Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa
File:                     3138372e36312e39392e302f32342d3234203d3e203533313533.roa (raw, json)
Hash identifier:          iABcyZD5ZWE0AyaW4leoI/s4D5onxHLClCJeNCNZbko=
Subject key identifier:   1D:E7:AD:D5:3F:A9:C4:4D:74:66:83:66:50:B5:47:DA:D6:A2:E2:83
Certificate issuer:       /CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
Certificate serial:       3B6A6AAEA0E544124D6A6104FD70F7CA53F8AF2A
Authority key identifier: 81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa
Signing time:             Wed 29 Apr 2026 14:34:54 +0000
ROA not before:           Wed 29 Apr 2026 14:29:54 +0000
ROA not after:            Wed 28 Apr 2027 14:34:54 +0000
asID:                     53153
IP address blocks:        187.61.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 07 May 2026 14:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6a:6a:ae:a0:e5:44:12:4d:6a:61:04:fd:70:f7:ca:53:f8:af:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81F96998922EA21FA1013370EAB8480E5EDB9F5C
        Validity
            Not Before: Apr 29 14:29:54 2026 GMT
            Not After : Apr 28 14:34:54 2027 GMT
        Subject: CN=1DE7ADD53FA9C44D7466836650B547DAD6A2E283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:0f:0f:fd:28:19:68:16:89:ba:f5:d6:00:
                    35:e4:db:08:cc:b1:1d:82:b0:12:9c:b6:7b:28:4b:
                    f3:5a:85:39:08:88:31:c8:fe:cd:9c:1c:54:b9:bf:
                    0a:17:95:09:ef:33:de:f1:a9:5b:a2:c0:6f:06:cc:
                    cd:54:e7:50:30:54:f7:a1:81:48:12:bd:b1:d9:ac:
                    fa:d9:56:5c:3f:b8:2f:2c:4b:e2:59:19:85:bd:59:
                    59:f5:1d:c4:50:af:f8:b0:2b:f8:ef:b3:db:b7:d7:
                    9e:03:df:eb:23:50:f5:a6:c9:a0:2a:50:b6:08:32:
                    82:ff:af:21:b8:8e:f0:0c:08:6d:43:a9:40:d1:fb:
                    ae:3d:a5:93:d8:40:e7:cb:75:51:9c:1b:0e:ce:7c:
                    f0:93:8b:fa:d2:a2:ad:7b:ed:00:4e:ba:a9:6a:f9:
                    21:fa:69:46:4a:c2:98:b3:6e:3a:4a:7f:7f:b8:a6:
                    a4:b9:57:0d:fd:04:30:2c:97:19:f0:a1:25:1c:fc:
                    ea:08:b9:b6:09:ef:bc:fa:fe:74:65:79:1b:f0:5d:
                    3b:f7:14:81:f5:c8:31:4f:8d:cf:ca:86:fa:e0:35:
                    ed:73:e3:8f:41:05:d7:c2:70:58:83:ef:d5:c1:f8:
                    68:38:69:6e:ce:61:a1:09:87:da:81:e7:9d:1b:8d:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E7:AD:D5:3F:A9:C4:4D:74:66:83:66:50:B5:47:DA:D6:A2:E2:83
            X509v3 Authority Key Identifier:
                keyid:81:F9:69:98:92:2E:A2:1F:A1:01:33:70:EA:B8:48:0E:5E:DB:9F:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/81F96998922EA21FA1013370EAB8480E5EDB9F5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F96998922EA21FA1013370EAB8480E5EDB9F5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/3138372e36312e39392e302f32342d3234203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:36:0d:06:d7:6e:3e:eb:ca:eb:a8:2b:38:1f:f3:0a:1b:
         e1:72:2c:cd:80:bc:72:2c:78:54:a4:a5:04:b0:c2:56:e7:05:
         dc:23:64:87:3c:56:ae:d3:5a:58:83:60:ae:50:c2:1e:2d:39:
         c2:91:53:b2:85:fd:ec:38:63:04:ed:e8:99:4b:00:79:c2:4a:
         ed:d2:1b:36:bd:0a:27:d2:2d:4d:1d:fe:99:d8:b4:e4:a8:a7:
         8e:4f:90:76:3d:63:de:ce:56:ed:1e:28:e3:df:b1:43:b7:5c:
         9b:f0:b9:57:72:59:af:86:38:e8:02:62:77:3a:d3:87:9c:bc:
         3f:7e:87:fd:b0:ff:f6:01:3e:d6:ed:01:71:39:69:09:2f:f7:
         44:ad:4a:95:71:6b:a8:da:bb:5d:af:04:b8:eb:45:2f:73:b0:
         93:fc:4e:54:5e:19:e4:25:ee:7e:65:7b:53:01:38:ab:e2:ad:
         89:f2:04:8c:18:63:c5:9b:8b:f8:7d:71:6b:4f:90:b3:78:ea:
         3c:87:d6:30:e8:10:2e:a5:74:00:28:80:4c:1a:5b:5a:41:5a:
         5a:92:21:58:c3:ce:bd:d1:9e:9d:7a:35:a2:3b:64:29:7f:13:
         e7:0c:6c:01:3d:09:87:c4:b6:4f:92:e9:86:a7:c4:b8:fe:3c:
         3b:4f:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 00:51:36 2026 by rpki-client