Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          j2nwflT1Zq8cNnq/txyuj2vVwJkgy8aJsc4QcOl5hPE=
Subject key identifier:   5D:18:96:4F:BB:5B:39:DE:46:1C:67:F4:08:3A:C0:EC:41:9A:0E:74
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       53B147B72911D6A1C5BBF560D6122D3326533C5C
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:35 +0000
ROA not before:           Thu 25 Sep 2025 16:03:35 +0000
ROA not after:            Thu 24 Sep 2026 16:08:35 +0000
asID:                     262757
IP address blocks:        186.224.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b1:47:b7:29:11:d6:a1:c5:bb:f5:60:d6:12:2d:33:26:53:3c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:35 2025 GMT
            Not After : Sep 24 16:08:35 2026 GMT
        Subject: CN=5D18964FBB5B39DE461C67F4083AC0EC419A0E74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1a:17:3f:fd:c7:f2:d2:60:cf:32:cf:fa:c0:
                    55:6c:58:45:cd:01:cb:2e:4c:ea:5c:15:06:94:dc:
                    46:3b:04:52:85:08:aa:8d:11:7f:ff:98:b8:f6:4c:
                    52:0e:d4:82:5f:36:6b:1d:74:8c:9a:c9:81:a8:2c:
                    e5:5e:be:6b:7b:be:67:74:b0:e1:2f:11:de:19:fe:
                    45:75:e6:72:4c:0f:0d:42:80:77:2f:c0:07:5b:d5:
                    f7:38:4b:a8:92:54:ba:f0:5a:f4:56:dc:59:89:5a:
                    36:33:ef:a1:68:45:32:4e:37:9c:3e:ae:e4:21:88:
                    be:e7:fd:d1:d5:0f:bd:6a:e3:10:47:c0:62:c0:52:
                    6a:18:77:c4:a5:3d:72:9b:80:a5:8b:c9:a4:69:5b:
                    13:f8:db:57:91:db:a7:cc:b9:42:40:e0:ee:63:81:
                    06:d3:52:d7:87:c8:d1:f2:fe:da:e1:f6:86:73:2f:
                    c9:0b:59:7a:2f:7a:7b:47:1b:5f:f0:1a:d4:bd:24:
                    b7:fc:a8:12:ff:4c:3b:3d:d3:55:1d:c5:4a:bf:66:
                    1b:67:9b:2b:46:5b:83:44:2b:61:02:8d:a8:40:3d:
                    c3:01:2c:27:9c:ae:80:ac:8f:d3:43:6e:47:e7:eb:
                    6b:2b:c9:2b:b0:2f:9a:1d:d2:36:ed:e9:50:19:43:
                    90:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:18:96:4F:BB:5B:39:DE:46:1C:67:F4:08:3A:C0:EC:41:9A:0E:74
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3132352e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:82:58:07:26:cb:42:b2:ea:fa:93:83:23:63:a0:24:09:b6:
         a4:6d:58:1a:dd:18:97:16:2d:ca:8a:3b:1f:88:62:e5:71:5a:
         2a:48:b6:87:46:89:94:ac:86:d9:48:78:82:d0:51:e5:cc:ee:
         5c:85:21:55:02:15:5f:00:5d:d2:fa:64:e2:0b:a6:63:5e:d3:
         8a:43:13:60:4a:1d:8e:47:3d:a9:3f:13:f5:17:58:da:39:d6:
         f5:e9:e9:ef:e7:e9:ff:d8:fb:aa:1b:90:0f:24:59:fd:8b:19:
         08:0b:38:34:5d:76:fc:d9:de:c7:d4:38:3b:95:30:b5:90:63:
         a4:a6:27:56:f7:d5:79:7f:eb:d6:3b:0e:78:71:ea:b0:67:23:
         dc:ab:a0:11:ca:78:1b:08:8c:d8:7c:17:be:30:81:42:e2:03:
         02:df:5e:eb:59:49:ab:66:14:42:c0:fe:d3:aa:95:73:ed:a4:
         dd:21:05:9e:eb:54:e7:55:6a:3e:c9:db:b7:de:3e:40:6d:af:
         8b:74:b7:fd:e7:f7:58:6b:39:0b:bd:c9:89:59:89:37:9d:78:
         2b:73:6a:75:0a:39:69:c6:39:63:9d:00:1b:5c:39:ac:26:7e:
         3b:d3:b4:77:d5:10:e1:a4:3a:20:c8:53:2e:01:fa:88:b6:2e:
         f8:e5:0e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:58:44 2026 by rpki-client