Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e332e302f32342d3234203d3e20323632373635.roa
File:                     3138362e3232372e332e302f32342d3234203d3e20323632373635.roa (raw, json)
Hash identifier:          VJ9sTpciBkol4MZ4+VPZB80mL3NOD1pNDkNg/wnuZQc=
Subject key identifier:   7D:32:A8:53:8C:1D:45:48:93:62:A8:3F:EE:91:B2:31:B0:2D:C6:D5
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       1AE21B29169362CCBD7493E62DE247B1B0AA7DF2
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e332e302f32342d3234203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:44 +0000
ROA not before:           Wed 22 Oct 2025 20:43:44 +0000
ROA not after:            Wed 21 Oct 2026 20:48:44 +0000
asID:                     262765
IP address blocks:        186.227.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e2:1b:29:16:93:62:cc:bd:74:93:e6:2d:e2:47:b1:b0:aa:7d:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:44 2025 GMT
            Not After : Oct 21 20:48:44 2026 GMT
        Subject: CN=7D32A8538C1D45489362A83FEE91B231B02DC6D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:23:6d:ec:7b:f6:d8:71:31:74:e0:6f:81:
                    34:43:da:41:23:73:1a:d6:25:a3:27:8a:fb:44:48:
                    70:ae:3b:20:66:79:0b:f5:d4:40:65:75:5b:a2:2f:
                    90:1f:12:c6:17:ea:a8:d4:eb:dd:d1:27:44:79:3f:
                    d1:6e:65:41:e1:b1:32:12:bb:00:2c:90:98:2f:1e:
                    8e:24:9e:77:ca:b1:20:3d:3d:14:84:19:25:9c:d8:
                    5f:70:9e:74:eb:69:fe:51:dd:da:56:9e:c7:e9:87:
                    11:4e:d3:b7:d0:4a:30:e7:30:97:d5:89:f8:65:8b:
                    2f:37:95:09:0e:40:f7:09:eb:95:48:14:42:bc:58:
                    c4:51:4d:e6:e2:b5:4d:d7:e7:eb:26:88:d2:83:c8:
                    81:48:16:a9:cc:a2:03:79:d9:f4:88:bc:e9:c4:51:
                    f4:33:d4:97:d0:e8:39:f1:8b:b1:a0:f6:f3:41:ff:
                    3c:34:10:9c:9e:3f:6c:ff:0b:27:11:2c:1c:aa:5e:
                    2b:e7:c3:57:1d:53:1b:eb:1b:0e:42:f5:8b:cd:39:
                    40:c4:c9:e4:8c:11:7c:82:ea:6c:94:88:bc:c3:39:
                    40:3c:cb:6e:c4:7c:13:41:be:32:69:c4:39:69:fe:
                    3e:a9:a0:c7:66:85:1c:dd:51:aa:38:38:1a:38:33:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:32:A8:53:8C:1D:45:48:93:62:A8:3F:EE:91:B2:31:B0:2D:C6:D5
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e332e302f32342d3234203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:74:e2:99:53:23:f4:7f:76:e0:9e:5f:fa:0f:74:24:6b:
         cf:9c:1f:55:e8:62:4d:0c:f4:f2:01:72:58:6a:e6:b9:12:97:
         96:6c:52:be:90:84:73:80:7c:b6:2e:e7:16:37:4c:95:70:06:
         b9:93:c9:52:55:b2:1c:c8:ef:08:c8:6a:97:1b:8e:b3:39:ed:
         7f:14:07:4e:d8:0b:18:cb:4d:c0:e5:71:98:51:f5:d9:4f:63:
         ae:98:52:61:e8:66:63:fb:24:07:36:5f:4d:ad:b3:1a:22:e8:
         cc:ed:a1:7a:59:d4:11:5d:05:ed:a7:12:b1:a6:6d:5e:50:0f:
         16:3c:d2:71:21:57:a4:85:53:68:a8:0e:cf:4b:06:66:59:b3:
         a5:48:2d:7e:22:f8:62:76:43:24:d7:fe:71:20:36:c4:2b:8e:
         b6:c5:78:15:00:fc:fa:79:a9:e7:df:dd:75:67:a4:b0:68:6c:
         7b:b3:ab:6d:3f:c2:d4:96:11:a1:b6:ba:22:35:31:19:46:e9:
         07:20:43:99:32:01:9e:99:07:98:67:49:db:26:23:68:7d:76:
         00:1d:76:05:ef:82:99:1f:58:e5:51:1a:d4:ff:a8:74:d2:e1:
         16:c3:61:5a:95:cf:64:19:f9:ef:5a:21:21:8f:2e:36:d2:c9:
         06:f9:7d:f5
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUGuIbKRaTYsy9dJPmLeJHsbCqffIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1
N0ZFN0JBMDAeFw0yNTEwMjIyMDQzNDRaFw0yNjEwMjEyMDQ4NDRaMDMxMTAvBgNV
BAMTKDdEMzJBODUzOEMxRDQ1NDg5MzYyQTgzRkVFOTFCMjMxQjAyREM2RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEYiNt7Hv22HExdOBvgTRD2kEj
cxrWJaMnivtESHCuOyBmeQv11EBldVuiL5AfEsYX6qjU693RJ0R5P9FuZUHhsTIS
uwAskJgvHo4knnfKsSA9PRSEGSWc2F9wnnTraf5R3dpWnsfphxFO07fQSjDnMJfV
ifhliy83lQkOQPcJ65VIFEK8WMRRTebitU3X5+smiNKDyIFIFqnMogN52fSIvOnE
UfQz1JfQ6Dnxi7Gg9vNB/zw0EJyeP2z/CycRLByqXivnw1cdUxvrGw5C9YvNOUDE
yeSMEXyC6myUiLzDOUA8y27EfBNBvjJpxDlp/j6poMdmhRzdUao4OBo4M8rTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUfTKoU4wdRUiTYqg/7pGyMbAtxtUwHwYDVR0j
BBgwFoAUdxacrDG0nUgM8Q5XGcw8e1f+e6AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzIvNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1N0ZFN0JBMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzE2OUNBQzMxQjQ5RDQ4MENG
MTBFNTcxOUNDM0M3QjU3RkU3QkEwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzIvMzEz
ODM2MmUzMjMyMzcyZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzcz
NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAuuMDMA0GCSqGSIb3DQEBCwUAA4IBAQBctnTimVMj9H92
4J5f+g90JGvPnB9V6GJNDPTyAXJYaua5EpeWbFK+kIRzgHy2LucWN0yVcAa5k8lS
VbIcyO8IyGqXG46zOe1/FAdO2AsYy03A5XGYUfXZT2OumFJh6GZj+yQHNl9NrbMa
IujM7aF6WdQRXQXtpxKxpm1eUA8WPNJxIVekhVNoqA7PSwZmWbOlSC1+IvhidkMk
1/5xIDbEK462xXgVAPz6eann3911Z6SwaGx7s6ttP8LUlhGhtroiNTEZRukHIEOZ
MgGemQeYZ0nbJiNofXYAHXYF74KZH1jlURrU/6h00uEWw2Falc9kGfnvWiEhjy42
0skG+X31
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:35:33 2025 by rpki-client