Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e382e302f32322d3232203d3e20323632373635.roa
File:                     3138362e3232372e382e302f32322d3232203d3e20323632373635.roa (raw, json)
Hash identifier:          U5r+6lADj+5fdLKnHaLC7WwNG/OrYJjofcGpPQKq390=
Subject key identifier:   D5:EF:25:6D:17:E6:69:24:3D:2A:E2:8E:C7:27:C0:45:33:BC:73:8E
Certificate issuer:       /CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
Certificate serial:       45F88F012F5B5CB3F50C4ECA49A86F768B7189D4
Authority key identifier: 77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e382e302f32322d3232203d3e20323632373635.roa
Signing time:             Wed 22 Oct 2025 20:48:45 +0000
ROA not before:           Wed 22 Oct 2025 20:43:45 +0000
ROA not after:            Wed 21 Oct 2026 20:48:45 +0000
asID:                     262765
IP address blocks:        186.227.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl
                          rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:50:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:f8:8f:01:2f:5b:5c:b3:f5:0c:4e:ca:49:a8:6f:76:8b:71:89:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77169CAC31B49D480CF10E5719CC3C7B57FE7BA0
        Validity
            Not Before: Oct 22 20:43:45 2025 GMT
            Not After : Oct 21 20:48:45 2026 GMT
        Subject: CN=D5EF256D17E669243D2AE28EC727C04533BC738E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:15:f6:77:ae:b4:32:d9:d6:69:3e:12:66:04:
                    82:9b:e6:5b:cf:1f:c6:e5:b5:07:34:81:f0:3a:1e:
                    da:a7:5d:2f:81:0e:6a:d6:f6:61:82:b9:b7:6a:3a:
                    d8:92:5f:7a:a6:5d:ad:1c:9c:2d:d2:02:9c:96:79:
                    f1:5b:95:93:c4:b5:b8:d9:e5:d2:bf:78:01:b5:0a:
                    7a:93:31:3f:ac:17:d8:31:fa:d8:63:13:3e:74:02:
                    07:ea:3f:3d:aa:1c:93:de:4e:82:c9:10:99:e2:f0:
                    37:58:48:98:94:1f:01:9f:60:4c:d4:0d:05:0c:d4:
                    6a:f0:14:09:40:b8:b2:7c:4f:5c:c6:e1:cb:a4:09:
                    cf:d1:76:66:d4:53:4b:a4:95:37:c2:c9:46:73:1d:
                    17:99:f6:f9:a9:6d:44:ac:c1:5f:3e:2c:15:ad:d6:
                    87:1d:f5:37:da:f4:cd:76:d6:5b:00:b1:04:a8:c8:
                    e6:c1:8b:67:72:0b:1e:ab:36:57:da:55:40:7b:4d:
                    de:96:a7:4e:1d:9d:3f:7c:e9:dd:d2:bd:42:7e:ec:
                    3f:8d:94:71:3a:6b:3e:8d:55:90:d1:10:31:5b:b6:
                    d0:9a:38:f2:81:c2:48:7a:d9:c9:a7:c2:6a:5a:96:
                    dd:1e:ac:63:f5:f6:5f:25:21:b7:6f:d3:5e:00:29:
                    65:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:EF:25:6D:17:E6:69:24:3D:2A:E2:8E:C7:27:C0:45:33:BC:73:8E
            X509v3 Authority Key Identifier:
