Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e31342e302f32342d3234203d3e20323632373635.roa
File:                     3138362e3232372e31342e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          9Y3iHBmACWmW/MukQOA/AhXWr56lpgTcwScdS//hVcY=
Subject key identifier:   DE:1E:23:2D:64:E9:06:0E:AE:77:31:86:40:7D:0F:4F:CD:26:FF:F6
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       71644FFA440A1460FC0B34031109CBC50929BB1A
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e31342e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:43 +0000
ROA not before:           Wed 22 Oct 2025 20:43:43 +0000
ROA not after:            Wed 21 Oct 2026 20:48:43 +0000
asID:                     262765
IP address blocks:        186.227.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:64:4f:fa:44:0a:14:60:fc:0b:34:03:11:09:cb:c5:09:29:bb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:43 2025 GMT
            Not After : Oct 21 20:48:43 2026 GMT
        Subject: CN=DE1E232D64E9060EAE773186407D0F4FCD26FFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f0:2b:cd:1f:36:bd:c2:6b:f2:e0:d3:06:60:
                    be:45:39:e0:a4:0e:86:3a:86:0b:13:7c:5a:a5:de:
                    ad:7f:77:e8:15:4e:72:aa:93:be:4f:64:1b:90:4d:
                    5c:95:d7:08:23:d0:f6:06:79:c2:7c:6d:90:da:cd:
                    0f:42:a3:3b:d0:1c:28:38:e0:f0:00:72:20:b1:f9:
                    47:9b:66:80:50:67:d1:83:5a:87:54:8a:f1:96:f6:
                    04:e8:3a:58:b9:91:8b:4d:f2:4c:fc:f8:84:50:6e:
                    ce:3e:cb:5c:a0:3c:a1:45:a2:d9:c3:22:06:67:92:
                    3d:06:38:7e:0a:57:ae:36:16:3b:66:d3:e6:4b:66:
                    a3:36:5a:58:4d:be:4a:a0:84:98:20:5a:f2:5b:83:
                    49:f0:e7:08:a6:c0:9e:dd:3b:13:1c:4b:cd:db:89:
                    da:53:ae:13:89:0c:9b:2f:a0:89:f0:fe:f4:02:2c:
                    54:0e:da:b9:a4:21:56:df:1e:72:85:4f:e4:f2:49:
                    8f:a5:d7:e5:49:9a:83:0c:62:2f:fd:65:3d:16:41:
                    6f:c1:65:2a:3c:ac:2b:a3:a5:c0:06:82:4d:73:a3:
                    43:fb:61:cc:10:bc:ee:dc:4d:8b:1c:7a:64:e7:c0:
                    fc:07:42:b8:5c:7c:4a:47:79:2f:c7:e1:27:a4:a9:
                    82:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1E:23:2D:64:E9:06:0E:AE:77:31:86:40:7D:0F:4F:CD:26:FF:F6
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e31342e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e3:30:a5:f8:58:be:42:7b:89:22:85:e3:3c:d5:1d:0e:33:
         f8:1c:c4:76:e1:2f:73:13:d4:dd:72:34:ed:7a:cb:51:09:2b:
         50:23:05:dc:17:60:86:0e:41:32:1e:82:34:a4:65:db:af:54:
         e7:88:6c:6c:f9:64:b6:41:7f:a4:8f:4f:0c:f4:7f:2d:1d:fd:
         42:3b:9e:6c:48:b8:39:d3:a4:63:35:27:ae:af:b3:0b:42:88:
         f8:d1:aa:2a:20:4a:e1:f6:53:80:59:c6:61:34:d7:49:50:49:
         fa:ac:75:71:b4:3a:2b:08:53:1b:95:9d:7a:49:98:61:ca:d0:
         12:66:30:f4:1a:66:15:d4:0e:8e:97:af:3f:8e:b9:c2:62:ad:
         c6:3d:10:75:4e:69:f9:65:d1:cc:f4:b0:7c:6e:8c:5f:6d:fd:
         63:91:5f:17:df:2c:db:f9:88:9f:62:99:31:c9:3a:59:cc:c5:
         bb:3c:0a:9d:a8:ee:ae:d7:63:c2:44:a5:88:91:81:74:c9:c6:
         a1:61:ea:b0:eb:50:f1:22:3c:88:a2:76:5d:eb:80:67:60:7e:
         67:f9:fc:9e:de:3e:02:49:8c:78:26:39:30:1d:98:80:2e:cb:
         f5:99:6d:a9:10:fc:bb:bd:10:e0:c8:61:f5:5c:15:ab:8e:56:
         8c:c8:1d:ea
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUcWRP+kQKFGD8CzQDEQnLxQkpuxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1
N0ZFN0JBMDAeFw0yNTEwMjIyMDQzNDNaFw0yNjEwMjEyMDQ4NDNaMDMxMTAvBgNV
BAMTKERFMUUyMzJENjRFOTA2MEVBRTc3MzE4NjQwN0QwRjRGQ0QyNkZGRjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88CvNHza9wmvy4NMGYL5FOeCk
DoY6hgsTfFql3q1/d+gVTnKqk75PZBuQTVyV1wgj0PYGecJ8bZDazQ9CozvQHCg4
4PAAciCx+UebZoBQZ9GDWodUivGW9gToOli5kYtN8kz8+IRQbs4+y1ygPKFFotnD
IgZnkj0GOH4KV642Fjtm0+ZLZqM2WlhNvkqghJggWvJbg0nw5wimwJ7dOxMcS83b
idpTrhOJDJsvoInw/vQCLFQO2rmkIVbfHnKFT+TySY+l1+VJmoMMYi/9ZT0WQW/B
ZSo8rCujpcAGgk1zo0P7YcwQvO7cTYscemTnwPwHQrhcfEpHeS/H4SekqYJ3AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU3h4jLWTpBg6udzGGQH0PT80m//YwHwYDVR0j
BBgwFoAUdxacrDG0nUgM8Q5XGcw8e1f+e6AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzIvNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1N0ZFN0JBMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzE2OUNBQzMxQjQ5RDQ4MENG
MTBFNTcxOUNDM0M3QjU3RkU3QkEwLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzIvMzEz
ODM2MmUzMjMyMzcyZTMxMzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzIz
NzM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC64w4wDQYJKoZIhvcNAQELBQADggEBACfjMKX4WL5C
e4kiheM81R0OM/gcxHbhL3MT1N1yNO16y1EJK1AjBdwXYIYOQTIegjSkZduvVOeI
bGz5ZLZBf6SPTwz0fy0d/UI7nmxIuDnTpGM1J66vswtCiPjRqiogSuH2U4BZxmE0
10lQSfqsdXG0OisIUxuVnXpJmGHK0BJmMPQaZhXUDo6Xrz+OucJircY9EHVOafll
0cz0sHxujF9t/WORXxffLNv5iJ9imTHJOlnMxbs8Cp2o7q7XY8JEpYiRgXTJxqFh
6rDrUPEiPIiidl3rgGdgfmf5/J7ePgJJjHgmOTAdmIAuy/WZbakQ/Lu9EODIYfVc
FauOVozIHeo=
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:26 2025 by rpki-client