Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234342e302f32322d3233203d3e20323632373739.roa
File:                     3138362e3232372e3234342e302f32322d3233203d3e20323632373739.roa (raw, json)
Hash identifier:          1+FQhn5fS5I69S6uZ0Nk81yJlHnsFLd+8tr9wTgigfI=
Subject key identifier:   BE:4A:90:3C:4A:79:40:8D:97:2D:98:0F:32:36:65:89:71:C2:E2:E5
Certificate issuer:       /CN=288267D3244089D185E376664BAE168B0EB28E94
Certificate serial:       78624DBAE9B03A4CE8B98A145550273F223F0510
Authority key identifier: 28:82:67:D3:24:40:89:D1:85:E3:76:66:4B:AE:16:8B:0E:B2:8E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/288267D3244089D185E376664BAE168B0EB28E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234342e302f32322d3233203d3e20323632373739.roa
Signing time:             Tue 15 Sep 2026 18:02:01 +0000
ROA not before:           Tue 15 Sep 2026 17:57:01 +0000
ROA not after:            Tue 14 Sep 2027 18:02:01 +0000
asID:                     262779
IP address blocks:        186.227.244.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/288267D3244089D185E376664BAE168B0EB28E94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 19 Oct 2026 00:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:62:4d:ba:e9:b0:3a:4c:e8:b9:8a:14:55:50:27:3f:22:3f:05:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=288267D3244089D185E376664BAE168B0EB28E94
        Validity
            Not Before: Sep 15 17:57:01 2026 GMT
            Not After : Sep 14 18:02:01 2027 GMT
        Subject: CN=BE4A903C4A79408D972D980F3236658971C2E2E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:89:a6:89:f8:c5:65:e9:ab:a1:6f:f7:99:
                    0e:a0:9e:33:81:0b:b2:6f:9d:70:02:b7:e4:f3:10:
                    59:85:df:4a:56:2d:e4:37:01:8a:64:79:e5:a6:6c:
                    17:ad:d3:22:b8:98:93:9a:62:04:df:e6:85:d4:99:
                    58:7a:0f:c3:b8:ee:70:8f:7c:9b:94:4d:a7:26:c0:
                    ec:0f:95:e7:36:9e:90:43:37:25:48:28:a7:14:2d:
                    6d:9d:9d:01:60:64:35:38:17:b6:53:b5:fc:ac:33:
                    6e:e7:0c:ef:9b:d1:be:0a:1b:82:84:f9:41:f2:d4:
                    8d:29:86:5b:f9:f1:06:52:b7:1e:fd:c4:d5:9b:8f:
                    f3:56:da:cd:59:86:59:3d:a9:12:3c:d1:e6:69:d9:
                    1c:11:38:21:a2:f9:4f:f8:63:a8:a6:3b:3e:c3:2d:
                    3d:ef:c7:c7:91:2c:e5:31:8c:2a:fc:84:7a:c5:4e:
                    ef:61:55:5d:c4:74:31:11:13:4a:e5:60:b6:5c:99:
                    c4:e2:07:6e:dc:68:fd:97:5a:61:c0:5e:ab:3f:19:
                    fe:5e:6d:ed:de:63:35:44:2a:d1:66:e1:ad:68:90:
                    52:d5:ba:03:60:80:33:ba:b7:21:46:37:34:2e:85:
                    c8:b5:85:1b:4f:76:f2:ee:9b:31:6c:e9:b9:34:79:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4A:90:3C:4A:79:40:8D:97:2D:98:0F:32:36:65:89:71:C2:E2:E5
            X509v3 Authority Key Identifier:
                keyid:28:82:67:D3:24:40:89:D1:85:E3:76:66:4B:AE:16:8B:0E:B2:8E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/288267D3244089D185E376664BAE168B0EB28E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/288267D3244089D185E376664BAE168B0EB28E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234342e302f32322d3233203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:35:37:96:0a:85:5e:13:59:22:c9:5f:b3:87:c2:6f:c5:fa:
         3f:24:c2:3b:04:a6:d3:d4:ce:31:14:21:ac:2d:5c:d9:4a:18:
         6b:19:2f:28:63:95:75:52:d6:11:ea:dc:66:6d:a3:48:b0:be:
         82:3b:ac:4e:44:18:ba:3c:e0:2d:bb:c0:28:6f:44:05:98:4c:
         82:f9:d0:a0:5e:3e:d7:f9:fb:12:89:46:26:e4:ea:4f:fc:22:
         15:7e:d8:af:a1:f2:2f:02:77:3b:cf:29:b2:a4:96:ee:d4:f9:
         7f:f9:81:0f:15:c3:06:92:8e:ac:2c:46:fc:c7:e5:3c:4f:5a:
         4b:d2:cd:6a:35:9c:6d:91:cb:09:c7:d0:f1:2c:45:84:52:04:
         47:73:f2:ba:57:12:91:52:37:52:9f:f7:40:82:18:f5:d1:75:
         b6:05:13:6e:26:04:2b:54:ac:63:c9:a1:31:4e:c3:5b:9f:83:
         1c:94:29:87:6a:bd:77:21:93:47:6f:88:62:31:9b:b1:5b:a2:
         95:53:c6:01:31:9f:ce:bd:6f:0a:9c:c5:7f:66:c4:60:61:87:
         f4:11:30:17:85:37:1b:b8:f9:2c:6f:77:68:61:d7:78:71:27:
         fb:a3:b7:a8:52:5e:e9:6e:fd:af:56:82:b3:19:98:51:5d:60:
         2f:f3:69:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 08:18:02 2026 by rpki-client