Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          IJAqivpY5Y62bafrJbiNcc2H/OpykSSm4oMz1FyfR9I=
Subject key identifier:   17:32:E3:D4:BF:D6:E3:9C:4D:78:21:49:A1:03:5A:F6:88:0A:14:09
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       213D3F9C3F5B1285DE3EAFEBBD3030E0086F569B
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:56 +0000
ROA not before:           Wed 29 Apr 2026 14:29:56 +0000
ROA not after:            Wed 28 Apr 2027 14:34:56 +0000
asID:                     53153
IP address blocks:        186.209.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:3d:3f:9c:3f:5b:12:85:de:3e:af:eb:bd:30:30:e0:08:6f:56:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:56 2026 GMT
            Not After : Apr 28 14:34:56 2027 GMT
        Subject: CN=1732E3D4BFD6E39C4D782149A1035AF6880A1409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:e5:2d:66:2d:14:7e:6a:66:f4:37:25:76:
                    3b:64:e9:af:b1:f9:98:02:fb:79:74:7d:47:9f:d9:
                    2f:f4:b9:09:f3:37:16:a8:bb:2b:c3:64:6e:29:8c:
                    bd:da:a8:bb:bd:e2:55:65:65:73:ee:1b:08:ef:ef:
                    8f:9b:87:26:96:68:6b:43:17:52:93:f7:e0:c1:51:
                    07:05:0b:a3:a0:c3:15:2a:d8:c7:ce:e6:2f:e4:55:
                    4e:e8:1c:ad:0d:05:d4:e2:e6:08:9b:87:9c:b9:09:
                    54:b0:c3:d3:23:2b:a5:9f:66:8c:6d:f8:cc:e2:4c:
                    ee:93:42:3a:37:bc:42:86:2a:77:b1:d7:20:9c:55:
                    71:8a:4f:28:9a:f8:f7:80:49:0f:75:a1:81:8a:66:
                    d4:99:2e:c3:43:2f:08:8a:d3:41:58:fc:3d:a9:ff:
                    d6:27:db:38:b4:a2:30:b1:1a:a9:4f:6f:a5:73:06:
                    11:c0:10:99:a5:4c:f4:42:b4:4a:93:ff:de:b2:5a:
                    31:87:bd:1e:c6:9e:fb:bb:1a:c0:13:e9:27:11:70:
                    3f:d9:30:b2:29:ef:9e:d9:38:6a:4a:8c:f3:aa:95:
                    94:03:4c:ef:15:9c:4b:b3:10:82:f7:c3:bb:c9:80:
                    d8:3c:05:5b:bb:5d:4a:55:a4:1a:52:a3:99:c7:d2:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:32:E3:D4:BF:D6:E3:9C:4D:78:21:49:A1:03:5A:F6:88:0A:14:09
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e3131312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a1:06:9c:58:d0:7d:ca:68:9f:a9:ba:a1:d8:5b:05:e6:79:
         78:00:e8:93:e7:ef:70:8b:06:76:02:4a:12:f9:f1:b7:14:f8:
         de:17:d9:1a:c7:8f:3b:22:c8:37:12:a3:97:da:26:7f:8c:1a:
         80:96:6e:b2:37:a7:1b:11:4b:03:2c:46:32:29:97:05:f5:c2:
         0b:7a:47:06:d6:2a:7b:13:36:d2:16:90:af:81:3e:d7:47:fd:
         fd:87:96:f3:d2:c3:9d:13:47:86:08:2a:7a:bf:15:bf:37:f8:
         c2:13:e9:11:0e:d3:f4:6a:dc:64:23:d2:6f:99:3a:07:18:3c:
         2d:35:11:01:24:f9:45:fa:28:f5:3f:a3:38:8e:4a:d4:74:f4:
         00:80:c4:6b:6b:79:59:ee:29:97:b1:bd:c9:57:e6:6c:49:3e:
         75:7f:7c:d9:b1:c5:78:3e:39:dd:85:73:bf:50:9d:b6:7c:62:
         c1:c4:2e:66:70:0e:b9:41:90:91:a6:87:74:cd:ea:c4:69:fa:
         74:9b:d1:85:55:cb:ae:09:c6:c8:66:d3:73:ee:9f:66:84:d2:
         d7:2e:94:24:1b:7b:33:e2:62:3f:5a:63:99:5d:86:70:6f:51:
         9d:be:51:e7:27:d9:f1:bb:ff:db:3d:21:7a:fd:ab:c9:35:84:
         2b:ee:5a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:53:25 2026 by rpki-client