Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          qCmWMZ43kLDBHaaNXvPJ6PJ+B0utN+Ko/58i8CDg37w=
Subject key identifier:   0B:95:71:6C:98:C7:0A:7F:9C:D3:E3:71:61:B3:3E:4A:6C:5F:2C:9B
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       4C3C46CD5983FE66A85C48EFE63DBEBE9637A8C4
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:57 +0000
ROA not before:           Wed 29 Apr 2026 14:29:57 +0000
ROA not after:            Wed 28 Apr 2027 14:34:57 +0000
asID:                     53153
IP address blocks:        186.209.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:3c:46:cd:59:83:fe:66:a8:5c:48:ef:e6:3d:be:be:96:37:a8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:57 2026 GMT
            Not After : Apr 28 14:34:57 2027 GMT
        Subject: CN=0B95716C98C70A7F9CD3E37161B33E4A6C5F2C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:ac:c2:40:72:d6:d3:71:44:11:16:32:55:
                    53:aa:b3:27:2f:fb:f0:84:c0:d9:a9:bd:96:72:c0:
                    5d:77:c0:b9:76:28:0c:54:21:f9:e5:42:6a:7d:ed:
                    fc:da:53:3e:22:0f:15:ba:2b:fc:f7:d2:9c:ce:e6:
                    5c:bc:71:40:9d:cd:97:0c:95:9f:95:87:7e:8f:01:
                    c8:89:96:77:b8:4a:14:8c:a7:cc:fc:ee:34:12:25:
                    ff:c1:0d:aa:94:67:a1:e9:d3:5f:80:33:6e:27:b7:
                    a2:51:48:92:31:d2:39:28:f0:6e:e5:43:a8:15:16:
                    86:ef:db:69:36:fd:df:fa:cf:17:71:8f:70:f6:e5:
                    a5:5b:13:e7:72:2f:3b:4b:ac:85:c8:f1:d1:a1:b7:
                    72:41:c2:00:31:7e:61:bd:49:67:71:dc:34:f6:fd:
                    27:8d:eb:cb:f5:6a:a8:7e:34:15:b8:43:fb:13:ba:
                    7d:e1:6b:54:91:93:15:92:44:2d:a0:2f:1f:08:46:
                    f2:20:31:5a:9f:bd:e9:30:32:b6:36:46:ce:a7:b0:
                    31:bf:91:08:68:80:24:80:74:da:3c:6c:89:e0:86:
                    83:2b:55:42:b3:a8:f9:59:7f:f6:b6:4c:1c:31:23:
                    9e:c1:4e:50:8f:b2:ab:74:ba:aa:01:2b:bf:e7:3e:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:71:6C:98:C7:0A:7F:9C:D3:E3:71:61:B3:3E:4A:6C:5F:2C:9B
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:df:3e:21:ad:eb:73:4d:cc:fb:c6:2a:07:60:4e:38:a6:ec:
         9f:f0:a7:ae:ab:0a:a3:84:20:c1:0f:71:05:be:5b:ac:84:a7:
         c2:27:96:47:5b:fa:20:db:bd:b6:16:0e:4e:7b:a6:7c:57:bb:
         1d:73:b0:03:14:6a:54:1c:07:f3:1e:b4:ce:49:f1:c8:53:57:
         a1:9e:ff:64:b9:6d:5c:50:7c:c4:c2:18:64:4c:f5:ec:2f:ea:
         58:53:93:79:91:9d:82:4a:f2:ac:df:37:4f:0a:d1:44:42:57:
         06:20:a4:7c:ba:06:e7:81:dd:5a:79:3e:d7:62:79:b4:5e:0e:
         57:a4:93:18:6b:c7:6c:b4:3e:3a:6c:6b:af:21:84:2e:30:5f:
         f2:2d:6e:e2:10:72:d8:b2:19:ea:6a:87:ef:cd:9d:7c:3c:7e:
         78:c6:9b:35:6d:e5:0e:7b:94:06:f7:9b:87:d1:90:19:ab:6c:
         a7:1d:30:cb:e8:98:0b:66:ee:c9:a3:26:59:1e:07:7b:b0:95:
         0d:bb:9f:fd:e2:a2:33:71:7e:c9:74:8b:15:2e:8c:0b:74:a1:
         73:b1:e1:c6:09:1b:6e:e3:5c:c9:4a:49:14:35:73:f2:b8:06:
         fa:9c:3a:a2:80:82:fd:63:ae:ed:a0:cc:c2:d5:e7:2b:ee:14:
         4f:96:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:53:03 2026 by rpki-client