A522C077F6D37B7318298E7151FC43F5199582C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:b1:68:fc:f3:b5:49:90:51:82:40:4b:09:
                    15:68:72:0d:07:36:04:2b:d0:5e:52:36:34:6b:bf:
                    7c:e8:c2:21:68:da:1a:80:df:82:7a:85:18:6f:5b:
                    25:55:e9:18:e8:31:01:8a:0f:e4:5d:14:58:64:f1:
                    67:c9:26:59:70:bf:08:ef:13:dc:94:ac:39:fc:9c:
                    b9:9a:cb:96:30:b5:53:80:ba:68:fa:96:cf:df:9b:
                    b9:c2:b1:92:e1:34:e3:4c:7e:6d:83:21:33:b4:d2:
                    2c:92:2f:4f:b6:fd:b8:b0:05:29:bc:8c:17:c4:37:
                    9c:50:5b:bb:cd:f6:18:bb:2f:02:21:91:87:21:ca:
                    09:1a:af:50:5e:d9:51:e4:e1:21:10:e7:8a:fb:f2:
                    52:1d:97:31:ce:16:03:9c:de:d3:e6:98:4b:3d:e1:
                    33:3c:72:58:5d:cf:2f:12:b3:17:25:ae:6e:b0:38:
                    3c:64:c8:44:12:3d:6e:c7:9a:1c:62:fb:5c:56:6f:
                    f4:b7:b1:30:39:33:e1:b6:a0:3c:be:84:ab:03:1d:
                    8a:a7:b3:87:a9:c5:c6:aa:d8:c5:eb:2b:7b:e8:53:
                    f7:bc:70:85:80:c9:45:0b:2e:8d:ce:35:1b:6f:34:
                    ed:d8:22:a5:e7:fa:0c:55:90:fa:bb:20:18:97:44:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:22:C0:77:F6:D3:7B:73:18:29:8E:71:51:FC:43:F5:19:95:82:C6
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:10:fd:44:02:c1:c1:a2:3f:aa:c0:40:80:d2:e8:31:7d:07:
         13:42:a7:a8:70:67:38:ee:d6:62:37:da:46:f9:ac:13:0e:c4:
         cc:bc:16:a4:ed:db:72:28:3e:f6:51:62:8f:fd:13:2f:23:b1:
         97:38:18:e1:d1:92:1b:73:10:35:ae:fa:dd:54:5e:ed:88:da:
         55:0b:a4:58:9a:ad:8e:d9:19:b8:29:3e:20:e7:5d:5f:06:62:
         d4:1d:d8:93:32:34:0d:6c:68:f7:1d:de:ad:c3:c8:f8:a1:06:
         4e:63:60:da:3a:f3:38:9f:f7:80:53:b5:f0:d9:52:bd:5e:78:
         15:ea:cb:8b:e7:0d:da:51:4f:8c:84:1d:af:06:e3:b9:49:7b:
         69:b7:0a:c1:a3:9b:5d:33:42:88:34:76:e9:ae:52:d6:9e:64:
         d2:12:3d:54:88:7b:72:ce:f8:06:fb:0e:64:e2:d0:f8:df:30:
         4a:88:5a:ad:16:19:a6:64:fe:8c:5c:a8:4f:61:82:95:e3:81:
         7c:28:26:51:7b:dc:9a:7a:f4:5a:5d:36:75:44:06:65:95:2e:
         04:96:3e:33:28:0e:b5:64:94:24:12:f8:ea:2e:0e:be:cc:a5:
         88:f1:d2:68:b4:33:f0:f2:ae:34:29:89:fb:32:38:af:f7:62:
         c5:ea:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:31:21 2026 by rpki-client