Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e312e302f32342d3234203d3e20323632373635.roa
File:                     3138362e3232372e312e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          M5xI6Oa0OYaGR02zUCv56ttlE7divllFn0fbQXGSKmg=
Subject key identifier:   C2:F7:99:CC:3A:6E:00:28:7D:10:4A:5E:90:70:DC:A6:B2:FD:A0:6E
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       630C6ADFEA3689DEEC3BD0B923B6F1E2C69A6211
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e312e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:43 +0000
ROA not before:           Wed 22 Oct 2025 20:43:43 +0000
ROA not after:            Wed 21 Oct 2026 20:48:43 +0000
asID:                     262765
IP address blocks:        186.227.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:0c:6a:df:ea:36:89:de:ec:3b:d0:b9:23:b6:f1:e2:c6:9a:62:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:43 2025 GMT
            Not After : Oct 21 20:48:43 2026 GMT
        Subject: CN=C2F799CC3A6E00287D104A5E9070DCA6B2FDA06E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:47:b7:08:a1:b7:a0:2d:5c:d7:6d:88:a0:34:
                    cb:d2:90:1b:a8:e7:ce:09:46:7f:88:3d:90:7d:e1:
                    c8:8c:bd:a8:4e:e4:71:7c:1b:2e:80:c1:98:78:24:
                    cb:38:0a:14:d9:77:4d:ff:f0:ff:4b:37:e3:13:77:
                    e5:b6:eb:d5:40:1d:9b:eb:0f:b1:b0:46:92:f8:9c:
                    aa:1c:b4:68:ff:e4:c8:74:2a:bd:07:05:4b:66:fc:
                    b8:40:52:1c:5d:02:14:8a:b8:2f:08:80:d0:03:5e:
                    7d:8c:00:43:dd:af:55:8e:53:99:f1:f9:f0:06:4e:
                    58:db:51:cc:f5:68:a9:72:76:59:26:b4:b8:aa:65:
                    6b:da:84:d8:3c:a5:54:f1:ee:ea:1c:6f:3d:c7:c6:
                    e2:ab:8c:d5:db:2c:a8:65:50:5a:28:55:4d:c6:87:
                    c9:6c:f9:8d:54:d3:3f:aa:98:a7:cd:78:85:8f:bf:
                    1a:e8:49:74:f7:9e:b7:ec:a9:42:da:9a:95:b8:4a:
                    04:8a:45:16:41:c0:ba:28:3b:af:c1:d8:0b:01:16:
                    25:e7:cf:8d:c0:24:81:92:fd:ba:d2:cd:6f:6d:d3:
                    3d:36:ba:9e:24:1e:a0:33:b7:d6:9f:26:8e:34:39:
                    9b:36:66:e0:43:54:9a:b5:6d:9c:38:0b:89:9d:ee:
                    3b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:99:CC:3A:6E:00:28:7D:10:4A:5E:90:70:DC:A6:B2:FD:A0:6E
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e312e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:88:fc:1f:e7:0b:2e:05:dc:29:7d:25:aa:da:74:bc:cd:3c:
         f6:52:03:bb:91:f0:c8:98:9b:b1:a0:89:12:94:2a:5a:d8:a1:
         65:2e:27:3f:fe:ba:95:c4:8c:d2:98:fe:6d:47:e9:92:4e:91:
         91:d5:2b:a3:e3:4a:c9:eb:3f:f5:bb:2c:87:ae:b6:ad:e8:05:
         00:ac:5c:a9:bf:41:62:9b:61:24:57:cd:1b:8b:9b:1b:09:9c:
         47:10:a5:ce:39:b9:74:a9:bc:a7:fd:36:62:a9:d9:fb:6f:e2:
         17:33:d1:cc:5f:67:3a:fc:ca:4a:03:c2:db:82:51:c9:85:04:
         3f:36:5f:24:57:fb:9c:25:e9:f8:29:db:3f:89:5d:df:be:8c:
         8f:52:ee:67:5a:aa:0b:7c:8f:8a:5d:0d:e1:ff:da:44:2b:8a:
         4c:08:eb:34:00:7e:7e:31:cb:1a:54:26:97:1d:31:7c:e3:b4:
         dd:45:34:ee:3d:89:09:f9:30:1d:fd:1a:a5:b5:f7:0f:2b:ae:
         d3:70:99:f6:4f:48:6a:e9:ed:19:72:24:21:0c:f9:6a:8b:06:
         90:d0:7d:a2:1f:13:8d:47:3a:e7:14:99:5a:78:8e:80:cf:f6:
         ad:78:af:e5:63:6d:75:96:1e:2e:9e:79:04:70:fa:98:99:48:
         90:b9:75:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:26 2025 by rpki-client