Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e302e302f32322d3232203d3e20323632373635.roa
File:                     3138362e3232372e302e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          qeT4yvtN+L1R9in/uhR8nnVBPJSGy7wjxDum3IbK3ZQ=
Subject key identifier:   48:79:96:EE:C0:5C:D8:E8:96:C3:FA:B7:F1:5F:32:F7:0D:DF:6E:79
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       78705D0D9557222D4FAE5F609783FAF8FBBCD55E
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e302e302f32322d3232203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:42 +0000
ROA not before:           Wed 22 Oct 2025 20:43:42 +0000
ROA not after:            Wed 21 Oct 2026 20:48:42 +0000
asID:                     262765
IP address blocks:        186.227.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:70:5d:0d:95:57:22:2d:4f:ae:5f:60:97:83:fa:f8:fb:bc:d5:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:42 2025 GMT
            Not After : Oct 21 20:48:42 2026 GMT
        Subject: CN=487996EEC05CD8E896C3FAB7F15F32F70DDF6E79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0c:b3:2f:bb:d6:5b:ff:12:13:fe:ed:1d:c3:
                    b7:8d:a8:d6:af:b4:92:a4:4a:42:86:45:10:67:2b:
                    4f:6b:53:58:c2:9f:42:f2:54:4f:d0:ab:33:72:b5:
                    f1:76:fd:0e:e0:8f:07:5d:40:08:21:26:f1:ec:a8:
                    ad:01:84:36:ae:00:35:05:7c:fe:46:b8:a3:0a:fb:
                    92:d5:a0:63:0f:67:35:c7:c9:53:20:a2:52:e3:16:
                    ff:5d:8c:8a:4b:a1:be:58:55:a6:3b:14:5b:99:5b:
                    3d:b0:44:62:76:d3:0f:2f:bd:bd:91:e2:65:ad:11:
                    db:fe:d1:df:4e:82:79:98:ab:b6:a0:6d:cd:14:74:
                    32:e7:ea:21:4b:b7:e6:68:52:7f:dd:0d:8c:7c:3d:
                    d1:55:39:e8:e6:77:df:4f:ed:cf:4d:53:33:e2:b9:
                    77:06:dd:83:ea:4c:a2:dd:21:6d:74:ed:7d:c7:d6:
                    d7:b3:0e:fd:a5:b4:30:a4:01:f3:b8:91:0c:21:7e:
                    93:e3:71:89:66:ca:76:57:5c:93:57:2a:3d:d4:1f:
                    66:3f:bb:2f:a5:f9:fa:4f:b4:bb:32:a3:32:7a:be:
                    bc:32:c5:56:d7:06:ec:5d:45:63:d4:a8:e8:91:1f:
                    f7:4e:f1:cf:a3:a0:53:0a:43:86:3f:ee:d2:74:03:
                    0b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:79:96:EE:C0:5C:D8:E8:96:C3:FA:B7:F1:5F:32:F7:0D:DF:6E:79
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e302e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:e8:5e:d8:4d:fe:2d:a2:48:e4:6e:3f:db:44:e4:08:eb:af:
         dd:ac:be:4d:ff:ac:3f:18:c4:06:75:4d:5e:5e:3b:62:5f:93:
         f2:ef:34:d6:de:21:73:6f:68:82:21:f6:b6:eb:7a:20:26:e1:
         d7:93:64:87:ae:8d:07:89:21:09:72:e6:7e:67:1b:31:de:8a:
         0a:c4:07:4b:7c:85:37:75:f6:ea:fd:46:1a:b4:dc:0b:2b:0e:
         03:10:21:57:68:4b:d9:72:02:ab:47:84:55:a4:c7:98:61:d7:
         43:0f:a3:00:82:d2:5f:92:5c:ae:77:5f:6d:ae:4d:93:e9:07:
         43:16:43:f3:81:2a:d8:2b:9b:b8:39:3a:87:77:82:ef:a8:1c:
         52:ea:29:a0:d3:13:8d:f4:33:65:5f:6a:6f:4e:62:c3:24:ba:
         7e:3a:8f:b3:bd:ae:f3:c9:19:03:57:99:ff:1f:bd:ff:9c:cd:
         85:9b:52:f5:24:cf:f2:93:46:58:c3:64:21:ac:d0:7c:d1:b5:
         9d:6e:0a:01:17:de:16:05:fe:85:10:4c:95:9a:b6:bd:cc:fc:
         f1:fa:b6:a1:8e:00:53:b4:65:7d:59:e5:9b:2c:54:d0:49:1b:
         8b:19:81:6c:96:a9:a4:12:86:04:78:b8:0b:80:24:ab:69:d9:
         6f:4f:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:17 2025 by rpki-client