Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          ZKzl60JHFtSORFnegqiweto7MTqxqkUWbRwulRYq+i0=
Subject key identifier:   69:A3:8A:0C:63:B6:4F:B2:CE:21:7B:C4:F4:BA:24:16:E3:40:7C:16
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       5909809E9EAB6074145C92C775CD27927F60EC05
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
Signing time:             Mon 25 May 2026 14:12:19 +0000
ROA not before:           Mon 25 May 2026 14:07:19 +0000
ROA not after:            Mon 24 May 2027 14:12:19 +0000
asID:                     53153
IP address blocks:        187.61.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:09:80:9e:9e:ab:60:74:14:5c:92:c7:75:cd:27:92:7f:60:ec:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: May 25 14:07:19 2026 GMT
            Not After : May 24 14:12:19 2027 GMT
        Subject: CN=69A38A0C63B64FB2CE217BC4F4BA2416E3407C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:f6:96:8a:6b:0b:68:0e:84:db:3b:39:4e:a5:
                    4d:8c:08:1a:d8:20:85:27:21:dc:95:dd:16:df:7a:
                    25:fd:c2:35:16:2e:a2:b0:b0:9c:1f:b7:96:64:10:
                    fd:48:70:3a:40:45:3f:42:70:ad:f5:a1:1e:91:e8:
                    a9:a7:c8:34:95:a4:73:13:5b:b7:eb:5d:ba:b3:01:
                    7f:48:b4:a7:2e:23:d6:d4:7a:4d:f5:38:24:6c:34:
                    92:48:ba:a9:3a:46:5d:a2:46:47:29:be:10:85:68:
                    81:c6:59:f2:4c:3d:1a:f9:df:f7:2b:0d:99:af:c7:
                    9f:db:b5:3e:a2:e2:57:ba:18:11:22:d6:4c:0e:95:
                    09:94:3f:fa:e8:44:b2:90:58:ed:e9:79:2c:46:10:
                    4f:36:3f:fa:a8:af:57:69:7e:1a:63:f9:40:3f:f9:
                    a7:d6:b8:3c:91:b6:03:0e:18:00:46:16:9f:75:e9:
                    62:3f:bc:cb:49:9b:38:6c:24:c2:b0:35:01:d0:5d:
                    a6:2a:81:9e:4e:fe:a9:b3:09:b5:f2:93:f5:07:a9:
                    30:44:51:88:ec:d6:93:bb:8b:e1:d8:c2:73:44:9b:
                    93:d3:f4:61:06:29:c5:ef:be:69:65:56:0c:1e:57:
                    c3:15:3b:6e:cd:9a:e5:df:ed:d4:9a:b5:56:bd:aa:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A3:8A:0C:63:B6:4F:B2:CE:21:7B:C4:F4:BA:24:16:E3:40:7C:16
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:28:80:ae:8e:92:59:05:74:94:40:16:ef:59:81:34:68:e3:
         75:d0:e7:c1:52:c7:b7:a9:63:00:2c:e5:a6:ad:fd:0e:53:01:
         3e:0b:0d:7f:c0:c4:9f:d2:7f:5b:95:8d:fc:1b:61:5d:6d:be:
         29:92:8b:8c:66:23:ac:ed:bb:59:56:92:e0:4e:b6:f1:2d:57:
         7c:b0:35:8a:cd:7f:bb:77:a9:82:74:2f:3c:ae:b7:93:07:80:
         a7:12:40:57:91:97:65:40:80:a1:4a:a9:f8:7e:f0:15:42:cd:
         b6:80:a9:a8:a1:3b:7c:7b:c4:6c:b9:3c:60:09:c9:b4:5d:74:
         c3:05:47:33:0f:9f:da:40:5f:42:f8:6f:e1:7a:47:94:3a:90:
         8f:06:8d:26:e0:68:a6:08:93:46:bc:0e:ea:01:b2:15:79:af:
         8e:0c:d3:2b:17:bf:d5:b6:a7:e3:8a:3a:81:07:90:c4:8d:24:
         cf:e8:5c:1a:50:8b:db:1d:e8:72:f9:79:15:4c:fc:74:d2:49:
         ee:f9:ac:41:41:de:3b:07:63:5e:41:bd:11:22:4b:81:89:16:
         04:8b:cc:cb:5d:28:d4:4f:aa:48:55:89:ba:6a:85:54:26:5b:
         75:c9:8a:95:a3:cd:fa:95:69:70:f3:e6:5e:a7:84:74:2f:ac:
         ea:31:e1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:35:48 2026 by rpki-client