Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          482i0CepR5rBNUMoz2SptsnXDD8YCQld6oCXab9UeAA=
Subject key identifier:   7F:70:39:D4:8D:1D:ED:12:7D:A8:53:1C:BF:ED:D3:43:03:67:DE:E3
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       65A01EEC6B29981F130DCED4AB9528A481522B8F
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:41 +0000
ROA not before:           Thu 27 Aug 2026 16:09:41 +0000
ROA not after:            Thu 26 Aug 2027 16:14:41 +0000
asID:                     262757
IP address blocks:        186.224.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a0:1e:ec:6b:29:98:1f:13:0d:ce:d4:ab:95:28:a4:81:52:2b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:41 2026 GMT
            Not After : Aug 26 16:14:41 2027 GMT
        Subject: CN=7F7039D48D1DED127DA8531CBFEDD3430367DEE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:4d:f3:e3:c9:88:9a:a0:70:50:3c:7c:2a:
                    02:d7:a6:60:fb:5d:2e:a0:56:73:7d:e9:3b:28:b8:
                    a5:c2:0a:0d:d1:bd:e4:d8:52:0a:eb:90:42:01:a3:
                    fa:76:fe:e3:f0:1b:88:d5:6c:45:0b:fb:a0:01:e8:
                    02:84:f5:23:a7:68:5b:19:de:45:30:37:4e:c8:4e:
                    7a:39:3a:f8:2c:ef:52:d7:67:a4:3c:14:b2:e1:1a:
                    0b:58:46:c4:1a:27:f2:d0:fc:f1:9e:31:16:71:73:
                    b0:f1:81:67:10:c1:8a:49:0c:f9:ff:83:4a:48:00:
                    be:47:4f:92:63:8a:b1:5e:52:e1:50:51:34:92:b4:
                    6f:f2:c2:21:9f:cb:7a:49:7d:e1:9a:e5:b2:a9:b2:
                    e8:da:6f:48:46:c1:1b:60:9d:ed:b8:82:0c:9e:f5:
                    30:0e:fc:9b:bd:a0:6c:86:1a:da:8b:e3:8f:27:7c:
                    85:ed:21:e5:02:aa:9b:57:a4:82:50:9e:08:f9:62:
                    b8:d7:e2:36:4f:79:23:81:52:f0:46:35:05:98:6e:
                    f7:d4:42:9c:87:71:5d:5d:d1:7c:b2:8f:ac:11:b9:
                    f3:fa:25:c6:9d:3a:3a:cd:e5:b7:86:d9:1d:5d:76:
                    4b:58:d1:aa:ab:6f:ed:c6:46:05:49:c0:b6:8e:8f:
                    0d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:70:39:D4:8D:1D:ED:12:7D:A8:53:1C:BF:ED:D3:43:03:67:DE:E3
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e3131392e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:13:e2:77:de:50:b6:6a:78:30:e5:57:f3:25:52:ca:76:72:
         71:f0:2b:9d:5d:b7:9b:56:65:0d:6f:a5:0b:ca:ed:47:a1:d4:
         cf:2e:3c:32:76:f4:51:5b:9e:c9:39:35:45:2f:96:2a:03:f6:
         11:a7:39:44:94:40:61:ac:cc:fb:8a:28:aa:10:85:af:92:f1:
         86:1c:2e:d2:a0:f8:d6:ea:aa:e0:fe:6e:24:4e:76:18:69:aa:
         d2:c4:ef:c6:9e:3d:61:cd:18:23:e8:e9:c8:18:93:7a:80:08:
         90:79:83:a6:1e:99:c7:be:a3:bb:f2:01:d3:4d:2f:08:fb:0c:
         3e:2d:a3:25:7e:cf:6d:86:83:da:27:b9:71:e9:7d:e1:1f:e4:
         9f:04:c1:88:a2:61:5b:25:ee:26:8c:33:9b:09:0e:06:cb:64:
         6a:e4:78:f1:57:4a:4a:82:f3:fa:c1:78:33:f5:07:f3:b0:a4:
         4d:00:19:c8:53:06:5c:1f:5f:13:5b:a9:1b:39:90:67:ea:a0:
         d7:0e:93:4d:2b:bf:16:73:f2:ec:6e:2b:2a:6a:b4:3b:7a:7a:
         c9:01:6a:e9:f7:5a:13:af:e6:0f:46:eb:94:59:85:3a:26:ee:
         2b:52:2a:8d:dc:9c:70:f3:b9:d0:50:2e:4d:0c:e5:6c:fa:9c:
         08:8b:39:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:18:58 2026 by rpki-client