Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa (raw, json)
Hash identifier:          QJj/OAtJut0ip4Ljz8n3RJC43NNEmGaCyyI6Vg/hXDs=
Subject key identifier:   1C:F0:B9:51:C2:DE:58:C4:63:1A:69:EB:05:85:3B:57:6E:E3:94:FE
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       506538874CB3DA9B4903CD287B07DF2375C3CE41
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:44 +0000
ROA not before:           Thu 27 Aug 2026 16:09:44 +0000
ROA not after:            Thu 26 Aug 2027 16:14:44 +0000
asID:                     262757
IP address blocks:        186.224.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:65:38:87:4c:b3:da:9b:49:03:cd:28:7b:07:df:23:75:c3:ce:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:44 2026 GMT
            Not After : Aug 26 16:14:44 2027 GMT
        Subject: CN=1CF0B951C2DE58C4631A69EB05853B576EE394FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:64:9f:f7:9f:9f:95:65:d0:f3:52:4a:f9:
                    f3:36:f2:b4:71:15:b0:7c:9d:f4:73:11:75:22:83:
                    ec:8e:4a:44:49:da:5c:67:ff:5c:17:a6:47:5e:cf:
                    75:79:b3:fb:9a:5c:67:3b:1f:6e:33:09:33:25:ec:
                    9d:e0:14:0e:0b:af:f4:c0:53:5a:b3:0f:1e:a7:9e:
                    8c:17:d0:26:96:9c:1f:1d:1d:de:38:c6:79:15:db:
                    c4:7c:c3:22:61:86:32:50:de:e4:26:a0:df:e8:bc:
                    72:2f:bb:41:ca:35:6a:cb:b8:eb:eb:e0:61:d7:75:
                    6b:eb:06:df:a3:e8:5c:b3:9c:7c:79:e0:de:92:10:
                    25:b8:c8:93:c8:89:0d:94:5a:8c:57:6c:b1:17:41:
                    62:ea:ad:f7:e0:8f:2a:f6:d9:53:30:18:61:e4:4b:
                    48:03:18:b1:dc:4e:f0:f2:42:e6:67:27:39:f8:31:
                    8a:7e:44:a7:17:10:87:8b:32:4c:15:6e:1f:a3:55:
                    18:3d:95:d4:54:32:53:9a:ab:c0:5b:a9:df:7f:dc:
                    aa:c6:c0:5c:fc:68:a9:6e:3f:4a:78:c4:9b:a4:c9:
                    51:18:c6:eb:21:4d:a3:c0:b3:e6:6b:38:27:ae:cd:
                    3c:a2:23:e2:7b:33:19:58:a9:61:d1:21:5d:98:59:
                    64:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:B9:51:C2:DE:58:C4:63:1A:69:EB:05:85:3B:57:6E:E3:94:FE
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32322d3232203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:59:14:ff:24:d5:b8:67:bc:ea:fe:47:5f:2b:81:86:40:2d:
         53:aa:2b:5c:7b:ac:08:ca:b9:22:fe:7c:67:18:00:66:1d:fd:
         f8:51:8d:9a:0a:3f:d7:bd:eb:b1:84:5a:66:5e:c5:bd:b1:65:
         c3:9d:58:4a:dc:8c:d6:66:e3:04:ce:0e:e5:3c:2d:bb:05:01:
         c4:40:21:d5:11:d5:cb:63:6e:36:a5:ef:5d:df:6e:76:7c:fd:
         d8:c9:10:5f:69:9a:3b:3e:e7:49:8d:5e:40:c6:9f:4b:17:f9:
         16:e1:d6:03:08:d7:49:47:36:cb:79:52:02:2c:08:22:5a:55:
         c5:8a:6f:2b:38:46:09:c6:0d:d1:0d:ab:dd:31:30:48:ca:2d:
         b3:ae:25:c5:a5:08:d7:85:0e:ab:71:e4:70:e0:cc:a9:ec:8d:
         b8:54:98:58:cf:96:87:e9:6e:7e:a8:e6:a7:03:77:ce:e2:47:
         6b:14:01:a5:62:68:70:d9:83:17:4a:7c:10:3e:cd:a9:e4:26:
         ca:ac:43:1e:3b:e6:c4:fe:2c:61:2f:17:cb:ab:b9:40:07:d4:
         36:fb:cc:d9:c5:32:2d:c7:ba:69:3f:a8:e7:ad:88:ee:11:a5:
         42:ed:59:b1:c7:61:b1:83:94:58:03:bc:ee:f9:1b:d3:20:a8:
         ca:f8:cd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:33:17 2026 by rpki-client