Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          anhUngWHsrImgsno61CeDeXFj6N18lMK5W9GLVjv0l4=
Subject key identifier:   29:02:F1:F4:65:8E:28:4F:A2:65:3F:5E:97:C2:E2:98:7B:48:9A:9A
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       1230496F3BC931E4A748CC0D28EF98B6373DD97A
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa
Signing time:             Mon 25 May 2026 14:12:19 +0000
ROA not before:           Mon 25 May 2026 14:07:19 +0000
ROA not after:            Mon 24 May 2027 14:12:19 +0000
asID:                     53153
IP address blocks:        186.209.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:30:49:6f:3b:c9:31:e4:a7:48:cc:0d:28:ef:98:b6:37:3d:d9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: May 25 14:07:19 2026 GMT
            Not After : May 24 14:12:19 2027 GMT
        Subject: CN=2902F1F4658E284FA2653F5E97C2E2987B489A9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:41:84:aa:b8:88:3c:10:fc:7c:b7:bf:07:22:
                    aa:11:c6:0d:32:e2:60:cd:7b:10:9f:7d:9a:6e:e3:
                    f5:e3:34:7e:6f:d4:44:a7:28:c3:fb:82:40:e2:ea:
                    30:49:6b:f6:a3:cc:84:17:0e:95:c8:45:b2:a3:61:
                    8f:73:1c:1f:36:bc:9d:2f:e7:65:7e:a4:0f:16:8f:
                    d1:69:17:a8:2f:eb:c4:ff:2d:b5:15:70:e5:a3:10:
                    d9:24:b2:f6:12:56:49:64:1d:4a:b6:08:80:83:ab:
                    30:87:ee:85:aa:4f:25:bd:35:bc:0a:a0:a1:0c:cf:
                    43:51:51:14:50:31:3e:db:fd:68:ef:0d:09:bf:14:
                    6b:32:ed:1a:39:52:1d:39:a5:ea:02:72:5c:d1:a5:
                    ff:d6:ad:54:fc:0b:f8:10:46:3b:49:42:4d:c6:9d:
                    6c:6b:96:79:b2:63:b1:d0:c8:61:83:be:0c:b7:e7:
                    30:86:af:de:fe:2b:85:d9:75:80:de:86:dd:2e:e3:
                    1e:84:8b:14:ff:b1:a5:81:5a:ab:dd:01:a3:63:1f:
                    43:82:0d:bf:f2:e2:8e:10:c6:48:e0:f5:3c:1d:0f:
                    e1:35:1f:4e:da:4b:22:4c:82:da:2f:fb:37:73:64:
                    0a:00:34:01:1e:8e:3a:0d:06:f0:d4:15:54:1e:8b:
                    a9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:02:F1:F4:65:8E:28:4F:A2:65:3F:5E:97:C2:E2:98:7B:48:9A:9A
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130382e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:03:15:bf:38:71:83:6f:3c:40:19:17:7d:13:08:cc:c1:f2:
         30:80:4c:6a:12:4f:3a:56:55:a5:02:60:94:77:8c:e7:0b:86:
         54:4b:2b:1e:d2:b7:7a:91:e0:77:89:1d:77:5f:51:2d:59:94:
         84:d1:d9:84:f2:5b:29:39:23:cb:e4:f3:bc:5b:3a:84:23:81:
         b2:56:77:4a:13:30:55:2c:85:2b:48:54:61:2a:35:4a:92:cf:
         98:9f:1e:b6:80:93:4f:eb:ff:e2:85:5d:76:c6:39:9c:08:ef:
         60:f8:b8:cf:bb:06:22:7a:f3:b0:27:ad:8e:6d:67:f3:bd:00:
         bf:47:28:39:96:a7:ef:45:8e:83:66:43:b5:ee:09:9e:70:40:
         be:44:49:42:5a:e8:d6:2c:fd:8b:ec:f3:d4:35:ab:ff:62:0c:
         f3:b2:0f:45:a1:fe:f0:7f:da:25:5a:d4:36:f5:3f:1e:31:43:
         e6:25:12:bb:d5:bc:13:99:89:99:c7:db:3e:f4:cf:5d:25:a3:
         86:9b:2c:0c:2c:ed:43:3a:0b:24:79:a9:91:57:be:e2:d1:60:
         a4:fa:d9:81:be:a5:09:e9:4b:a4:2b:f3:80:c7:26:71:9d:a3:
         44:2c:ff:9c:76:67:f5:c8:aa:20:6a:01:f0:82:ac:04:de:fd:
         49:46:b6:b1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEjBJbzvJMeSnSMwNKO+Ytjc92XowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODg3RUNENDQxREM4MzA4QTNDNTU3MEQxRDY1REY0MzAy
NzgwRUQwODAeFw0yNjA1MjUxNDA3MTlaFw0yNzA1MjQxNDEyMTlaMDMxMTAvBgNV
BAMTKDI5MDJGMUY0NjU4RTI4NEZBMjY1M0Y1RTk3QzJFMjk4N0I0ODlBOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIQYSquIg8EPx8t78HIqoRxg0y
4mDNexCffZpu4/XjNH5v1ESnKMP7gkDi6jBJa/ajzIQXDpXIRbKjYY9zHB82vJ0v
52V+pA8Wj9FpF6gv68T/LbUVcOWjENkksvYSVklkHUq2CICDqzCH7oWqTyW9NbwK
oKEMz0NRURRQMT7b/WjvDQm/FGsy7Ro5Uh05peoCclzRpf/WrVT8C/gQRjtJQk3G
nWxrlnmyY7HQyGGDvgy35zCGr97+K4XZdYDeht0u4x6EixT/saWBWqvdAaNjH0OC
Db/y4o4Qxkjg9TwdD+E1H07aSyJMgtov+zdzZAoANAEejjoNBvDUFVQei6mPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUKQLx9GWOKE+iZT9el8LimHtImpowHwYDVR0j
BBgwFoAUiH7NRB3IMIo8VXDR1l30MCeA7QgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC84ODdFQ0Q0NDFEQzgzMDhBM0M1NTcwRDFENjVERjQzMDI3ODBFRDA4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg4N0VDRDQ0MURDODMwOEEz
QzU1NzBEMUQ2NURGNDMwMjc4MEVEMDguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM2MmUzMjMwMzkyZTMxMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1
MzMzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC60WwwDQYJKoZIhvcNAQELBQADggEBAIgDFb84
cYNvPEAZF30TCMzB8jCATGoSTzpWVaUCYJR3jOcLhlRLKx7St3qR4HeJHXdfUS1Z
lITR2YTyWyk5I8vk87xbOoQjgbJWd0oTMFUshStIVGEqNUqSz5ifHraAk0/r/+KF
XXbGOZwI72D4uM+7BiJ687AnrY5tZ/O9AL9HKDmWp+9FjoNmQ7XuCZ5wQL5ESUJa
6NYs/Yvs89Q1q/9iDPOyD0Wh/vB/2iVa1Db1Px4xQ+YlErvVvBOZiZnH2z70z10l
o4abLAws7UM6CyR5qZFXvuLRYKT62YG+pQnpS6Qr84DHJnGdo0Qs/5x2Z/XIqiBq
AfCCrATe/UlGtrE=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:38:33 2026 by rpki-client