Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          0f/nAEaKfYUODY+x+X5GFEb0UjcX/F0zi5d+s+TLTuw=
Subject key identifier:   D6:FB:FF:D8:14:E2:60:88:57:25:1D:EC:7F:A5:BF:52:BA:10:D0:57
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       630173C73DCE7A7A3DAE664C733F6E911F87955E
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa
Signing time:             Mon 25 May 2026 14:12:19 +0000
ROA not before:           Mon 25 May 2026 14:07:19 +0000
ROA not after:            Mon 24 May 2027 14:12:19 +0000
asID:                     53153
IP address blocks:        187.61.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 14 Jun 2026 20:25:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:01:73:c7:3d:ce:7a:7a:3d:ae:66:4c:73:3f:6e:91:1f:87:95:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: May 25 14:07:19 2026 GMT
            Not After : May 24 14:12:19 2027 GMT
        Subject: CN=D6FBFFD814E2608857251DEC7FA5BF52BA10D057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:6d:8a:22:6c:63:12:5e:2b:64:27:bf:b8:
                    f5:d9:2d:90:fc:ac:dd:c2:60:ca:d1:c0:6e:48:23:
                    3b:ac:28:65:7b:63:77:fb:df:ea:e9:1f:3b:d0:5f:
                    00:5f:48:45:f6:e7:0a:5b:d3:56:d8:9b:8e:f4:16:
                    21:2c:a3:a2:a6:9a:dd:4a:aa:6d:27:1d:7a:c3:4a:
                    3d:47:a4:73:2e:bc:dc:1d:0e:a0:b3:0a:fa:e0:91:
                    c1:d9:2b:05:60:47:cc:c5:44:98:ce:a6:94:14:80:
                    9e:ac:a1:10:5c:fd:95:e7:ff:46:5d:b2:e8:e1:4a:
                    92:77:1d:66:12:05:c1:10:c1:dc:bf:56:f1:ac:0d:
                    79:77:67:f2:86:ad:41:26:96:54:14:de:80:99:82:
                    27:33:59:79:83:de:a9:36:6b:aa:fe:05:b2:b9:66:
                    84:96:80:47:88:90:4f:0e:55:ea:0f:e9:b1:1e:f5:
                    ac:3b:4a:9e:3c:a6:23:90:43:d6:59:57:b3:f0:1a:
                    4e:db:5f:99:9f:4e:5b:50:0e:9d:88:77:1a:00:97:
                    4e:3c:a2:8a:2d:c8:20:7e:f6:b0:87:f2:7f:67:fc:
                    58:c0:5f:26:18:fd:17:96:b6:ab:4e:bf:ab:af:86:
                    8a:6d:71:98:52:9b:11:79:1d:02:ea:9b:d0:d4:fe:
                    e6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FB:FF:D8:14:E2:60:88:57:25:1D:EC:7F:A5:BF:52:BA:10:D0:57
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1b:74:41:1a:a8:3c:80:ee:e1:4d:af:02:bf:cc:f9:3d:e2:
         1e:c8:35:1b:b4:87:da:fc:4b:7d:1d:f5:78:f5:c9:b7:9f:be:
         59:4d:cb:00:93:91:ac:3b:b3:37:e8:71:5e:a7:1f:ba:21:e6:
         5e:e4:a0:83:8f:db:4c:99:fb:5b:aa:6b:4f:36:22:64:71:76:
         fc:9f:de:ca:3c:5d:6d:e7:c6:a1:61:80:38:af:9f:d3:8f:6a:
         86:09:e5:45:5a:de:fc:ff:b9:fa:8f:63:b3:c4:f9:d6:06:0c:
         88:64:06:64:4e:fe:f5:8e:ec:08:3b:ff:0a:56:66:b2:4d:d4:
         58:27:5c:a8:8b:89:8a:c2:c9:6d:2a:c6:28:75:39:a5:ff:3e:
         df:23:c8:6e:8a:4d:81:72:7e:28:c6:69:14:93:a9:3b:79:53:
         ba:b3:ea:66:0d:a3:23:37:fc:9c:6a:15:55:aa:9f:a1:88:0e:
         ec:5c:9c:ba:39:c1:41:9c:17:7b:ef:e2:11:5c:c6:ee:98:28:
         6f:1a:ad:6e:f9:09:fd:ae:89:1c:cd:1e:4c:a8:71:2c:6f:7e:
         32:af:ea:86:3c:b5:a3:6f:fd:d4:97:ae:8f:5e:1b:37:ca:28:
         79:98:4a:76:e0:ee:50:21:83:1b:38:6d:6c:5c:55:79:17:75:
         d0:ce:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:35:51 2026 by rpki-client