Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39392e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e39392e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          FNOEyJ5S3dZNwq42QiIKZRFPj+SecvtaEYIwZKK70pY=
Subject key identifier:   F9:1B:B4:05:FC:0C:46:C9:E7:C9:19:BB:0C:94:77:EC:02:B1:A8:89
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       60DE60DA3E2EA52ACF2B75ADC0DE896A904A0939
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39392e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 25 Sep 2025 16:08:33 +0000
ROA not before:           Thu 25 Sep 2025 16:03:33 +0000
ROA not after:            Thu 24 Sep 2026 16:08:33 +0000
asID:                     262757
IP address blocks:        186.224.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 05:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:de:60:da:3e:2e:a5:2a:cf:2b:75:ad:c0:de:89:6a:90:4a:09:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Sep 25 16:03:33 2025 GMT
            Not After : Sep 24 16:08:33 2026 GMT
        Subject: CN=F91BB405FC0C46C9E7C919BB0C9477EC02B1A889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:e2:95:6d:7e:78:de:56:7d:38:ac:bd:34:
                    80:66:15:e5:17:61:e0:fe:f4:c3:17:66:a5:ad:ff:
                    d2:ad:34:7d:ac:fe:06:04:ff:68:a7:10:65:7a:46:
                    92:c4:d5:61:43:f8:2c:99:14:8d:97:ca:2b:a1:86:
                    6c:cf:51:5e:73:59:e9:8d:11:a2:9d:71:4b:e9:4a:
                    31:8f:10:a7:f2:3b:bf:ee:92:73:8b:87:87:16:cc:
                    ff:5e:8d:99:2f:a0:27:fc:7f:5a:97:64:3c:33:f2:
                    2d:7e:76:f1:97:23:da:2f:36:d9:90:17:03:ad:d6:
                    4a:ed:d1:46:aa:70:25:0d:60:f0:b6:71:0d:20:4c:
                    03:3c:95:8b:8b:ec:80:79:f7:34:5f:88:2c:2b:51:
                    63:5c:ea:89:d9:51:80:d0:92:3d:b2:fe:3a:8b:86:
                    3a:8c:8c:3c:7b:b2:e3:d2:ec:41:ee:1b:d7:59:ea:
                    b7:4d:fe:6a:21:c0:e7:07:37:11:23:de:a9:c5:5a:
                    72:8f:69:1e:ad:cc:a4:bb:b6:65:02:72:74:01:f3:
                    20:cd:49:ac:c1:a7:58:14:ea:18:f3:6f:04:9c:1f:
                    9b:19:cb:72:f7:b1:be:95:11:05:ea:47:8a:7d:12:
                    f1:ca:97:05:6d:8c:04:be:71:57:59:99:f9:5c:3e:
                    4c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1B:B4:05:FC:0C:46:C9:E7:C9:19:BB:0C:94:77:EC:02:B1:A8:89
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39392e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:16:12:81:45:11:c8:e2:9f:85:5f:77:fc:1c:83:61:d9:5a:
         70:c3:28:16:d7:2a:84:c7:e2:39:2e:73:31:b9:5e:d7:52:d0:
         f7:74:85:d7:d0:df:ec:36:32:47:03:33:e3:34:54:5c:1c:83:
         c1:e1:6d:ea:95:6f:0f:53:b9:f4:9a:e2:a5:52:91:f4:b3:39:
         04:01:d1:03:a2:b1:31:0c:56:af:ad:3b:dd:fe:02:7f:33:92:
         2d:3d:ff:c1:cd:b9:71:fc:6e:9c:73:da:a6:93:09:53:a0:13:
         a3:8a:97:e6:e5:e5:31:4e:32:b1:2f:74:99:d9:81:68:4e:a0:
         af:5c:0f:e1:54:b5:21:d6:bd:be:1f:6d:c8:db:00:f6:5f:a5:
         6d:01:39:c4:a9:45:c8:64:d1:24:41:92:f7:87:c4:5d:f2:f8:
         cd:6c:03:22:a6:01:bc:0f:41:7b:67:c3:06:16:55:83:3e:7c:
         0e:41:c5:e7:ff:2b:62:73:8f:35:36:b2:65:2e:94:10:82:88:
         be:3e:c5:3d:1b:df:8b:1d:4d:16:d9:9f:35:9e:0e:e2:77:36:
         93:bd:91:14:29:25:91:d5:25:2e:38:1f:64:0a:13:8b:32:f2:
         4a:3b:e8:87:a3:7d:b7:35:27:8d:2a:91:c2:09:61:66:6c:00:
         09:10:9e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:42 2026 by rpki-client