Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          EWwqFesB/n3DNtWYJxr8d8EPk1nqLD2QoAsl0D140Co=
Subject key identifier:   EC:24:96:60:CD:E3:14:5D:D7:2E:BE:23:C3:94:43:72:F4:5E:6A:39
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       57F0281D470BA88AE10263F4299538FAF5A0EDE8
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:55 +0000
ROA not before:           Wed 29 Apr 2026 14:29:55 +0000
ROA not after:            Wed 28 Apr 2027 14:34:55 +0000
asID:                     53153
IP address blocks:        187.61.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:f0:28:1d:47:0b:a8:8a:e1:02:63:f4:29:95:38:fa:f5:a0:ed:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:55 2026 GMT
            Not After : Apr 28 14:34:55 2027 GMT
        Subject: CN=EC249660CDE3145DD72EBE23C3944372F45E6A39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:87:59:76:ce:b1:43:6e:3f:e1:08:db:fd:f1:
                    ca:af:be:c1:4f:97:20:26:82:69:da:e3:cc:c8:73:
                    4f:c9:3a:43:27:df:9d:1c:70:69:ad:f3:bb:ea:ec:
                    52:eb:ce:e6:96:9d:38:88:92:d6:c3:c0:aa:15:6f:
                    bd:87:8f:52:33:23:67:51:07:ba:52:7f:c9:b5:90:
                    88:a1:13:c7:1c:c6:9e:ab:c8:43:ad:c2:80:b8:3b:
                    05:8e:68:f2:7f:9f:5d:9c:60:ff:3d:95:4e:ce:42:
                    2e:dd:4d:11:10:4e:06:dd:ad:98:af:3e:57:d6:e8:
                    de:18:9b:1f:31:aa:91:8a:95:90:f7:22:61:19:d9:
                    8d:f3:80:2f:7e:bc:d3:1f:89:e2:75:44:03:42:95:
                    4e:71:4f:4b:5b:69:ca:08:7a:81:1e:be:79:cd:1c:
                    d6:f0:42:ae:8a:cc:95:a2:25:ae:50:9b:3e:0d:04:
                    9b:33:78:83:6f:72:66:af:35:ee:29:a6:f1:58:24:
                    6a:cf:f5:70:0e:2b:65:fe:12:fc:a8:17:5f:e6:6e:
                    6c:b1:0c:da:88:d5:fa:4b:f8:cc:58:20:0e:55:c9:
                    24:8f:36:d0:6a:35:16:8a:f2:44:82:30:59:40:3c:
                    18:ee:7c:75:e2:d9:55:f6:98:89:43:e2:ae:a5:db:
                    4c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:24:96:60:CD:E3:14:5D:D7:2E:BE:23:C3:94:43:72:F4:5E:6A:39
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130372e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:79:74:ac:95:1a:97:e1:71:48:4b:ce:62:8a:3e:cf:69:31:
         8b:b4:44:e9:1b:ba:4c:a5:5e:3a:4d:53:3e:b4:2e:c9:08:24:
         4d:d1:5d:82:7b:be:26:cf:6f:dc:56:f8:85:15:e8:38:94:7b:
         ec:34:8e:3e:de:48:61:86:c1:38:eb:48:51:78:7f:6d:60:e2:
         f7:d5:a9:74:ef:10:c8:af:2c:29:9e:be:9c:7f:09:a6:8c:ee:
         0f:95:8e:3f:c9:59:bb:da:90:e7:59:05:35:05:8e:07:f6:71:
         0a:34:91:1b:17:5f:9f:c3:54:ea:67:d6:ab:fa:c0:6a:32:8a:
         1c:3f:d6:0d:fc:ca:d6:ab:0b:9b:3c:19:44:4b:5f:3d:e7:b3:
         9d:1e:86:7d:b2:0c:8f:e2:7f:8a:c6:34:70:c9:a3:b8:75:d5:
         a3:3e:3b:b6:c2:6a:76:cb:8f:94:7a:79:6a:eb:41:4f:3a:23:
         8e:f0:35:d3:6a:2e:51:12:54:12:ee:b1:b9:dc:3a:12:a7:6a:
         33:5a:44:10:01:c3:e5:a3:ee:4d:2a:b2:1b:0b:38:8a:2c:68:
         3d:e7:ca:9f:56:2c:6f:76:94:6e:33:4b:25:94:1f:25:5e:94:
         8f:2e:bf:cc:2f:b4:d5:dc:76:56:4b:b9:0e:24:c0:75:5c:d7:
         2b:33:af:b6
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV/AoHUcLqIrhAmP0KZU4+vWg7egwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODFGOTY5OTg5MjJFQTIxRkExMDEzMzcwRUFCODQ4MEU1
RURCOUY1QzAeFw0yNjA0MjkxNDI5NTVaFw0yNzA0MjgxNDM0NTVaMDMxMTAvBgNV
BAMTKEVDMjQ5NjYwQ0RFMzE0NURENzJFQkUyM0MzOTQ0MzcyRjQ1RTZBMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOh1l2zrFDbj/hCNv98cqvvsFP
lyAmgmna48zIc0/JOkMn350ccGmt87vq7FLrzuaWnTiIktbDwKoVb72Hj1IzI2dR
B7pSf8m1kIihE8ccxp6ryEOtwoC4OwWOaPJ/n12cYP89lU7OQi7dTREQTgbdrZiv
PlfW6N4Ymx8xqpGKlZD3ImEZ2Y3zgC9+vNMfieJ1RANClU5xT0tbacoIeoEevnnN
HNbwQq6KzJWiJa5Qmz4NBJszeINvcmavNe4ppvFYJGrP9XAOK2X+EvyoF1/mbmyx
DNqI1fpL+MxYIA5VySSPNtBqNRaK8kSCMFlAPBjufHXi2VX2mIlD4q6l20zfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7CSWYM3jFF3XLr4jw5RDcvReajkwHwYDVR0j
BBgwFoAUgflpmJIuoh+hATNw6rhIDl7bn1wwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm5zZHRMdG1xcEgzUFBtYnJzTHNIWGhtN2p4a1ByVHNkSnJudmdOelJC
SmgvMC84MUY5Njk5ODkyMkVBMjFGQTEwMTMzNzBFQUI4NDgwRTVFREI5RjVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzgxRjk2OTk4OTIyRUEyMUZB
MTAxMzM3MEVBQjg0ODBFNUVEQjlGNUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJuc2R0THRtcXBIM1BQbWJyc0xzSFhobTdqeGtQclRzZEpybnZnTnpSQkpoLzAv
MzEzODM3MmUzNjMxMmUzMTMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMz
MzEzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAuz1rMA0GCSqGSIb3DQEBCwUAA4IBAQCaeXSslRqX
4XFIS85iij7PaTGLtETpG7pMpV46TVM+tC7JCCRN0V2Ce74mz2/cVviFFeg4lHvs
NI4+3khhhsE460hReH9tYOL31al07xDIrywpnr6cfwmmjO4PlY4/yVm72pDnWQU1
BY4H9nEKNJEbF1+fw1TqZ9ar+sBqMoocP9YN/MrWqwubPBlES18957OdHoZ9sgyP
4n+KxjRwyaO4ddWjPju2wmp2y4+Uenlq60FPOiOO8DXTai5RElQS7rG53DoSp2oz
WkQQAcPlo+5NKrIbCziKLGg958qfVixvdpRuM0sllB8lXpSPLr/ML7TV3HZWS7kO
JMB1XNcrM6+2
-----END CERTIFICATE-----
Generated at Thu May 7 00:51:13 2026 by rpki-client