Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e3131312e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          rKR++L9AaTPZHEMkx9QvJPh/qNy8QZSWh2FqwE1S8TI=
Subject key identifier:   71:DA:91:80:51:5D:60:22:EB:2A:75:09:9F:27:28:64:AC:33:6E:38
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       60578E3A080F34DEA3BBCFA940768F079F455E7E
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:56 +0000
ROA not before:           Wed 29 Apr 2026 14:29:56 +0000
ROA not after:            Wed 28 Apr 2027 14:34:56 +0000
asID:                     53153
IP address blocks:        187.61.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:57:8e:3a:08:0f:34:de:a3:bb:cf:a9:40:76:8f:07:9f:45:5e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:56 2026 GMT
            Not After : Apr 28 14:34:56 2027 GMT
        Subject: CN=71DA9180515D6022EB2A75099F272864AC336E38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:aa:e6:d5:3d:8f:1d:f0:97:09:c0:72:0b:aa:
                    52:d5:8c:63:28:07:27:6e:58:93:1b:44:0e:dd:6f:
                    f5:8c:d7:3e:1a:0c:75:59:26:08:f3:e7:84:de:52:
                    6e:61:2c:2c:e4:1a:fb:0b:a3:5a:d2:a8:86:59:a8:
                    6c:92:d8:8d:62:7c:75:99:77:de:03:12:66:ee:ee:
                    8b:a6:48:48:93:b6:9a:5d:e0:f8:e7:f7:b9:89:be:
                    3a:71:44:0e:b5:5d:4f:4c:dc:0c:a6:d0:14:63:d7:
                    00:99:e3:ba:a7:b7:2e:7d:55:54:92:ca:b9:0b:6b:
                    a8:ef:56:f7:96:c9:44:b3:50:54:65:91:51:57:02:
                    5b:21:7a:0b:96:cb:0a:af:ac:05:63:b7:6b:53:aa:
                    65:c5:e4:a1:d6:8b:0e:f3:a4:1c:2f:a7:9d:c2:d4:
                    b7:bb:dc:e3:5b:1a:ae:5d:d4:9e:0d:86:f8:0c:b5:
                    19:cf:df:da:4d:a4:b4:63:0a:78:f0:4a:bc:32:99:
                    3a:b7:cf:1d:06:c7:b2:98:0d:af:dc:83:f4:a3:73:
                    5f:83:9b:22:45:78:42:eb:34:c6:e8:9e:d7:e1:5c:
                    9e:e5:d8:10:ab:db:aa:c4:51:dc:ff:5a:4a:93:dc:
                    24:94:3c:96:0c:cf:c1:24:54:d3:47:1e:9d:a3:65:
                    8d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DA:91:80:51:5D:60:22:EB:2A:75:09:9F:27:28:64:AC:33:6E:38
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e3131312e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:ff:c4:14:ad:26:7f:63:73:24:44:75:8b:63:6f:22:d1:67:
         fc:69:2f:19:68:dd:dd:2e:98:3c:9c:c8:7c:85:01:c2:e8:6c:
         4e:62:4d:0a:13:d7:5a:3c:f6:9d:e5:d9:c3:23:b5:e4:a5:5f:
         e8:6e:75:d4:3b:3e:89:15:26:8f:9e:3c:19:7b:de:6d:aa:bf:
         22:67:63:96:a0:a7:2f:66:65:ed:77:55:7a:2e:5f:34:4f:45:
         53:66:14:9f:82:50:c8:2a:58:80:83:6f:47:79:14:a7:e3:19:
         cf:3a:d8:08:0b:b8:7d:32:0e:4e:82:5a:a4:c9:80:f0:59:b3:
         a2:93:63:95:be:5a:e8:09:51:ff:24:d9:18:7d:ad:97:4f:96:
         95:7d:f6:37:b6:12:68:9a:05:07:d1:f8:2b:fc:66:d1:f8:3f:
         80:50:45:af:89:68:2f:53:d5:4a:22:75:94:02:56:2d:ff:72:
         3e:51:72:c2:25:a4:1a:ab:26:21:0c:96:3f:ac:80:bd:35:5a:
         7c:2a:87:ac:60:39:99:3e:7a:3c:34:e6:f0:03:a3:83:29:fc:
         97:a7:ea:ad:4d:02:60:14:d5:88:09:1b:cc:d0:96:e8:43:05:
         97:13:1a:38:ff:ff:ae:0a:e4:ba:3a:a7:0c:51:2a:65:3d:1b:
         3b:9e:c9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:51:56 2026 by rpki-client