Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e20323636303631.roa
File:                     3138362e3230392e3130352e302f32342d3234203d3e20323636303631.roa (raw, json)
Hash identifier:          QlOLA2cmMrv4hI3xGGPFkWEQrAfdPyqlirMuuran+4o=
Subject key identifier:   FD:95:BA:9E:0D:B2:23:7B:C7:89:87:7F:E7:15:82:0D:9E:FE:5D:67
Certificate issuer:       /CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
Certificate serial:       2D10BE2D62E3509BB7BABF9B2D1F886C4ABAF57D
Authority key identifier: 88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e20323636303631.roa
Signing time:             Tue 20 Oct 2026 15:26:19 +0000
ROA not before:           Tue 20 Oct 2026 15:21:19 +0000
ROA not after:            Tue 19 Oct 2027 15:26:19 +0000
asID:                     266061
IP address blocks:        186.209.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Oct 2026 06:56:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:10:be:2d:62:e3:50:9b:b7:ba:bf:9b:2d:1f:88:6c:4a:ba:f5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=887ECD441DC8308A3C5570D1D65DF4302780ED08
        Validity
            Not Before: Oct 20 15:21:19 2026 GMT
            Not After : Oct 19 15:26:19 2027 GMT
        Subject: CN=FD95BA9E0DB2237BC789877FE715820D9EFE5D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:b6:91:ec:30:da:c2:47:ad:1b:32:a9:9d:
                    ce:b8:ed:06:22:0f:bd:01:6e:94:79:06:aa:93:90:
                    a2:c7:f1:6e:00:84:3f:ba:07:b9:71:59:41:83:0f:
                    cb:d0:3b:17:d5:74:f9:ae:dd:54:2f:c6:e6:3b:16:
                    46:78:dc:98:27:00:26:bb:a0:aa:fb:c3:3c:fd:4a:
                    f6:89:aa:6e:f2:18:3c:41:3b:4a:2e:6e:31:a2:18:
                    66:5d:d4:69:ca:82:51:7b:62:99:9e:49:ec:ee:ca:
                    3d:56:f5:91:48:ac:78:73:28:b0:61:00:e9:16:a0:
                    6c:5f:95:be:63:b4:33:63:4e:06:3d:ce:2b:ea:09:
                    bb:03:bb:72:32:fe:e3:9b:1f:6e:4c:07:85:34:1c:
                    80:c8:04:75:80:5d:af:67:df:50:07:0e:f1:c1:31:
                    0d:f3:71:4b:20:47:4c:87:69:89:b7:b5:d6:ff:86:
                    f7:d2:1e:e2:6e:20:89:5b:ce:b4:88:71:50:08:f3:
                    1f:01:bd:a7:df:1b:dd:ed:47:41:47:78:68:ac:e6:
                    c4:aa:e5:d2:c1:74:bf:b7:60:c5:cb:dd:a9:22:7a:
                    89:b2:c0:9d:69:04:e2:d6:aa:6f:8a:e0:ce:fe:69:
                    98:b4:da:9a:ac:c5:c4:63:5b:3e:30:a8:0b:7a:db:
                    17:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:95:BA:9E:0D:B2:23:7B:C7:89:87:7F:E7:15:82:0D:9E:FE:5D:67
            X509v3 Authority Key Identifier:
                keyid:88:7E:CD:44:1D:C8:30:8A:3C:55:70:D1:D6:5D:F4:30:27:80:ED:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/887ECD441DC8308A3C5570D1D65DF4302780ED08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/887ECD441DC8308A3C5570D1D65DF4302780ED08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3130352e302f32342d3234203d3e20323636303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:5e:84:b9:da:3f:c8:22:ea:53:d3:ba:b0:91:f1:a6:cf:96:
         35:e1:7c:58:df:34:20:ec:3d:80:2c:6d:59:6e:4a:0d:7a:37:
         67:45:d2:9f:ef:6f:25:24:20:87:8c:32:af:ac:a4:8d:8b:88:
         86:37:b1:c7:a1:01:cf:c5:bb:32:9b:2f:ed:cd:e1:4c:c7:fb:
         f0:bb:3b:da:75:ed:0f:a2:37:49:4e:68:4a:93:2c:fd:f0:19:
         c9:9f:48:1e:c0:9b:9e:db:48:c7:d6:78:05:b1:0e:1f:ca:2f:
         37:57:4f:14:4a:da:3c:ec:4b:6f:4a:e5:70:f5:79:5d:35:fc:
         93:2c:46:b4:04:2e:72:05:08:89:f7:54:db:49:80:c4:b9:8e:
         65:49:cc:37:66:78:0c:21:6e:81:9b:5d:c9:5e:34:35:52:ce:
         5b:f6:df:58:b3:b9:b4:9c:6f:a3:a3:d7:93:d5:77:e1:5c:da:
         fb:73:90:14:b2:7c:cb:ad:63:bc:c6:26:51:a7:37:d0:d9:b9:
         d6:50:7f:07:8d:f1:31:8d:9a:c9:63:3f:96:bf:d8:ad:06:3a:
         9c:eb:41:ff:bd:24:5c:20:b5:63:ca:98:bc:d2:66:64:29:cf:
         d7:93:18:49:04:14:cd:7c:16:62:59:57:a2:97:e5:25:26:31:
         36:00:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:18:37 2026 by rpki-client