Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3130392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          gZjbeSqISA+bSwsJo5MEFuAN2gWOWm78gvHLvyqIYDs=
Subject key identifier:   10:60:38:83:F8:4A:F2:E8:9E:56:8D:78:F1:11:2A:C9:AE:F1:A6:0B
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       3B4171E78A5D65619C6BAD48EF4DA8C0D84536C1
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:54 +0000
ROA not before:           Wed 29 Apr 2026 14:29:54 +0000
ROA not after:            Wed 28 Apr 2027 14:34:54 +0000
asID:                     53153
IP address blocks:        187.61.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:41:71:e7:8a:5d:65:61:9c:6b:ad:48:ef:4d:a8:c0:d8:45:36:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:54 2026 GMT
            Not After : Apr 28 14:34:54 2027 GMT
        Subject: CN=10603883F84AF2E89E568D78F1112AC9AEF1A60B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:f6:11:38:4d:49:e8:6a:c9:81:ad:6e:98:
                    cc:88:bc:3c:1b:3c:b8:07:5b:b8:97:c0:79:82:c1:
                    cb:7e:f3:72:6b:40:d7:62:26:b2:79:c2:da:a1:7e:
                    27:66:78:58:fc:e2:b4:17:63:e4:ad:81:59:e9:2e:
                    06:00:e0:94:8c:5a:0e:af:cd:1d:0f:35:6f:67:d5:
                    c5:41:b2:5f:6d:3b:56:0e:9f:59:e7:54:2b:5c:06:
                    b1:f9:56:44:f1:bd:bc:83:ca:46:45:4b:3d:d8:aa:
                    45:a8:6f:e5:83:00:4d:71:39:a0:d0:2f:23:58:2f:
                    1c:0e:16:9b:b9:9f:66:1c:d5:ee:46:3b:8b:f6:72:
                    d8:18:96:53:8c:0f:75:de:48:01:f8:4f:11:e2:9f:
                    75:79:73:73:de:bf:34:6a:91:95:03:cd:70:36:15:
                    0f:6f:8e:e1:ed:a2:ea:8b:ae:10:c5:f1:6b:57:b9:
                    d5:12:1a:88:90:0d:39:34:87:f8:33:85:41:be:f2:
                    6c:41:cb:8c:a9:c6:98:74:ee:c5:de:b3:19:d2:61:
                    df:af:f9:bf:5d:fd:33:5d:41:88:5f:cd:14:2d:e4:
                    38:07:b4:4a:5f:b9:ae:c1:0b:e9:71:e7:fc:69:f7:
                    68:f6:f5:1c:a6:76:82:8c:77:0f:69:86:9f:e5:0e:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:60:38:83:F8:4A:F2:E8:9E:56:8D:78:F1:11:2A:C9:AE:F1:A6:0B
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3130392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:eb:b5:d5:e2:ac:9a:2a:40:e0:8a:42:6c:36:03:0e:2d:68:
         9a:06:c4:88:88:40:6e:b6:92:a9:09:38:c6:91:b4:e2:70:50:
         5a:d2:41:bd:88:7f:74:5a:d9:30:ca:7a:16:ba:be:44:a4:a0:
         1f:6e:8b:70:af:78:7a:0b:8e:01:49:b7:fc:d2:2f:25:b0:21:
         cb:94:85:d8:76:90:03:72:b7:dd:9c:1a:30:7e:39:f4:b0:bb:
         6c:be:a7:49:cd:84:0f:22:a4:7b:7c:63:a9:95:81:34:d7:7b:
         ca:76:34:0e:13:64:f5:af:f5:59:f0:65:45:8f:9c:a5:62:73:
         d8:56:46:57:3d:91:ec:1a:50:29:e5:f5:22:f0:1e:52:39:e1:
         19:e6:6e:2d:7c:f7:17:3c:da:b2:35:d2:fd:2a:87:ce:68:42:
         79:97:52:ff:4f:fb:63:fe:9b:06:ef:36:24:4b:48:31:1d:e0:
         58:be:70:9d:80:4e:d8:a6:ce:d5:09:3e:7c:75:4c:d2:61:b2:
         82:82:46:b9:97:e7:f6:9a:e2:97:ab:59:90:cc:6b:27:a0:cc:
         b9:65:4d:66:e3:de:43:4f:17:d2:48:a3:33:a7:e0:be:0d:c4:
         24:da:ce:32:f5:6d:59:32:e4:90:98:0a:80:35:59:52:3f:9f:
         27:60:bd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:52:27 2026 by rpki-client