Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa (raw, json)
Hash identifier:          lX6f/bJbJRn8rSzywnfKm19MhWsdjbO90DCp50izujw=
Subject key identifier:   2E:D2:E7:1E:07:B5:84:4C:3C:AE:52:68:DA:80:54:EF:C3:8A:DE:1B
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       2D4A4D1D27246C299CBD16768045D921F8B6A954
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:29 +0000
ROA not before:           Thu 25 Sep 2025 16:03:29 +0000
ROA not after:            Thu 24 Sep 2026 16:08:29 +0000
asID:                     262757
IP address blocks:        186.224.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:4a:4d:1d:27:24:6c:29:9c:bd:16:76:80:45:d9:21:f8:b6:a9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:29 2025 GMT
            Not After : Sep 24 16:08:29 2026 GMT
        Subject: CN=2ED2E71E07B5844C3CAE5268DA8054EFC38ADE1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:89:e7:91:c6:c4:27:a3:46:55:bc:41:ff:
                    a0:89:59:33:90:f7:ff:9b:00:24:51:e2:fd:a2:91:
                    80:1f:e6:7d:b1:a7:ac:4f:fe:a0:40:ab:19:2d:08:
                    8a:84:88:a8:06:34:e6:7c:23:ba:4e:ce:c9:7c:2d:
                    c0:89:f7:1c:ca:45:86:0e:b6:ce:74:08:64:68:d1:
                    f1:35:f2:50:88:c2:2d:f4:80:aa:35:af:79:31:04:
                    35:1d:5c:7c:b8:8f:29:ee:27:1e:60:99:cd:56:31:
                    3e:55:28:7f:ad:64:d7:90:3e:72:ff:9f:2b:a1:e8:
                    ba:ae:30:dd:af:aa:31:ea:1d:df:a7:4e:05:0f:26:
                    2b:15:15:38:9a:ef:9d:b9:f8:18:f8:7b:83:c1:1a:
                    73:64:44:3e:18:0c:e7:e3:2a:2d:c6:35:76:aa:45:
                    cc:9c:45:2c:7d:ce:40:66:7b:8d:cb:ef:51:d9:1e:
                    1b:ea:75:67:fa:09:d7:ef:89:26:89:c3:4a:00:75:
                    d0:3b:02:ab:70:97:86:bb:20:6b:c4:36:67:56:1e:
                    f3:d1:59:8b:8e:58:58:fc:64:ad:20:56:07:27:a3:
                    57:84:ce:38:34:fc:37:cc:17:6f:9d:63:5e:1d:23:
                    f3:ca:98:81:3d:45:18:26:89:dd:e2:b0:1c:ca:b3:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D2:E7:1E:07:B5:84:4C:3C:AE:52:68:DA:80:54:EF:C3:8A:DE:1B
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32312d3231203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:a8:13:ea:2b:0f:2d:34:84:1f:45:14:41:1a:c5:25:a4:f8:
         4d:d7:c4:fc:c4:61:4d:d3:fc:93:d7:fe:9d:cc:2e:a9:3f:73:
         ab:58:1d:e4:d6:a6:51:7e:97:6f:61:30:d1:60:7a:9a:8c:e3:
         ae:4e:2d:70:41:a2:cd:c1:9d:36:d5:18:7f:5d:a2:63:99:56:
         2d:4a:de:39:75:df:3d:70:76:e7:e6:bf:a2:62:ec:55:de:c4:
         ef:68:2e:85:6f:c3:f0:af:22:3f:b4:2f:49:ba:85:51:29:3b:
         b4:b8:ad:da:e0:6b:dc:22:54:85:f3:af:18:a7:7e:ba:68:29:
         e0:69:20:7b:6d:a1:26:55:4d:f5:cf:cb:82:f7:45:04:1b:8c:
         01:0c:9c:f7:b7:53:8c:47:db:2b:b8:1d:a1:82:97:eb:16:9a:
         5e:af:b3:8a:82:ec:e0:e6:be:58:fe:fa:2d:af:c0:ab:b7:17:
         e3:0a:be:67:36:68:02:6e:dd:43:33:0b:0f:fd:85:8d:c3:f8:
         0f:fb:99:68:24:74:a6:a2:19:97:13:1a:48:dc:e2:42:1a:e4:
         06:ce:d3:d7:14:8f:34:de:b3:23:9b:79:ff:28:ec:f3:f5:b4:
         c6:0d:a6:38:a6:68:16:da:d8:31:14:9d:72:59:1c:33:38:12:
         36:9f:e9:aa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULUpNHSckbCmcvRZ2gEXZIfi2qVQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNTA5MjUxNjAzMjlaFw0yNjA5MjQxNjA4MjlaMDMxMTAvBgNV
BAMTKDJFRDJFNzFFMDdCNTg0NEMzQ0FFNTI2OERBODA1NEVGQzM4QURFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzp4nnkcbEJ6NGVbxB/6CJWTOQ
9/+bACRR4v2ikYAf5n2xp6xP/qBAqxktCIqEiKgGNOZ8I7pOzsl8LcCJ9xzKRYYO
ts50CGRo0fE18lCIwi30gKo1r3kxBDUdXHy4jynuJx5gmc1WMT5VKH+tZNeQPnL/
nyuh6LquMN2vqjHqHd+nTgUPJisVFTia7525+Bj4e4PBGnNkRD4YDOfjKi3GNXaq
RcycRSx9zkBme43L71HZHhvqdWf6CdfviSaJw0oAddA7Aqtwl4a7IGvENmdWHvPR
WYuOWFj8ZK0gVgcno1eEzjg0/DfMF2+dY14dI/PKmIE9RRgmid3isBzKs7uDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQULtLnHge1hEw8rlJo2oBU78OK3hswHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTM5MzYyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjM2
MzIzNzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAO64GAwDQYJKoZIhvcNAQELBQADggEBAHWoE+or
Dy00hB9FFEEaxSWk+E3XxPzEYU3T/JPX/p3MLqk/c6tYHeTWplF+l29hMNFgepqM
465OLXBBos3BnTbVGH9domOZVi1K3jl13z1wdufmv6Ji7FXexO9oLoVvw/CvIj+0
L0m6hVEpO7S4rdrga9wiVIXzrxinfrpoKeBpIHttoSZVTfXPy4L3RQQbjAEMnPe3
U4xH2yu4HaGCl+sWml6vs4qC7ODmvlj++i2vwKu3F+MKvmc2aAJu3UMzCw/9hY3D
+A/7mWgkdKaiGZcTGkjc4kIa5AbO09cUjzTesyObef8o7PP1tMYNpjimaBba2DEU
nXJZHDM4Ejaf6ao=
-----END CERTIFICATE-----
Generated at Wed May 13 16:25:16 2026 by rpki-client