Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32322d3232203d3e20323632373739.roa
File:                     3138362e3232372e3234302e302f32322d3232203d3e20323632373739.roa (raw, json)
Hash identifier:          KQd+SffHxRQjzNrz6AOxkhwphh6mrOa0GJWlbX01YBk=
Subject key identifier:   B6:9F:C1:41:EC:F3:FB:6C:B3:43:7D:61:E3:20:F3:7D:54:2E:3C:64
Certificate issuer:       /CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
Certificate serial:       5605041B8B4FDFE06A394566B866E4CBE0D43CFB
Authority key identifier: E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32322d3232203d3e20323632373739.roa
Signing time:             Wed 08 Oct 2025 17:49:52 +0000
ROA not before:           Wed 08 Oct 2025 17:44:52 +0000
ROA not after:            Wed 07 Oct 2026 17:49:52 +0000
asID:                     262779
IP address blocks:        186.227.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:05:04:1b:8b:4f:df:e0:6a:39:45:66:b8:66:e4:cb:e0:d4:3c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
        Validity
            Not Before: Oct  8 17:44:52 2025 GMT
            Not After : Oct  7 17:49:52 2026 GMT
        Subject: CN=B69FC141ECF3FB6CB3437D61E320F37D542E3C64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:3e:70:6e:d6:a3:70:bc:2c:ab:4f:67:eb:
                    b4:06:cc:42:3f:4f:3e:a3:b9:f8:56:95:10:99:cf:
                    d8:d4:82:44:f6:90:d4:06:2d:55:b9:9a:eb:47:0f:
                    00:8b:a8:94:7f:9c:96:c5:fc:bb:94:d2:87:47:4b:
                    c2:3e:a9:f3:3a:a4:20:1b:1a:83:9c:48:d4:ad:3e:
                    4a:d9:ad:5b:f5:ee:cf:47:a6:cb:a6:2a:8d:e4:03:
                    05:76:76:81:c7:bd:29:c6:20:09:de:8e:4b:bb:b7:
                    af:32:21:b4:d0:a5:9e:51:71:45:21:23:aa:79:e2:
                    34:1d:aa:04:ad:20:30:f5:35:2f:ca:d1:1f:4e:45:
                    1f:4d:d0:72:96:7f:21:b3:53:20:fe:d7:d1:80:77:
                    a7:6c:7e:9f:a1:61:e1:f8:be:09:be:53:c2:ca:8d:
                    c8:d5:64:1d:31:ca:fe:a1:dd:ea:b5:35:08:39:f4:
                    d5:07:a3:b3:2e:2e:4f:12:66:df:f9:54:c6:71:4b:
                    d0:e4:5d:f0:9b:5d:90:47:fe:cf:c4:15:b5:b4:da:
                    33:17:73:8c:9c:9b:a9:c8:d3:fc:1b:ec:c3:a4:be:
                    a0:f7:db:63:b7:b2:c2:82:fa:c4:89:4c:8d:a3:1c:
                    c5:ed:29:10:40:65:93:c5:ae:d6:57:e7:a4:5c:11:
                    1d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:C1:41:EC:F3:FB:6C:B3:43:7D:61:E3:20:F3:7D:54:2E:3C:64
            X509v3 Authority Key Identifier:
                keyid:E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234302e302f32322d3232203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:0c:d7:13:f5:7f:27:f2:57:81:c4:b7:2d:28:70:6f:3c:ff:
         e3:60:78:e7:2f:3e:a4:e5:77:e6:4e:29:ec:a6:42:5a:3c:9c:
         13:2d:bb:3a:26:91:8b:2f:e2:f3:8e:7a:6c:c7:25:4f:9d:a0:
         e1:73:6f:54:50:95:5c:39:00:6a:80:97:2b:3d:40:16:7a:34:
         7d:24:35:06:c7:01:be:37:90:dc:cd:23:ca:6b:94:1d:97:ae:
         d9:5b:31:73:bf:2f:f7:40:95:af:79:c8:22:44:dc:c1:3e:ce:
         ed:4c:00:28:01:f1:1e:6c:28:52:09:d8:82:3d:a4:89:78:3c:
         9f:d6:d1:71:70:6f:13:56:6e:5d:b6:9b:4d:f0:cf:e9:a7:b6:
         ab:81:a4:2a:c4:75:fe:9b:db:9c:27:b6:42:c6:44:e3:d8:c9:
         c9:28:77:d0:67:76:b9:49:e4:21:6d:fe:bc:99:7f:b8:c2:bb:
         1a:33:53:b7:5f:7c:ff:ab:6d:d0:44:01:52:5f:d8:be:f4:dc:
         75:6e:87:49:4b:b9:e7:f6:9b:6e:5f:81:83:b5:35:f3:f4:27:
         0f:ab:82:24:d1:d6:24:f6:91:1c:5c:d3:58:c8:1e:2a:7e:b1:
         3c:e4:02:27:fc:09:fe:88:90:9e:7b:df:34:ef:b5:16:05:f0:
         5f:dc:7d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:49:08 2025 by rpki-client