Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          J7H9DwiVrvWUj2lUNqMpSaERtCQzW9afx8byPP/vJlA=
Subject key identifier:   AB:61:5A:63:C8:82:C9:C8:D6:C1:D1:F8:9A:72:A2:8F:BD:DB:49:85
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       79A2588CC7D8E494D5FFB4A6FA6B03FF8CDD72C2
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:57 +0000
ROA not before:           Wed 29 Apr 2026 14:29:57 +0000
ROA not after:            Wed 28 Apr 2027 14:34:57 +0000
asID:                     53153
IP address blocks:        186.209.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:58:8c:c7:d8:e4:94:d5:ff:b4:a6:fa:6b:03:ff:8c:dd:72:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:57 2026 GMT
            Not After : Apr 28 14:34:57 2027 GMT
        Subject: CN=AB615A63C882C9C8D6C1D1F89A72A28FBDDB4985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:b5:bf:5e:8c:2c:87:24:66:64:23:89:24:
                    fe:2e:e6:82:19:4e:d3:c3:e0:5d:24:90:54:fc:89:
                    74:62:f7:69:42:33:e4:20:3a:1a:64:5e:ea:45:2e:
                    a6:58:de:63:03:ac:9b:c4:0b:3c:e1:06:e6:2f:ec:
                    fe:32:ad:b8:99:bd:a4:5b:7a:cb:a0:7c:26:27:36:
                    f5:ca:10:de:ea:2b:ff:7a:67:cf:f7:b6:67:d0:7e:
                    c3:17:36:d3:3c:cb:8d:1b:93:ff:6f:d3:1b:2f:cb:
                    e3:d8:c8:bb:09:00:0a:bc:9e:33:ea:e7:df:bb:49:
                    c2:6d:78:fc:e1:e2:93:b9:db:2e:15:c6:a7:5a:75:
                    24:24:d0:8e:92:ad:ad:9e:ee:90:51:ca:49:38:50:
                    50:62:03:48:dc:b0:e6:21:96:fc:63:05:aa:fe:e4:
                    e5:3d:c2:21:a1:9d:fb:a7:5f:6b:d1:83:a4:ae:dc:
                    6c:9a:0d:3c:a6:82:a6:d2:b2:47:5d:0c:2d:0e:77:
                    72:5f:b2:23:64:2c:f5:fb:70:5d:f7:15:b9:98:d1:
                    ce:3d:f7:85:e9:2e:0c:b6:4b:c3:ce:21:00:4a:c6:
                    27:a2:68:a9:53:87:c1:e8:99:a1:8c:7f:8e:d4:fc:
                    3b:db:f4:6c:6c:e8:4a:92:95:27:b3:49:3d:52:97:
                    e9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:5A:63:C8:82:C9:C8:D6:C1:D1:F8:9A:72:A2:8F:BD:DB:49:85
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130342e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:bf:fe:d2:4f:bb:89:47:07:e8:31:2d:27:39:2e:cd:b7:
         ae:db:5e:12:b4:fc:b0:a8:5d:bb:67:81:16:83:4c:20:ef:7b:
         fe:ff:82:f8:40:c6:aa:09:10:a4:f0:0a:43:ba:5d:95:d7:e1:
         44:44:76:9b:a4:61:ba:48:82:c8:ff:dc:75:2e:d1:5f:39:da:
         16:b8:b8:24:31:7b:09:da:85:3c:62:fa:1c:bb:52:f2:06:b2:
         cb:b3:9c:b0:3e:09:e1:c3:2f:e0:2a:fa:ed:2f:85:f8:66:ee:
         c2:d1:3e:e3:50:55:b5:9b:1e:81:69:ed:f9:d2:4c:b8:a0:d0:
         2b:8d:46:ac:68:de:a2:8e:30:45:ee:21:6b:13:a6:72:61:e1:
         b2:57:d1:51:76:81:da:43:25:4d:7a:95:50:bb:ae:18:40:2a:
         6a:0c:3f:8a:8f:e3:b5:33:8c:fc:b8:2e:81:72:97:22:2a:1d:
         b1:de:fe:ca:da:de:94:c5:98:89:a3:9f:c9:cf:ec:38:ef:fa:
         45:bf:54:45:4b:8f:1f:c1:58:ea:97:2d:54:3f:c5:7b:74:59:
         03:83:30:9f:89:7b:0f:a9:42:58:59:42:91:4d:61:13:55:3d:
         4e:42:93:86:bb:65:46:8c:02:61:25:ff:73:73:2f:71:47:15:
         8f:e3:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:53:25 2026 by rpki-client