Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130322e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130322e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          4AYxh1FoFJa3Y9+d8SOKMW2x01k047ut8OhHiN4exCk=
Subject key identifier:   E0:60:CF:86:BB:B8:18:CE:7C:8B:91:CC:93:08:2B:C6:07:E5:2A:52
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       5F81632885BDED1FDA9728F54F9B11ADEB07CDA5
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130322e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:56 +0000
ROA not before:           Wed 29 Apr 2026 14:29:56 +0000
ROA not after:            Wed 28 Apr 2027 14:34:56 +0000
asID:                     53153
IP address blocks:        186.209.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:81:63:28:85:bd:ed:1f:da:97:28:f5:4f:9b:11:ad:eb:07:cd:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:56 2026 GMT
            Not After : Apr 28 14:34:56 2027 GMT
        Subject: CN=E060CF86BBB818CE7C8B91CC93082BC607E52A52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:f1:7a:d1:a4:df:cf:5c:cf:27:4e:44:45:
                    4c:3b:73:27:11:b7:13:42:67:5d:9b:96:db:ee:2c:
                    d9:de:db:f5:87:d1:a8:06:12:7f:21:51:dd:b1:e3:
                    9a:95:35:cb:81:49:68:e8:39:46:5f:64:29:fb:fd:
                    7f:72:87:6d:7a:f8:2c:e9:76:cc:b1:23:37:d2:1f:
                    1a:f7:38:81:7f:81:42:df:08:a2:c9:35:11:a2:73:
                    68:74:35:f8:0e:cb:59:5a:cf:f4:56:28:73:38:aa:
                    1c:61:81:f3:cf:65:37:23:40:f7:1f:69:6e:ad:07:
                    37:10:34:20:31:74:b0:07:dd:8f:15:54:69:c9:2f:
                    3f:9a:42:18:78:1b:1a:02:42:94:8c:21:a8:d1:8a:
                    5a:e1:6e:cd:4c:db:63:fe:c3:02:f3:c1:e6:06:3c:
                    dc:70:fc:d4:cb:d4:25:8d:95:38:ab:83:4f:67:c7:
                    3a:ad:80:b9:58:af:dc:4c:a1:02:8b:38:56:91:3d:
                    c8:8c:a5:4b:bd:3a:91:a0:d2:d7:39:21:5a:42:68:
                    d5:60:0f:50:bc:6e:cd:d7:ee:12:51:2e:97:0e:c8:
                    5b:8e:22:78:fa:bf:66:f5:d6:e8:fa:ac:b0:82:e1:
                    67:20:4e:ba:49:63:3b:5d:09:7e:53:40:e0:a1:09:
                    62:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:60:CF:86:BB:B8:18:CE:7C:8B:91:CC:93:08:2B:C6:07:E5:2A:52
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130322e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:29:04:93:7b:59:32:d3:db:e0:8e:22:4c:eb:0c:c4:a7:
         b2:a9:90:91:2c:13:bc:81:35:4e:c4:f8:0e:50:87:8a:b3:9d:
         6d:1f:20:4e:87:2a:0d:4c:80:ac:05:b6:bc:20:98:a0:a0:d0:
         9f:f7:7e:b0:0c:23:bc:8e:82:63:c5:a7:13:2c:03:7b:eb:e8:
         58:77:6f:64:5a:71:e7:b3:ca:6b:45:60:a6:dd:09:b1:a8:bc:
         34:74:09:86:3e:62:b0:1d:e0:9f:d6:81:2f:14:07:1f:3b:ac:
         45:86:f1:50:12:d4:ba:9b:7e:3d:0d:e4:fe:17:5b:61:6c:f5:
         99:f8:7b:5e:73:59:14:02:98:ff:a1:82:cb:2a:ec:ff:59:d8:
         61:77:d5:6f:f9:32:ab:11:3e:07:cb:14:64:bd:05:da:ec:c4:
         e9:3b:cb:3c:72:f0:c7:93:40:1c:a2:74:bd:5d:0f:f2:62:6d:
         e0:01:7a:47:d0:3f:c7:90:b5:38:8f:7e:f7:49:60:b8:e8:c7:
         b8:f0:e9:07:6c:37:a5:b2:8f:7c:9e:61:07:14:ba:8f:e3:06:
         20:1d:6c:d1:1e:c4:92:2e:f9:1b:89:e9:e5:b1:f2:4b:0d:99:
         86:0b:76:38:0d:0f:26:78:4f:8d:01:25:19:8e:d7:c8:dd:32:
         32:e3:14:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:53:48 2026 by rpki-client