Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234342e302f32332d3233203d3e20323632373739.roa
File:                     3138362e3232372e3234342e302f32332d3233203d3e20323632373739.roa (raw, json)
Hash identifier:          oXyl9ZTVvxIvMG9HUvNaN0AFw+X88DFiPjF86dkbL3A=
Subject key identifier:   76:76:DF:01:A7:8B:90:87:0E:6C:D4:B0:A3:F9:DF:7D:57:14:A9:08
Certificate issuer:       /CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
Certificate serial:       6710BBFA32D55CE50295CE98781382CF6E5A1172
Authority key identifier: E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234342e302f32332d3233203d3e20323632373739.roa
Signing time:             Wed 08 Oct 2025 17:50:41 +0000
ROA not before:           Wed 08 Oct 2025 17:45:41 +0000
ROA not after:            Wed 07 Oct 2026 17:50:41 +0000
asID:                     262779
IP address blocks:        186.227.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl
                          rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 21:05:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:10:bb:fa:32:d5:5c:e5:02:95:ce:98:78:13:82:cf:6e:5a:11:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4366A5F8A247EBD935D66B8B1B7618B7789D0B1
        Validity
            Not Before: Oct  8 17:45:41 2025 GMT
            Not After : Oct  7 17:50:41 2026 GMT
        Subject: CN=7676DF01A78B90870E6CD4B0A3F9DF7D5714A908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:14:d1:fb:7a:d0:5c:f0:e0:c7:70:f6:c6:
                    7c:16:2e:4e:ae:58:83:9e:82:4a:57:02:81:69:c2:
                    f1:36:06:eb:c3:91:5a:4a:21:a1:d3:94:94:4f:32:
                    5c:ba:05:5b:8c:db:56:e4:40:da:bd:d5:5a:af:c2:
                    be:a7:d5:82:8d:36:8a:e9:d3:b2:47:c9:c6:51:5b:
                    0a:0c:33:79:d1:a7:bd:9b:33:14:1b:e4:ff:63:43:
                    43:c2:38:c3:f7:bd:87:5f:dc:97:a8:c7:21:47:76:
                    ae:3c:d8:26:45:78:63:91:b9:c5:b4:0b:16:b4:5f:
                    8b:18:bb:9c:fc:74:79:b1:0e:62:af:6e:7a:a7:ab:
                    cb:fd:cb:dc:f0:64:cd:fa:a2:2f:9f:07:2d:b3:63:
                    f2:6a:2f:d8:4d:70:63:b4:31:c7:27:21:1c:65:61:
                    59:5c:f5:92:49:ba:7b:5c:94:3f:c0:61:00:bf:1c:
                    0a:2b:26:98:1d:9b:2e:58:05:1b:44:57:49:04:e3:
                    5d:b3:52:67:17:c1:d3:92:ed:ec:77:83:2f:2d:b2:
                    0c:15:4f:ee:f7:5b:b9:32:29:a3:53:e0:5e:c2:3b:
                    8a:f6:b3:30:d2:2b:a1:28:42:96:ae:5a:db:78:2c:
                    be:15:90:ad:e9:33:df:8d:7a:2e:52:ab:2a:32:89:
                    27:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:76:DF:01:A7:8B:90:87:0E:6C:D4:B0:A3:F9:DF:7D:57:14:A9:08
            X509v3 Authority Key Identifier:
                keyid:E4:36:6A:5F:8A:24:7E:BD:93:5D:66:B8:B1:B7:61:8B:77:89:D0:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4366A5F8A247EBD935D66B8B1B7618B7789D0B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGQ2BGAzSMqDxoNA2NjRsQeJnJGfK7BKKtTYc8NVjo71/0/3138362e3232372e3234342e302f32332d3233203d3e20323632373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:1f:9e:ed:8d:b5:e5:9a:78:55:cc:ae:77:f6:a0:08:41:6a:
         c7:ae:a1:3e:7b:74:3a:f9:3a:5b:82:f1:76:b4:21:2a:a1:fd:
         39:33:cd:24:d3:0e:51:41:44:33:03:d8:7c:6c:81:ba:e0:aa:
         d7:79:f0:09:3e:07:32:33:db:7b:79:46:1a:95:eb:bc:b8:72:
         0c:69:ab:80:08:79:8f:6d:a4:bd:98:8c:69:1d:d0:e8:7d:91:
         9d:ec:7b:3d:ce:8c:02:fd:84:c9:29:54:1a:50:09:68:eb:8d:
         a6:c9:10:4e:e4:16:02:5a:91:46:36:35:9e:d5:36:8a:16:60:
         28:c9:b2:6c:99:bc:f8:87:cc:81:22:09:54:4c:7d:95:74:97:
         17:fb:fc:51:0a:b8:1e:2f:8f:e3:5b:e3:9a:89:87:30:45:4a:
         0a:3d:a8:ef:24:e9:c5:94:da:e6:b9:0a:a2:dc:b6:4c:25:df:
         a6:b3:14:5f:70:8f:83:42:c4:7e:50:e2:50:d4:f3:9d:be:bb:
         42:b0:b6:4a:5a:ed:a0:ba:ac:ea:32:06:cc:b4:37:8f:f1:d8:
         b5:c6:13:3b:b8:cc:e8:48:ba:8a:c5:23:02:49:a3:ce:8e:e7:
         22:e5:a2:c2:43:5c:ea:93:cd:d5:05:0a:21:68:d1:69:5b:c4:
         aa:4d:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:49:08 2025 by rpki-client