Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e31352e302f32342d3234203d3e20323632373635.roa
File:                     3138362e3232372e31352e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          0lZCEK44oOzABqlpgIJEhw6Rkzc8fdTDu32JoXeqt4U=
Subject key identifier:   9B:E2:7E:E4:E9:5D:B8:36:7E:2C:73:87:C6:3C:2F:D5:12:C8:F9:F9
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       7F03988D319B9D4F32957D0A66FE8D744A44EA30
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e31352e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:47 +0000
ROA not before:           Wed 22 Oct 2025 20:43:47 +0000
ROA not after:            Wed 21 Oct 2026 20:48:47 +0000
asID:                     262765
IP address blocks:        186.227.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:03:98:8d:31:9b:9d:4f:32:95:7d:0a:66:fe:8d:74:4a:44:ea:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:47 2025 GMT
            Not After : Oct 21 20:48:47 2026 GMT
        Subject: CN=9BE27EE4E95DB8367E2C7387C63C2FD512C8F9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:35:44:94:ef:a8:c3:9c:62:2b:e9:ab:42:
                    ec:f8:14:27:e0:4a:da:b7:fc:34:93:7e:0d:27:54:
                    56:f3:48:9f:c9:f3:24:10:94:64:d8:96:eb:77:9b:
                    34:6f:c0:0e:25:2f:7b:9a:28:0e:89:16:1d:79:4c:
                    fb:d2:df:38:f2:9f:68:7d:cd:b5:96:80:96:93:30:
                    13:da:fe:42:90:9b:7b:80:bc:9f:c2:7c:30:98:03:
                    c3:96:bf:29:1e:80:0d:80:dd:66:e5:82:eb:98:e2:
                    c8:37:37:32:a2:a5:25:f1:86:e7:b0:fd:f6:91:fc:
                    bf:71:d6:e0:d4:bf:0c:84:e5:16:dd:e0:07:9e:3e:
                    7a:fb:d0:97:f5:ad:4e:4a:36:3f:1f:d0:04:c5:30:
                    fe:78:eb:57:16:99:63:c7:f7:fd:0d:20:84:89:e1:
                    0e:ca:11:77:a2:32:07:5b:f6:27:8f:1d:23:6a:aa:
                    8a:7f:1c:ae:e4:c0:bb:cb:fc:bb:0d:d4:15:ba:21:
                    cb:4f:ba:8b:01:0f:ec:18:cd:0e:fe:f7:51:c7:35:
                    60:8b:31:58:4d:1a:36:f6:62:82:0c:fe:bc:bd:ed:
                    01:53:23:2b:f7:80:59:87:80:57:99:80:22:b3:cd:
                    92:14:da:33:39:8c:6a:68:b5:c3:bb:b8:88:43:3c:
                    44:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E2:7E:E4:E9:5D:B8:36:7E:2C:73:87:C6:3C:2F:D5:12:C8:F9:F9
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e31352e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:12:34:13:97:ce:79:5b:29:62:dd:1e:b3:84:e6:ec:44:a2:
         7e:7a:57:71:62:63:8b:f5:b6:55:21:da:1d:55:ca:a4:ea:22:
         50:1e:ff:1a:da:87:d6:5c:20:1e:25:82:11:d4:4e:e3:c8:9d:
         b7:dd:57:d4:f6:f9:ea:5d:21:02:02:77:69:e8:b9:c9:c4:eb:
         cd:64:ed:02:05:92:55:c7:cc:99:08:0b:2b:b2:9e:7e:09:b6:
         bf:d7:8f:69:82:94:1e:4c:7d:34:c1:45:41:2c:47:5f:54:ca:
         35:48:ef:3c:c1:fc:01:cd:d5:ac:22:95:df:f2:58:27:e2:66:
         de:ac:82:b4:15:58:c7:a5:cf:4b:f7:96:c4:67:f2:81:87:30:
         78:ef:8a:36:3c:a1:78:58:ba:c9:f6:9e:25:e3:06:a0:24:13:
         34:f4:c0:f7:63:6b:23:97:35:56:ee:7a:6a:9a:0c:5a:3c:fd:
         ad:e5:dd:03:a1:bf:97:54:9a:84:52:4c:09:b4:61:b9:63:05:
         3b:2a:08:4e:7a:ab:f4:7f:a3:5d:e9:b4:fd:4e:be:4a:5e:f9:
         37:c2:78:75:70:c6:8a:25:40:71:77:fc:74:ed:7a:62:41:eb:
         83:d1:d4:80:92:15:d9:05:d0:5c:5d:75:1c:ff:3b:7c:e0:94:
         06:ca:b7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:38:51 2025 by rpki-client