Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          yXNhoTNu0epuj6gj2Z3Z43Viy85yZ/UEPC1YV4dAZ3I=
Subject key identifier:   35:8B:DB:3D:3C:1F:2A:F2:03:7A:13:F0:7F:3F:F9:B2:A8:93:B8:09
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       30E75A224F3182196968A259022C0D336A8CAA3F
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:28 +0000
ROA not before:           Thu 25 Sep 2025 16:03:28 +0000
ROA not after:            Thu 24 Sep 2026 16:08:28 +0000
asID:                     262757
IP address blocks:        186.224.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e7:5a:22:4f:31:82:19:69:68:a2:59:02:2c:0d:33:6a:8c:aa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:28 2025 GMT
            Not After : Sep 24 16:08:28 2026 GMT
        Subject: CN=358BDB3D3C1F2AF2037A13F07F3FF9B2A893B809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:ba:cc:36:7d:a7:55:ba:12:cb:a2:d2:ae:
                    79:10:d6:2a:0c:a7:11:d6:28:0b:89:a3:d7:76:29:
                    22:01:ce:1b:93:a6:a8:6f:d3:a6:a3:1e:0c:ba:ba:
                    d3:9d:e0:ab:8b:c8:90:5c:c5:3c:1b:bd:b5:2f:bb:
                    19:6f:d8:0f:4a:3e:e5:00:1a:74:f4:a3:de:c7:9d:
                    97:d2:36:1f:bf:11:76:98:31:21:01:5b:56:00:67:
                    53:d7:c7:db:16:06:fe:33:ad:e0:a9:bb:c2:2d:96:
                    83:a6:4d:78:7d:3f:41:9e:ba:ed:a6:da:d2:39:a0:
                    01:9d:74:cc:bd:3c:7a:61:8f:b5:d9:bf:f4:00:a4:
                    c4:a7:c9:31:86:1b:dd:3b:0e:e2:db:d3:22:f0:c3:
                    82:c0:87:03:c3:d2:a9:a9:91:a6:fa:bd:b2:2a:d4:
                    07:2d:e5:44:3c:71:9e:7b:ff:e0:ff:f0:64:6e:8d:
                    e6:5f:bf:e0:24:17:db:bd:86:38:40:9d:4d:47:12:
                    9c:39:ee:12:f0:a6:84:b7:9d:4f:67:4e:c7:11:f0:
                    c0:a3:95:52:a1:93:1f:76:fa:42:6a:50:3a:d1:95:
                    dc:21:7c:75:33:99:ac:05:08:aa:13:e4:e5:19:2a:
                    dd:7b:24:29:a8:cc:ce:00:a3:be:88:87:c9:77:16:
                    4c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8B:DB:3D:3C:1F:2A:F2:03:7A:13:F0:7F:3F:F9:B2:A8:93:B8:09
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:47:a6:0b:19:8b:13:78:0e:95:b1:d1:17:0e:d1:72:02:e0:
         84:ae:b9:ef:64:d0:2f:be:b7:33:77:55:24:f2:ed:b7:c6:b6:
         14:d2:6c:64:4a:b7:3b:0e:e7:6b:78:ca:0c:74:a9:c3:75:42:
         a1:5f:17:25:53:50:ff:a4:83:49:df:de:2a:af:31:9e:ec:e2:
         bb:13:70:b2:b9:bd:d9:76:9c:d4:b2:06:62:bf:22:c8:22:70:
         b2:53:04:9c:e4:b1:67:11:bc:ad:50:e4:f6:ca:c9:4c:ab:55:
         e8:0b:02:48:96:d7:79:93:00:38:24:4d:64:4c:54:b2:1a:43:
         9d:0a:d3:4d:c8:ba:e4:c7:4d:8d:c0:37:be:df:6a:aa:47:8d:
         be:bf:0b:c4:61:63:5c:fd:ce:6f:93:cf:3b:9f:6a:94:ab:a6:
         88:8f:0b:c2:c8:93:0d:db:a8:0b:fe:73:99:35:a5:27:be:6c:
         fe:25:2c:8c:a6:e8:a5:25:b2:33:12:92:23:bd:60:62:b4:94:
         5f:16:59:86:49:14:77:f6:b1:71:42:9e:f9:e4:5b:b3:5c:e7:
         4e:9f:0b:04:57:64:0d:be:e0:94:96:69:d7:64:cc:a4:be:08:
         ae:d6:e1:7a:ee:10:e3:65:a2:95:c4:d8:f6:4d:5d:72:9c:82:
         58:02:85:c6
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUMOdaIk8xghlpaKJZAiwNM2qMqj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNTA5MjUxNjAzMjhaFw0yNjA5MjQxNjA4MjhaMDMxMTAvBgNV
BAMTKDM1OEJEQjNEM0MxRjJBRjIwMzdBMTNGMDdGM0ZGOUIyQTg5M0I4MDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6drrMNn2nVboSy6LSrnkQ1ioM
pxHWKAuJo9d2KSIBzhuTpqhv06ajHgy6utOd4KuLyJBcxTwbvbUvuxlv2A9KPuUA
GnT0o97HnZfSNh+/EXaYMSEBW1YAZ1PXx9sWBv4zreCpu8ItloOmTXh9P0Geuu2m
2tI5oAGddMy9PHphj7XZv/QApMSnyTGGG907DuLb0yLww4LAhwPD0qmpkab6vbIq
1Act5UQ8cZ57/+D/8GRujeZfv+AkF9u9hjhAnU1HEpw57hLwpoS3nU9nTscR8MCj
lVKhkx92+kJqUDrRldwhfHUzmawFCKoT5OUZKt17JCmozM4Ao76Ih8l3FkyzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUNYvbPTwfKvIDehPwfz/5sqiTuAkwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzIzNzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK64GAwDQYJKoZIhvcNAQELBQADggEBACxHpgsZ
ixN4DpWx0RcO0XIC4ISuue9k0C++tzN3VSTy7bfGthTSbGRKtzsO52t4ygx0qcN1
QqFfFyVTUP+kg0nf3iqvMZ7s4rsTcLK5vdl2nNSyBmK/IsgicLJTBJzksWcRvK1Q
5PbKyUyrVegLAkiW13mTADgkTWRMVLIaQ50K003IuuTHTY3AN77faqpHjb6/C8Rh
Y1z9zm+TzzufapSrpoiPC8LIkw3bqAv+c5k1pSe+bP4lLIym6KUlsjMSkiO9YGK0
lF8WWYZJFHf2sXFCnvnkW7Nc506fCwRXZA2+4JSWaddkzKS+CK7W4XruEONlopXE
2PZNXXKcglgChcY=
-----END CERTIFICATE-----
Generated at Wed May 13 15:12:22 2026 by rpki-client