Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          /vqt8MgtIw2moqNpCNV7ZWFCeFUNBhiMpXEn541Mn0M=
Subject key identifier:   FA:DF:90:49:E3:48:CB:96:AF:AD:26:40:1D:8A:E4:BD:23:3E:A5:D5
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       4F5F584087FD28F24A94595891732A5000C799F8
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa
Signing time:             Mon 25 May 2026 14:12:19 +0000
ROA not before:           Mon 25 May 2026 14:07:19 +0000
ROA not after:            Mon 24 May 2027 14:12:19 +0000
asID:                     53153
IP address blocks:        186.209.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5f:58:40:87:fd:28:f2:4a:94:59:58:91:73:2a:50:00:c7:99:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: May 25 14:07:19 2026 GMT
            Not After : May 24 14:12:19 2027 GMT
        Subject: CN=FADF9049E348CB96AFAD26401D8AE4BD233EA5D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:8a:7d:89:8b:b6:cf:9a:4c:99:6e:e3:fc:
                    1b:3e:fc:23:c2:d0:67:53:00:f8:39:d0:7e:7d:b3:
                    b4:6c:52:75:80:7a:66:85:10:18:d0:a9:12:9a:cf:
                    df:74:98:aa:7c:b3:2b:90:99:00:f8:b6:d3:28:e4:
                    a7:b6:d7:de:ba:a7:1c:36:1b:c4:8d:6d:8c:01:d5:
                    96:3d:b0:2a:28:69:80:3e:7f:f5:aa:10:f1:50:10:
                    0d:32:a2:17:b5:b2:47:90:84:ab:c5:43:e3:2a:29:
                    b0:4f:73:dc:6b:6c:0e:9e:9b:69:6e:1f:5d:c4:20:
                    cf:06:e7:99:73:37:6f:f5:a3:76:cc:0e:c0:db:16:
                    be:cf:cc:7a:b6:4a:66:51:8c:f6:5b:7c:3b:e6:43:
                    8a:be:37:fb:d6:fd:1e:c3:ff:4e:1f:37:be:6b:5b:
                    c7:58:f6:46:d6:55:c8:f6:11:01:13:98:9f:c4:49:
                    d6:70:6c:20:d1:fd:07:a1:46:df:1b:f6:1c:4e:82:
                    0a:70:bf:5a:a4:c5:41:87:11:32:2a:a3:35:91:65:
                    c2:8b:16:62:7b:d3:fa:44:8d:fc:fa:c3:d8:fe:8e:
                    95:82:72:ed:89:68:b7:7a:a9:c2:52:79:09:25:01:
                    4c:bf:2e:b6:eb:f0:11:d8:55:3e:9f:68:ab:07:ba:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DF:90:49:E3:48:CB:96:AF:AD:26:40:1D:8A:E4:BD:23:3E:A5:D5
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:58:84:b4:76:d9:3e:97:36:19:63:a7:af:8d:44:c5:de:78:
         d0:23:b4:96:9d:30:fa:0d:98:b6:9e:59:89:0f:30:0a:cd:4a:
         e1:ec:82:9a:9c:d2:d8:c2:24:ea:7f:e4:2d:ab:07:1c:c6:01:
         c7:af:2a:92:38:14:39:8c:db:5d:87:67:64:6f:e0:d8:b5:53:
         c2:e7:b2:57:35:32:e5:de:99:81:d1:58:9a:43:3f:98:44:c9:
         e9:a3:f0:49:6a:57:ac:63:85:e8:e5:27:4d:f1:51:a7:dd:e9:
         2a:1e:b3:48:66:62:04:93:1a:c5:9b:64:ba:20:49:be:1d:2c:
         9b:3b:bd:0e:fa:99:80:6f:7c:ed:74:14:ba:97:a9:1d:fe:90:
         4b:ce:3f:c7:2b:f6:95:48:2f:d6:2d:39:02:07:3f:f4:a6:ca:
         7f:29:72:38:3a:61:00:eb:61:b0:88:56:16:7c:30:9d:e4:28:
         51:82:b9:c9:a8:06:90:ca:8a:aa:9b:ca:22:4a:32:ec:44:75:
         a7:b2:ed:44:2d:98:8c:f5:9a:cf:fe:40:99:28:23:b4:c3:78:
         77:29:36:72:31:bd:a5:c0:e3:b6:77:a7:47:ac:83:61:74:13:
         20:22:96:89:7e:34:82:5b:9d:16:42:48:f0:26:63:f6:ea:03:
         85:92:63:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:37:46 2026 by rpki-client