Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          eQU+bLGsu+EDLRi/geQv5eYxv/VqM8aO2ogVnCtZIdI=
Subject key identifier:   E4:19:49:08:2D:BC:7F:37:7D:DF:B1:0E:01:E7:FE:8E:07:04:4C:91
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       58E464CF41375A1C68514895BA73DEE153A6FE4B
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
Signing time:             Mon 25 May 2026 14:12:19 +0000
ROA not before:           Mon 25 May 2026 14:07:19 +0000
ROA not after:            Mon 24 May 2027 14:12:19 +0000
asID:                     53153
IP address blocks:        186.209.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:e4:64:cf:41:37:5a:1c:68:51:48:95:ba:73:de:e1:53:a6:fe:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: May 25 14:07:19 2026 GMT
            Not After : May 24 14:12:19 2027 GMT
        Subject: CN=E41949082DBC7F377DDFB10E01E7FE8E07044C91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b1:8b:6b:3f:21:7e:69:fe:55:b6:a5:3a:0a:
                    9a:5f:9f:6d:0a:60:2b:7d:45:26:6b:f4:47:1c:0a:
                    5d:41:5f:e5:f5:f9:99:63:28:0e:7d:56:a3:5f:35:
                    e8:e1:19:7e:3f:33:ba:97:5c:cf:26:3d:39:1e:4b:
                    b3:98:a9:a2:0f:5b:e8:6a:d0:bc:d9:65:db:ce:24:
                    73:f6:ea:9b:10:75:76:8c:7e:26:f9:f0:35:20:23:
                    3a:c3:0d:8b:bc:ef:4e:f5:1d:78:af:91:3c:bb:fa:
                    58:33:85:9c:f3:41:38:af:ab:ca:b7:98:ef:ff:95:
                    e2:6e:70:81:1c:90:05:5a:da:76:ef:50:de:d4:32:
                    80:f4:2f:62:f3:be:a0:d3:43:1e:c8:d6:eb:bf:f9:
                    06:22:97:a2:e1:7c:c9:da:a4:15:7f:da:7c:94:33:
                    fb:66:e2:e3:07:ed:27:6f:2c:0e:1b:c0:b4:c8:7c:
                    08:4b:5e:9f:93:94:6e:f5:49:2a:85:27:6b:54:59:
                    5e:c0:6a:c3:c1:c1:b5:dd:a9:fb:d4:06:cd:dc:a8:
                    86:da:5e:ae:e4:89:f6:93:31:d5:a2:9c:b1:49:3b:
                    81:f2:78:57:e5:4a:af:6a:a3:a2:b0:67:91:04:54:
                    b0:c6:86:0e:4c:c0:db:d9:60:b5:00:36:7b:3a:3a:
                    22:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:19:49:08:2D:BC:7F:37:7D:DF:B1:0E:01:E7:FE:8E:07:04:4C:91
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:32:3a:19:eb:85:62:c1:b9:6a:fc:30:c3:ab:65:a0:b8:
         ee:72:f0:19:6c:c0:40:7a:76:80:dd:4b:7e:05:10:20:20:6f:
         aa:97:ce:eb:ba:2b:26:5f:23:40:0a:c6:ec:9e:d5:68:6e:01:
         3b:a0:4b:fd:ac:f2:83:3f:6f:de:92:27:45:38:92:8c:1d:4e:
         ca:8e:a0:e4:20:02:a7:78:42:b9:97:ac:d1:c6:88:14:87:3a:
         99:28:40:a9:f8:62:6d:99:45:5f:c6:67:9f:34:28:7d:1e:84:
         4a:31:ba:eb:21:7b:60:76:4a:54:e0:a3:ab:7f:be:69:45:1d:
         53:09:a0:d1:f2:37:b1:dc:08:29:40:39:bd:c3:f0:ab:90:e4:
         b0:48:5e:a6:1a:37:b5:b9:38:03:02:06:21:e9:3a:88:03:8b:
         cb:c7:67:d7:b9:35:9f:08:a9:0f:cf:8b:83:81:23:5f:40:81:
         c2:8f:8b:e7:30:b2:67:0c:d0:f3:9e:52:77:25:94:c1:d7:22:
         d3:03:52:b4:10:df:fb:9b:81:50:11:a9:d4:a7:0a:e5:de:05:
         14:18:5f:4e:a1:f9:bb:1b:fb:3d:72:24:97:8c:0c:d2:9e:e8:
         84:8c:ed:3b:fe:1c:cd:86:d3:f8:b0:b8:73:9a:c8:c4:59:52:
         43:d1:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:18:51 2026 by rpki-client