Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          Jcwav1mW+uxcC62K4DZfHPshNPkH4MIfJgH2R2w+Pv4=
Subject key identifier:   12:C7:0C:75:CE:5B:B0:69:44:B6:79:62:70:63:B2:9C:21:E1:2D:02
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       7A8A2BEE671CD60354414BEB30ED047C7CB383A4
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa
Signing time:             Mon 25 May 2026 14:12:19 +0000
ROA not before:           Mon 25 May 2026 14:07:19 +0000
ROA not after:            Mon 24 May 2027 14:12:19 +0000
asID:                     53153
IP address blocks:        186.209.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8a:2b:ee:67:1c:d6:03:54:41:4b:eb:30:ed:04:7c:7c:b3:83:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: May 25 14:07:19 2026 GMT
            Not After : May 24 14:12:19 2027 GMT
        Subject: CN=12C70C75CE5BB06944B679627063B29C21E12D02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:fa:cf:1a:0b:a2:55:7e:0d:4a:a3:0a:28:
                    35:4f:19:a2:68:5f:1d:76:62:45:9d:90:5f:a2:21:
                    83:ac:72:81:bb:21:07:f0:14:fa:a3:18:4f:3b:66:
                    66:77:45:92:30:b4:62:b5:8d:00:0b:0c:15:d3:8e:
                    32:01:1a:92:b3:0e:7a:c7:26:3d:6c:8d:39:0f:9f:
                    a6:eb:c8:ef:c9:1e:55:5d:9a:90:d4:a7:8c:de:c0:
                    34:33:78:01:84:03:df:a8:eb:12:47:4d:14:84:b7:
                    1e:29:f5:48:61:bf:30:9b:ee:12:f0:02:c7:8b:be:
                    ef:d2:fa:82:cf:68:61:43:15:cc:0d:be:be:0b:5a:
                    3a:6e:a1:36:cc:1f:4f:4a:99:be:ca:a3:62:ff:b2:
                    2b:94:8b:18:b6:ba:c2:57:af:bf:f8:dc:72:4d:59:
                    c7:b8:92:9d:61:e8:91:3f:bf:79:18:1e:4b:8b:ee:
                    50:7e:1d:aa:d6:e6:50:34:77:bc:b0:87:f3:07:f0:
                    67:fa:b2:12:22:95:43:76:76:59:bd:06:de:9e:a9:
                    7e:53:04:84:d7:77:f8:40:95:68:5d:0e:b9:cb:78:
                    7b:ec:44:b8:20:eb:3e:f5:94:28:03:50:f8:ed:bf:
                    43:ad:a8:22:4f:2b:9d:74:8c:2a:58:71:00:02:ac:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C7:0C:75:CE:5B:B0:69:44:B6:79:62:70:63:B2:9C:21:E1:2D:02
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130302e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:a3:55:e7:c7:8a:0a:72:0b:40:7c:33:24:42:d3:dc:a8:
         78:5e:ba:1f:47:50:6e:7c:f6:d4:bd:64:9c:fa:c5:50:f3:ff:
         2c:a9:aa:60:48:70:56:7a:87:5f:7a:ad:0d:b0:2c:13:d1:84:
         f5:74:a9:98:c8:dc:da:fc:2a:48:a1:99:f9:82:be:38:c1:2a:
         83:86:34:ed:a4:0c:ba:fa:34:a2:fc:68:90:f2:dd:b6:8f:27:
         4c:7d:46:5d:69:17:8b:66:ff:24:db:a4:fe:52:bd:d4:8f:1c:
         8f:28:3c:bc:0d:ee:9b:2b:08:e2:8e:f0:19:b5:57:97:cb:fb:
         f1:1e:02:96:48:89:0f:55:9f:a9:23:14:b6:13:1d:37:61:d6:
         cd:8e:bd:bf:b7:94:39:c6:17:20:24:89:0a:25:30:2a:d5:17:
         a9:ff:fa:2d:da:90:91:6b:58:5b:7d:34:74:bf:db:9f:96:a6:
         82:7b:03:cb:db:21:2b:17:ce:bb:57:65:9e:62:3c:cb:0b:79:
         ec:5e:20:d5:af:c3:34:78:69:13:c8:2f:88:48:44:96:02:6f:
         64:48:2e:8a:a5:eb:16:59:fa:dc:e7:de:43:54:7a:3e:e4:ba:
         ca:1b:60:99:32:5e:eb:4f:46:e0:93:83:03:c5:7a:a4:27:e4:
         c8:8f:bb:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:37:10 2026 by rpki-client