Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39372e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          L8pJnkmNjmLEzfUG2sF3IRNOzGzLW49QXTToyEpzsZ8=
Subject key identifier:   93:00:37:B2:DA:F0:2F:52:04:3A:7B:9F:ED:47:17:74:83:4C:82:35
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       42223A1A944E143E18D248B40F96F90F1C226522
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:56 +0000
ROA not before:           Wed 29 Apr 2026 14:29:56 +0000
ROA not after:            Wed 28 Apr 2027 14:34:56 +0000
asID:                     53153
IP address blocks:        187.61.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:22:3a:1a:94:4e:14:3e:18:d2:48:b4:0f:96:f9:0f:1c:22:65:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:56 2026 GMT
            Not After : Apr 28 14:34:56 2027 GMT
        Subject: CN=930037B2DAF02F52043A7B9FED471774834C8235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:de:44:bb:8e:ae:bc:ac:a9:79:11:1b:91:
                    ea:85:ff:3b:07:e9:87:c3:f5:a3:15:7b:21:7e:99:
                    2b:3b:5c:12:24:b9:84:42:d0:a1:50:cc:6b:2f:59:
                    a6:4d:73:b5:af:e2:cb:19:f3:75:63:89:7c:7b:c4:
                    bb:53:41:ae:6c:99:54:01:ca:13:7f:98:e8:48:3b:
                    ca:c4:f5:1c:04:a3:f8:87:e3:21:f4:72:93:3f:79:
                    de:60:3e:fc:3c:5f:a9:fa:46:65:f9:07:09:32:e5:
                    8c:8e:6a:1b:60:0b:14:7a:35:3d:53:20:c4:62:e3:
                    03:2f:ed:47:8f:d3:c2:a6:be:7f:09:b1:f0:18:54:
                    da:1c:20:f2:38:bf:a6:68:bb:18:8b:ff:0b:8a:89:
                    32:bd:6c:24:3f:85:e6:89:0b:1d:98:93:91:94:f6:
                    7b:c5:97:31:ee:31:55:e8:50:95:6d:f8:84:d3:ec:
                    e4:48:08:0d:01:6d:be:f4:f9:7c:b3:01:ca:86:fb:
                    b0:63:db:23:a3:a2:0a:ac:4e:98:27:21:bd:55:cc:
                    f8:12:76:8f:e2:73:fc:bc:cf:d1:c0:7d:ed:fb:0c:
                    ec:da:d9:d6:e6:3b:1d:be:79:b3:48:63:57:8a:fa:
                    6f:37:a3:6d:a3:fe:4c:9a:c2:5b:ce:ea:49:a7:ab:
                    33:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:00:37:B2:DA:F0:2F:52:04:3A:7B:9F:ED:47:17:74:83:4C:82:35
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39372e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:db:57:90:4a:96:c4:50:69:11:c4:6e:c8:c7:ab:9a:c3:
         2b:86:3c:ab:25:b8:8e:38:05:9e:39:7a:d3:73:0c:d5:f1:cb:
         11:df:ee:18:0e:55:69:3e:c6:83:dd:01:80:af:11:c6:12:b2:
         d3:31:e0:4d:01:c0:7a:06:5a:c7:bd:d3:0f:1e:fa:90:71:4d:
         0c:0e:68:87:6f:c7:df:6e:25:92:4b:88:3e:43:72:85:be:36:
         c6:04:b2:30:e8:c4:95:b7:e2:7d:37:87:25:02:c9:52:1e:4c:
         2c:91:3e:8f:7a:92:1d:bc:4d:e6:32:47:23:73:3c:af:63:a1:
         aa:c2:90:8f:53:69:3d:25:89:d7:22:cb:74:14:9d:38:17:50:
         b8:a7:44:40:2d:2b:e0:a8:16:3f:56:4b:c5:a7:e2:a9:88:58:
         e0:15:6d:a8:f9:8e:39:76:e0:35:8e:5b:64:8b:66:57:98:26:
         82:22:64:da:09:59:91:b0:66:e8:2e:c1:ed:3c:da:53:7f:86:
         99:06:7b:84:cd:c5:13:3f:e8:ab:87:d9:59:4c:3a:d1:30:7b:
         a3:6f:3d:f3:8d:d9:7a:36:6c:8d:1f:4b:1a:66:27:2e:f6:3f:
         ba:14:43:52:49:41:20:36:2f:3f:fd:42:d5:c2:40:4f:71:54:
         a3:cd:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:51:13 2026 by rpki-client