Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa (raw, json)
Hash identifier:          jcSnqDhI89cqIMkqvk0XT7SKu/Z1gY+EIFiKp9Mj5+I=
Subject key identifier:   F4:20:8C:DF:24:6D:08:43:A9:21:EF:94:1E:C2:91:FD:DE:50:C7:D4
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       1D2D42CDFEEB286BCD51762FE241D36487AE582C
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:43 +0000
ROA not before:           Thu 27 Aug 2026 16:09:43 +0000
ROA not after:            Thu 26 Aug 2027 16:14:43 +0000
asID:                     262757
IP address blocks:        186.224.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 Oct 2026 22:57:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:2d:42:cd:fe:eb:28:6b:cd:51:76:2f:e2:41:d3:64:87:ae:58:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:43 2026 GMT
            Not After : Aug 26 16:14:43 2027 GMT
        Subject: CN=F4208CDF246D0843A921EF941EC291FDDE50C7D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:83:da:ba:18:98:d3:fb:73:c0:9c:ed:17:c8:
                    48:e7:04:4b:90:98:ac:f9:dc:61:84:ed:1b:4b:53:
                    0a:4f:e8:33:f7:26:bf:7a:83:e3:80:25:4e:2e:d9:
                    70:44:00:5d:56:2e:eb:1d:52:70:2e:7f:0a:5b:4f:
                    fe:22:ac:82:80:56:c2:b1:07:4e:95:7d:53:0a:fb:
                    a0:ad:67:46:b2:58:02:96:73:68:ba:b3:fe:17:28:
                    de:c8:d4:72:82:c6:a4:49:09:56:e7:b3:11:5f:b7:
                    7c:f9:b6:6a:cb:06:98:44:d9:fe:06:c4:87:d1:25:
                    ed:70:4d:22:83:65:ba:11:c1:f9:62:c7:53:34:c6:
                    a8:fc:24:6d:07:c0:c9:df:d6:d0:09:80:fa:0b:b2:
                    bc:13:85:18:d0:84:2a:65:47:10:30:d9:e8:3b:d4:
                    e6:63:ab:b0:9c:92:a0:97:ff:87:38:16:1f:cb:e5:
                    17:7d:44:56:a5:e1:f5:1c:c3:93:7e:66:a8:b1:db:
                    ec:4d:88:b3:4d:4d:dc:10:92:15:13:3f:78:ab:ce:
                    74:28:e8:bb:da:ed:c1:b2:88:14:80:f8:b3:18:0d:
                    9e:4f:d6:00:13:ef:5a:ab:98:e6:5c:1d:da:6a:03:
                    0a:b2:41:49:db:53:fb:67:70:33:86:fb:27:98:04:
                    c0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:8C:DF:24:6D:08:43:A9:21:EF:94:1E:C2:91:FD:DE:50:C7:D4
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32332d3233203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:03:32:16:c4:64:e8:4f:0b:11:b5:e5:32:5e:41:c0:39:
         08:5f:05:3f:29:05:dc:07:66:cd:cf:69:04:f1:d9:95:bd:b3:
         fe:ae:93:a0:0d:42:5d:19:f7:16:64:dd:83:48:4a:2e:3c:4d:
         d4:50:23:f7:3c:32:7a:d3:39:57:5f:06:b5:d9:fa:8c:0b:cd:
         96:a2:f0:96:85:c8:8b:b8:19:99:5a:67:6d:bb:2d:22:ab:93:
         bc:db:de:d7:0f:9d:5a:f2:3e:6b:d6:ac:9c:f6:0f:95:e1:5d:
         12:a5:89:8c:63:87:aa:0b:6e:40:9f:a5:9c:d1:15:4b:8e:b6:
         12:51:23:c7:21:75:7b:2a:45:50:43:95:3a:82:18:a1:61:c7:
         9f:2f:a5:e4:a8:15:51:07:53:b2:d2:9a:5a:cd:ba:d5:c2:73:
         2f:e4:fa:1c:f8:34:39:ea:59:18:f4:67:ad:9e:0c:c4:43:ba:
         3a:9b:93:b1:5c:a4:3e:6a:a5:a1:2d:3f:87:36:d4:1f:6e:3c:
         d3:c5:81:8b:e2:87:34:83:6f:46:ba:10:30:2d:0e:38:f5:48:
         51:ea:e1:ee:f0:e2:5f:59:e2:a3:4e:11:b5:9d:81:d7:8e:4b:
         ba:ed:24:69:86:16:d0:ca:a7:93:9d:f0:75:f8:45:1d:02:c8:
         67:f7:ab:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:22:36 2026 by rpki-client