                keyid:77:16:9C:AC:31:B4:9D:48:0C:F1:0E:57:19:CC:3C:7B:57:FE:7B:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77169CAC31B49D480CF10E5719CC3C7B57FE7BA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/2/3138362e3232372e382e302f32322d3232203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:3d:bc:e3:e4:47:5b:4d:2c:da:61:52:43:34:ad:99:7c:c0:
         25:7e:05:14:d5:d6:33:e2:5f:05:16:31:09:59:c9:b8:c1:e8:
         0f:bd:29:57:8a:92:e3:83:00:86:57:15:62:ea:69:ff:ab:b4:
         c6:5d:14:86:1b:53:a3:ff:e0:9e:22:2d:14:29:22:41:9a:5a:
         97:ad:67:d2:ea:50:7d:2d:22:3e:ca:f3:d5:69:b1:ab:e5:c3:
         03:37:83:61:42:f8:da:2d:af:c0:53:c3:66:d7:fa:bf:e1:71:
         55:3f:59:d6:6b:59:fd:fb:53:83:b0:24:2a:21:ee:cd:a4:ff:
         08:20:72:06:b3:78:bc:dc:97:1e:ca:e0:0d:2c:fa:af:c5:96:
         fe:d3:15:79:3e:24:a1:5c:52:e5:62:e5:3f:ab:b5:ba:1d:9f:
         ad:ff:44:bf:63:09:a1:ef:3a:3c:31:f0:a3:b6:a1:2a:ae:ee:
         3c:64:20:07:e9:7f:06:e9:46:5f:05:98:51:85:58:e8:5d:4b:
         89:a8:24:fc:c4:d6:75:cd:aa:46:d6:9d:ba:5d:ab:0e:61:8e:
         11:09:2b:29:14:a5:96:aa:02:b1:55:ac:6a:c5:1b:6a:2d:0a:
         66:e5:03:34:52:7a:b8:15:50:53:75:f6:9c:9a:18:26:68:5e:
         50:36:e3:ce
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIURfiPAS9bXLP1DE7KSahvdotxidQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1
N0ZFN0JBMDAeFw0yNTEwMjIyMDQzNDVaFw0yNjEwMjEyMDQ4NDVaMDMxMTAvBgNV
BAMTKEQ1RUYyNTZEMTdFNjY5MjQzRDJBRTI4RUM3MjdDMDQ1MzNCQzczOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFfZ3rrQy2dZpPhJmBIKb5lvP
H8bltQc0gfA6HtqnXS+BDmrW9mGCubdqOtiSX3qmXa0cnC3SApyWefFblZPEtbjZ
5dK/eAG1CnqTMT+sF9gx+thjEz50AgfqPz2qHJPeToLJEJni8DdYSJiUHwGfYEzU
DQUM1GrwFAlAuLJ8T1zG4cukCc/RdmbUU0uklTfCyUZzHReZ9vmpbUSswV8+LBWt
1ocd9Tfa9M121lsAsQSoyObBi2dyCx6rNlfaVUB7Td6Wp04dnT986d3SvUJ+7D+N
lHE6az6NVZDREDFbttCaOPKBwkh62cmnwmpalt0erGP19l8lIbdv014AKWWTAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQU1e8lbRfmaSQ9KuKOxyfARTO8c44wHwYDVR0j
BBgwFoAUdxacrDG0nUgM8Q5XGcw8e1f+e6AwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9qcHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlY
LzIvNzcxNjlDQUMzMUI0OUQ0ODBDRjEwRTU3MTlDQzNDN0I1N0ZFN0JBMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS83NzE2OUNBQzMxQjQ5RDQ4MENG
MTBFNTcxOUNDM0M3QjU3RkU3QkEwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9q
cHFQUDczRWZYRnptS3BMN1BkQkNWSzJTQ2o0WEVITXdualV0ODNMSzlYLzIvMzEz
ODM2MmUzMjMyMzcyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjMyMzcz
NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQCuuMIMA0GCSqGSIb3DQEBCwUAA4IBAQBpPbzj5EdbTSza
YVJDNK2ZfMAlfgUU1dYz4l8FFjEJWcm4wegPvSlXipLjgwCGVxVi6mn/q7TGXRSG
G1Oj/+CeIi0UKSJBmlqXrWfS6lB9LSI+yvPVabGr5cMDN4NhQvjaLa/AU8Nm1/q/
4XFVP1nWa1n9+1ODsCQqIe7NpP8IIHIGs3i83JceyuANLPqvxZb+0xV5PiShXFLl
YuU/q7W6HZ+t/0S/Ywmh7zo8MfCjtqEqru48ZCAH6X8G6UZfBZhRhVjoXUuJqCT8
xNZ1zapG1p26XasOYY4RCSspFKWWqgKxVaxqxRtqLQpm5QM0Unq4FVBTdfacmhgm
aF5QNuPO
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:37:12 2025 by rpki-client