Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa
File:                     3138362e3230392e39392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          YRKGybTUUtK7T4HVHhFISG9W6r27azeoa82omuM4fDo=
Subject key identifier:   DD:27:0A:EC:B6:CA:C1:75:27:CD:C7:D2:1E:74:D7:22:F0:75:DA:4B
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       699357F140E9107FEAD5D09DDD216C8A413FFF08
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:56 +0000
ROA not before:           Wed 29 Apr 2026 14:29:56 +0000
ROA not after:            Wed 28 Apr 2027 14:34:56 +0000
asID:                     53153
IP address blocks:        186.209.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:93:57:f1:40:e9:10:7f:ea:d5:d0:9d:dd:21:6c:8a:41:3f:ff:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:56 2026 GMT
            Not After : Apr 28 14:34:56 2027 GMT
        Subject: CN=DD270AECB6CAC17527CDC7D21E74D722F075DA4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:17:00:bf:a8:09:45:80:d7:6d:83:54:33:
                    a8:35:0f:87:cd:0d:1d:10:d4:32:79:e5:5f:96:46:
                    12:2a:79:ff:6e:e8:a6:ec:0b:7a:bd:07:a2:1e:0e:
                    61:d9:d0:db:2a:03:03:37:9d:9b:9b:d9:a1:7b:63:
                    e7:ac:3c:27:42:e1:35:c6:a4:42:bb:19:0e:61:c4:
                    25:47:16:60:92:98:41:73:5d:7e:03:76:90:b2:ed:
                    35:1c:4e:54:95:de:32:14:dd:e1:77:25:71:f6:90:
                    bd:a1:cc:53:90:72:07:6f:57:93:7b:30:d2:77:ea:
                    70:f7:0d:c5:0a:77:ce:5b:aa:f4:93:1c:64:19:2a:
                    2b:4d:23:a6:6c:3b:89:fc:56:ce:67:0f:a8:ae:c1:
                    c9:67:49:a6:ad:ba:62:fa:72:83:55:6f:55:b5:54:
                    96:6b:90:3e:a9:dd:b1:8b:6e:1f:3d:d5:5c:67:79:
                    a9:42:ee:05:f3:9d:ea:a4:ac:94:f1:84:16:73:ed:
                    ea:b3:02:8b:88:15:8d:1b:af:88:46:02:8f:26:8c:
                    a1:b0:35:93:49:1e:13:47:96:15:df:6a:0d:31:ae:
                    3e:bb:5e:de:f5:6f:ba:ca:15:ce:9c:ef:38:07:69:
                    48:34:3f:be:26:fc:b8:d2:cd:31:34:12:a2:cf:f4:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:27:0A:EC:B6:CA:C1:75:27:CD:C7:D2:1E:74:D7:22:F0:75:DA:4B
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138362e3230392e39392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:29:ce:26:c6:38:6b:b8:21:7d:12:db:98:59:0a:ce:3b:48:
         8f:86:eb:b3:af:25:e9:18:ad:e7:16:09:8b:c2:fe:32:2c:fe:
         75:c2:4d:2f:14:86:14:74:0c:ad:94:0b:e6:c9:ea:13:bb:06:
         13:0a:fc:c3:4d:49:67:a7:db:72:6d:29:ab:35:fa:82:b3:91:
         7b:1e:1f:b9:e4:45:ca:1f:f7:1e:c7:28:2c:cc:61:c7:b7:8e:
         4a:63:07:70:8a:0b:f2:9d:20:bd:c8:ff:7b:22:f6:34:22:64:
         a9:08:e5:67:57:f4:2d:6b:1c:6c:68:8a:4e:62:e3:81:79:10:
         49:a4:7e:fe:e7:51:ff:d8:e3:7f:1e:83:34:eb:44:fc:47:53:
         41:ea:d3:9c:e6:32:a6:f9:2f:52:51:9e:eb:cd:ef:98:d5:13:
         b3:8f:a0:d0:0c:cb:6c:be:91:b8:74:30:2e:e9:3d:e2:30:18:
         5c:27:ac:db:06:e1:f3:ab:f6:62:64:0e:8b:89:c0:fb:c2:ed:
         f5:5a:3a:6f:8b:c4:af:fa:cc:4f:64:ed:f1:a5:4a:79:fd:92:
         c5:bb:fb:1d:5b:5f:1f:66:46:80:fd:2b:0a:38:0d:1e:d7:f4:
         a8:e6:85:2f:11:ac:d0:fb:b4:bb:b2:50:28:88:cf:2a:b5:0b:
         56:af:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:52:55 2026 by rpki-client