Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          rkHGkSEvqBorJ9W2k6N/PX2ecxjrzUmWmtYLMZGWGrU=
Subject key identifier:   88:81:2D:AF:C5:E4:1D:C9:22:0C:DD:92:87:3B:FD:25:DF:68:41:D7
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       3F443CF84684C404F86E4E4A372E7BEFD4B430FC
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:35 +0000
ROA not before:           Thu 25 Sep 2025 16:03:35 +0000
ROA not after:            Thu 24 Sep 2026 16:08:35 +0000
asID:                     262757
IP address blocks:        186.224.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:44:3c:f8:46:84:c4:04:f8:6e:4e:4a:37:2e:7b:ef:d4:b4:30:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:35 2025 GMT
            Not After : Sep 24 16:08:35 2026 GMT
        Subject: CN=88812DAFC5E41DC9220CDD92873BFD25DF6841D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:85:c3:2c:26:29:d5:2f:42:d2:46:a4:f6:
                    dd:51:d4:d9:99:b0:5b:7e:32:88:72:58:87:20:dd:
                    42:8e:b5:7e:c2:3d:b9:20:71:3d:d1:f8:49:b5:e2:
                    92:5c:c4:5b:25:69:ab:e2:b0:76:17:9a:53:01:f1:
                    92:80:a6:70:78:5e:7b:5c:28:55:64:7f:ca:e3:77:
                    3a:08:a8:cc:2b:a0:24:ae:a0:4d:96:57:0d:0d:bd:
                    f4:8d:22:fa:d0:fb:5c:54:c1:c3:e4:91:93:b1:4d:
                    c4:aa:36:7f:ea:c6:f3:48:6b:c3:13:8c:26:e6:af:
                    22:0f:e8:76:d5:42:52:f1:40:45:ac:3f:56:87:73:
                    5e:cb:9c:92:cb:72:41:57:95:57:c4:de:4a:ea:62:
                    0a:2d:ee:ea:a2:59:d1:23:bc:fb:dd:7e:3e:ed:03:
                    c8:fb:63:47:57:46:4c:b2:2c:54:02:a6:66:3c:02:
                    dd:87:41:a5:14:32:41:44:b2:41:83:50:07:72:69:
                    85:35:8e:d7:cf:6e:71:4a:60:4e:05:3d:c2:af:1f:
                    d1:64:bf:e5:17:15:fb:75:3b:be:38:2d:e7:35:fb:
                    46:6b:27:de:ea:15:74:76:a6:9e:c4:0a:4c:15:a9:
                    8b:7b:2b:e1:a1:ee:5a:49:b3:b8:b0:26:9d:73:39:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:81:2D:AF:C5:E4:1D:C9:22:0C:DD:92:87:3B:FD:25:DF:68:41:D7
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:32:30:12:de:e7:8c:6b:75:3f:ca:46:a4:ef:3d:f6:35:
         d9:1e:85:27:c6:60:7e:b8:3c:3c:63:31:92:3a:bb:b5:1a:1e:
         e5:c3:ab:a8:98:51:23:25:40:11:95:d8:f2:9a:ca:c8:64:08:
         80:8e:99:36:04:67:4a:1e:f2:a0:9a:28:49:1a:46:fb:3f:51:
         82:4f:6d:7c:dd:a5:64:27:18:0f:70:e6:59:11:41:97:0d:78:
         27:13:be:38:4d:19:58:f1:26:40:d6:5b:d6:da:ed:76:97:45:
         e5:0b:64:89:36:bb:f4:3a:3b:29:da:d9:2e:75:f2:b7:8b:9a:
         49:04:d3:7c:15:fb:a1:81:d6:7c:d0:fd:48:05:ba:2a:7f:d9:
         1f:b4:77:13:37:0e:b4:ad:e4:29:72:8d:e5:54:dd:30:42:70:
         aa:8c:cc:e1:9a:a1:b4:d6:f4:17:b6:12:03:1f:06:0e:0c:04:
         fa:7d:c3:4a:eb:54:d2:b5:ba:5a:05:c1:ff:12:25:fa:cb:33:
         08:05:bf:ee:86:b8:34:a0:c0:5a:5d:eb:4a:08:ec:79:fd:c7:
         a0:c3:1d:43:d5:a5:d7:25:f5:3b:16:ff:e6:65:8d:7c:71:46:
         0f:f2:38:df:59:87:84:88:12:31:99:1f:56:dc:bd:c1:4d:7f:
         1e:e6:d7:08
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP0Q8+EaExAT4bk5KNy5779S0MPwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjEwMzE4RjIzRkQ0QjZFMzc2OTk1OTg5QjNBN0EwRjlF
MkUyOUU0ODAeFw0yNTA5MjUxNjAzMzVaFw0yNjA5MjQxNjA4MzVaMDMxMTAvBgNV
BAMTKDg4ODEyREFGQzVFNDFEQzkyMjBDREQ5Mjg3M0JGRDI1REY2ODQxRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqaIXDLCYp1S9C0kak9t1R1NmZ
sFt+MohyWIcg3UKOtX7CPbkgcT3R+Em14pJcxFslaavisHYXmlMB8ZKApnB4Xntc
KFVkf8rjdzoIqMwroCSuoE2WVw0NvfSNIvrQ+1xUwcPkkZOxTcSqNn/qxvNIa8MT
jCbmryIP6HbVQlLxQEWsP1aHc17LnJLLckFXlVfE3krqYgot7uqiWdEjvPvdfj7t
A8j7Y0dXRkyyLFQCpmY8At2HQaUUMkFEskGDUAdyaYU1jtfPbnFKYE4FPcKvH9Fk
v+UXFft1O744Lec1+0ZrJ97qFXR2pp7ECkwVqYt7K+Gh7lpJs7iwJp1zOcx/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUiIEtr8XkHckiDN2Shzv9Jd9oQdcwHwYDVR0j
BBgwFoAUYQMY8j/UtuN2mVmJs6eg+eLinkgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODdjcUtkN2U5clJtSEJFSkhYWEZOZ0FxNVBkRE1rVWFkakhMRU5QSFpC
cHcvMC82MTAzMThGMjNGRDRCNkUzNzY5OTU5ODlCM0E3QTBGOUUyRTI5RTQ4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYxMDMxOEYyM0ZENEI2RTM3
Njk5NTk4OUIzQTdBMEY5RTJFMjlFNDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg3Y3FLZDdlOXJSbUhCRUpIWFhGTmdBcTVQZERNa1VhZGpITEVOUEhaQnB3LzAv
MzEzODM2MmUzMjMyMzQyZTM5MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzIzNzM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAG64GAwDQYJKoZIhvcNAQELBQADggEBADxSMjAS
3ueMa3U/ykak7z32NdkehSfGYH64PDxjMZI6u7UaHuXDq6iYUSMlQBGV2PKayshk
CICOmTYEZ0oe8qCaKEkaRvs/UYJPbXzdpWQnGA9w5lkRQZcNeCcTvjhNGVjxJkDW
W9ba7XaXReULZIk2u/Q6Oyna2S518reLmkkE03wV+6GB1nzQ/UgFuip/2R+0dxM3
DrSt5ClyjeVU3TBCcKqMzOGaobTW9Be2EgMfBg4MBPp9w0rrVNK1uloFwf8SJfrL
MwgFv+6GuDSgwFpd60oI7Hn9x6DDHUPVpdcl9TsW/+ZljXxxRg/yON9Zh4SIEjGZ
H1bcvcFNfx7m1wg=
-----END CERTIFICATE-----
Generated at Wed May 13 15:06:27 2026 by rpki-client