Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa
File:                     3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa (raw, json)
Hash identifier:          d/vQxbfFNa9GVQhzRnOfZrrAwu3TiKLFjghctxcErF8=
Subject key identifier:   20:DD:CA:E1:A5:6B:3A:69:E6:4A:74:62:F6:D7:AB:8E:F0:15:45:72
Certificate issuer:       /CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
Certificate serial:       1EB69031BE088FEB75EAE74B4F2609142CA2AFA3
Authority key identifier: 61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa
Signing time:             Thu 27 Aug 2026 16:14:42 +0000
ROA not before:           Thu 27 Aug 2026 16:09:42 +0000
ROA not after:            Thu 26 Aug 2027 16:14:42 +0000
asID:                     262757
IP address blocks:        186.224.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl
                          rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Oct 2026 17:02:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b6:90:31:be:08:8f:eb:75:ea:e7:4b:4f:26:09:14:2c:a2:af:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=610318F23FD4B6E376995989B3A7A0F9E2E29E48
        Validity
            Not Before: Aug 27 16:09:42 2026 GMT
            Not After : Aug 26 16:14:42 2027 GMT
        Subject: CN=20DDCAE1A56B3A69E64A7462F6D7AB8EF0154572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cf:9a:8d:02:84:66:cd:fb:c0:f5:33:7a:46:
                    11:5a:1c:5c:43:73:8c:05:77:a1:5b:51:cd:9f:58:
                    9b:c9:98:0f:28:4a:25:98:da:e7:c3:90:a9:98:03:
                    a0:e0:0f:84:e7:18:fc:14:9c:b6:55:ca:35:b2:e6:
                    47:0a:97:84:0b:9c:ba:bd:86:92:3c:f7:74:b1:5f:
                    46:49:77:90:5d:51:10:f5:aa:97:69:03:f3:c9:50:
                    a8:e0:43:d6:37:92:00:bd:78:a7:e3:51:f4:6b:a0:
                    f2:17:ed:9a:38:d5:d6:83:7c:71:8a:92:29:ed:27:
                    50:71:0a:aa:51:df:c0:12:3a:a2:02:41:0d:c0:d5:
                    27:4e:60:82:7c:01:1e:df:71:ef:d4:99:fb:bb:5a:
                    e4:ad:bc:c6:54:4a:37:d8:84:bb:ef:93:36:ae:1e:
                    44:c1:32:ea:ec:92:6a:43:1d:f1:58:ea:f5:40:1b:
                    fb:98:3d:c0:a1:fa:eb:b2:dc:ae:fb:fa:1c:3e:5a:
                    26:3c:14:49:0b:2c:69:3d:8b:b3:95:c2:82:03:80:
                    2a:81:cd:27:04:c7:7d:77:63:28:fd:61:e7:1a:f6:
                    c5:10:16:14:77:ff:df:d1:cf:7b:96:8f:e8:e9:0c:
                    d2:28:fc:98:79:f1:75:02:15:47:5a:a0:91:23:8c:
                    b1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DD:CA:E1:A5:6B:3A:69:E6:4A:74:62:F6:D7:AB:8E:F0:15:45:72
            X509v3 Authority Key Identifier:
                keyid:61:03:18:F2:3F:D4:B6:E3:76:99:59:89:B3:A7:A0:F9:E2:E2:9E:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/610318F23FD4B6E376995989B3A7A0F9E2E29E48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/610318F23FD4B6E376995989B3A7A0F9E2E29E48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87cqKd7e9rRmHBEJHXXFNgAq5PdDMkUadjHLENPHZBpw/0/3138362e3232342e39362e302f32342d3234203d3e20323632373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.224.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:52:72:8e:da:ce:78:05:2e:db:74:a8:9e:60:32:f5:a9:c1:
         36:1d:56:6a:0f:1e:46:c7:12:dd:ee:83:50:44:34:0c:a1:03:
         a0:8f:cf:a7:0e:32:76:b2:ea:89:d8:23:21:f7:20:07:4c:bb:
         fe:04:e4:e6:b0:a3:a2:c8:77:e8:5b:98:ff:a7:5a:d2:d8:68:
         48:ea:df:61:a5:b6:f5:13:c5:16:1d:b0:fa:11:49:78:91:96:
         44:e8:b8:ce:ca:f6:9d:e5:ab:13:1c:b0:61:eb:b7:ee:e3:cd:
         fd:7e:5e:bc:be:ab:5e:42:96:ee:89:38:74:cc:36:de:59:90:
         e2:93:a4:29:8a:16:b9:73:c7:81:33:45:a6:b0:d5:c5:5b:5b:
         98:c1:ce:00:30:4b:81:b7:e8:83:b2:cd:d5:b7:c3:cd:d7:0e:
         f8:a0:d2:a6:c1:02:5a:25:2e:c6:11:d0:96:93:5f:1b:4c:bc:
         08:6c:f2:08:80:58:9b:db:63:15:53:bb:2e:6d:6f:61:de:de:
         66:7d:de:2e:3b:56:f6:81:96:3f:29:e4:8c:91:f4:6b:cd:64:
         fe:42:22:9a:e3:7d:81:6c:42:3d:35:3a:c6:04:ee:59:1c:ab:
         48:bd:7c:0e:28:fa:f4:61:98:3d:7d:24:75:80:76:ae:a2:78:
         57:79:d4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 01:50:50 2026 by rpki-client