Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
File:                     3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier:          uS/c929Vp5K/OpAViuPnotBMsWLojeefMRwfLNOoitM=
Subject key identifier:   69:BB:64:6E:F2:D2:3B:19:A9:9A:7F:9A:DE:F7:E4:89:61:32:2B:DA
Certificate issuer:       /CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
Certificate serial:       4011C1E757CB670D3C35E295FDC8E74B112CC9C8
Authority key identifier: D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
Signing time:             Thu 13 Aug 2026 20:51:04 +0000
ROA not before:           Thu 13 Aug 2026 20:46:04 +0000
ROA not after:            Thu 12 Aug 2027 20:51:04 +0000
asID:                     262403
IP address blocks:        187.61.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl
                          rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 05:29:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:11:c1:e7:57:cb:67:0d:3c:35:e2:95:fd:c8:e7:4b:11:2c:c9:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02C5635F1D83800E7A8ED97154EC2A18CA501BC
        Validity
            Not Before: Aug 13 20:46:04 2026 GMT
            Not After : Aug 12 20:51:04 2027 GMT
        Subject: CN=69BB646EF2D23B19A99A7F9ADEF7E48961322BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:cf:2e:be:32:29:97:f1:ac:6b:4b:21:47:
                    a4:45:5d:76:8c:6e:27:8b:20:7f:0f:18:56:bc:9d:
                    92:97:e6:46:49:d5:e5:0e:0f:45:23:74:ce:14:fb:
                    85:a0:7c:08:b2:c8:a7:60:a4:12:58:88:59:1e:ae:
                    aa:ed:4a:28:35:ce:f6:ac:18:94:4b:2d:cc:84:8a:
                    7e:ae:3d:66:e5:3b:4c:6e:69:e4:90:32:b5:b5:35:
                    97:1c:5b:64:5f:aa:b9:f7:6f:b1:af:ac:ff:fb:ee:
                    13:f9:1d:c6:c1:61:c1:69:03:89:ba:21:fa:1b:50:
                    51:ce:d8:98:03:de:dc:dd:1b:26:ee:57:84:65:25:
                    49:31:54:93:33:b0:4d:97:ee:d3:0a:5c:37:72:d5:
                    2d:2c:ef:9f:91:40:0d:28:e5:6c:9e:f1:35:ba:65:
                    dd:64:f6:b7:b3:49:d5:2f:f1:2b:d1:47:0d:55:0d:
                    e4:56:64:f0:e3:b7:8c:38:be:47:27:6b:7f:7e:fe:
                    62:2b:06:fa:fc:a5:6a:07:32:55:d7:ab:3d:0c:0a:
                    36:73:61:17:7f:e8:fa:26:88:c0:0c:35:e8:0c:a0:
                    53:49:30:11:32:f7:85:f0:97:ae:80:af:ca:7b:fc:
                    f8:58:43:78:86:c3:b0:07:97:76:47:d1:fb:6e:ca:
                    93:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BB:64:6E:F2:D2:3B:19:A9:9A:7F:9A:DE:F7:E4:89:61:32:2B:DA
            X509v3 Authority Key Identifier:
                keyid:D0:2C:56:35:F1:D8:38:00:E7:A8:ED:97:15:4E:C2:A1:8C:A5:01:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D02C5635F1D83800E7A8ED97154EC2A18CA501BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.61.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:c2:81:5c:17:11:55:9e:3a:9b:35:fd:8f:75:72:77:c1:1c:
         27:12:3b:52:9d:a4:b8:9c:da:6c:94:cd:ee:70:d2:9d:27:2c:
         35:64:01:34:46:ae:39:da:a7:66:45:3a:db:e9:23:ee:08:38:
         3b:33:24:75:9c:cd:cf:7f:1c:17:08:79:0f:a8:83:a6:c8:a0:
         64:43:ad:3a:3e:8a:78:aa:31:36:72:3d:bc:44:8a:12:bb:5d:
         23:96:67:cf:37:64:b8:9a:44:ba:79:6d:c3:9b:a6:9a:c1:e1:
         61:d9:97:9f:35:7e:84:7a:4b:e2:4b:22:f3:84:99:41:ad:09:
         6b:8d:e2:2f:26:af:24:54:a9:84:51:54:44:1c:a2:0d:ad:cf:
         51:62:e3:be:37:2f:7e:98:63:31:6e:bb:d7:66:54:90:b5:8f:
         37:ce:a6:1b:69:d4:5c:e4:4e:b4:49:93:4a:7f:28:a4:16:8c:
         48:99:41:58:2b:9f:44:03:2a:da:8b:31:e0:56:24:fe:c6:6c:
         1d:fe:33:a6:d0:62:8c:a1:07:3c:9c:56:72:c0:21:70:5c:c8:
         02:44:85:93:0b:cc:a7:97:43:c9:37:e2:bf:77:fb:db:60:e5:
         86:bc:5c:73:8a:d4:5c:a3:60:b6:bc:ab:1c:79:f7:6c:b7:a8:
         df:49:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:17:43 2026 by rpki-client