Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa
File:                     3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa (raw, json)
Hash identifier:          AO5gwMJWhtXVOuy7/5RB30nVxRcM0hjT/kYg2R+9LnA=
Subject key identifier:   CA:7D:8B:3D:C0:C5:FC:20:D6:A3:F7:27:A6:EE:37:EF:47:5C:1C:BB
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       2F559D5C15DF209E6EB8D1DB54B061202C26E0B6
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa
Signing time:             Tue 27 Oct 2026 15:46:33 +0000
ROA not before:           Tue 27 Oct 2026 15:41:33 +0000
ROA not after:            Tue 26 Oct 2027 15:46:33 +0000
asID:                     267513
IP address blocks:        186.227.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/2D923A37E0452FAD8B69D807D1181BA567FA5B6D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 15 Nov 2026 16:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:55:9d:5c:15:df:20:9e:6e:b8:d1:db:54:b0:61:20:2c:26:e0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Oct 27 15:41:33 2026 GMT
            Not After : Oct 26 15:46:33 2027 GMT
        Subject: CN=CA7D8B3DC0C5FC20D6A3F727A6EE37EF475C1CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6d:ab:9f:cf:3d:0e:80:36:98:a1:0d:b3:2e:
                    51:6c:fb:c9:e0:78:90:74:2a:bc:93:6c:7f:ba:38:
                    5d:88:f3:dd:90:82:96:4d:b9:24:6a:74:97:41:9d:
                    86:c8:51:51:a5:78:13:1c:91:e6:1c:f7:f1:3e:6f:
                    b2:9e:65:26:47:d8:f9:e1:0c:2b:6b:9f:2e:0e:b9:
                    33:91:3c:43:3f:6a:b5:19:77:b0:89:41:4a:11:11:
                    8d:53:59:fa:08:a1:02:2a:02:28:6c:44:89:b3:0b:
                    1b:4c:48:62:42:58:e6:a1:7e:4a:4d:90:00:80:6d:
                    ee:4f:bc:84:e3:f7:3b:53:fd:5e:7a:9f:0a:f5:ae:
                    35:d6:a9:54:7c:79:0b:99:08:54:6f:5d:57:9c:02:
                    f6:0f:17:26:d7:0f:d6:3c:68:b9:15:f1:62:b1:c7:
                    8f:7d:3b:f9:46:31:7d:90:ca:f8:40:6a:a8:28:29:
                    0c:2e:59:03:a6:df:e0:06:48:da:f6:da:54:f0:04:
                    9b:9f:e1:46:e7:1d:fc:57:45:fd:ec:9d:0d:fd:0c:
                    8e:8f:82:50:60:4c:d4:1e:db:4b:aa:6c:cd:53:10:
                    dd:ad:06:f5:fa:39:0e:b3:b8:88:35:f8:b1:9d:45:
                    79:bc:f9:d1:9e:4d:68:c6:be:0c:1a:a4:34:f2:21:
                    12:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7D:8B:3D:C0:C5:FC:20:D6:A3:F7:27:A6:EE:37:EF:47:5C:1C:BB
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32322d3232203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:49:db:74:44:7c:01:50:04:d2:05:0b:14:94:77:ba:85:a5:
         01:01:51:bf:7f:a2:30:2e:3c:8b:81:75:dd:68:fd:8f:b0:d7:
         93:e1:30:9f:f6:61:38:01:c7:8e:1c:c2:20:32:08:32:36:c3:
         4c:ae:a9:64:31:27:b6:14:f1:57:86:c1:2f:3a:7d:be:19:ed:
         46:56:32:8b:32:f7:f0:98:1f:bc:53:fa:0d:00:26:e6:93:a4:
         6b:e9:5a:8c:a0:34:9c:a4:db:0d:89:1e:0d:c8:7e:23:fd:21:
         8e:09:0f:19:bb:51:23:e1:3c:18:56:f1:c4:76:b7:d7:3c:1c:
         8a:63:85:1f:df:ee:ef:7e:ac:52:34:e8:98:fc:c8:97:53:c9:
         78:ce:1f:ff:09:9f:2f:08:18:8b:e8:bb:59:ff:cb:d8:73:f9:
         84:4c:66:f0:1e:1a:c8:c0:cd:fb:c9:df:52:04:d6:e4:22:c9:
         21:60:80:85:12:0e:9c:a6:2b:12:34:71:ec:1a:e8:be:d3:43:
         5a:2d:5f:26:95:f8:4b:bf:6c:d4:70:bb:6b:8d:0d:d1:97:2c:
         b3:69:c5:50:f7:e8:b2:84:79:0f:ec:10:50:ad:1a:ed:88:a9:
         11:2d:09:80:16:ca:bb:c1:a7:cc:0f:78:56:ab:01:fa:a8:f3:
         f1:de:63:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:55:52 2026 by rpki-client