Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa
File:                     3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa (raw, json)
Hash identifier:          0h4Sd/1RXDqK+dP8wBWXI3RA7MHimS2aJlSCt8zuNNQ=
Subject key identifier:   B1:9C:C9:D6:AD:F8:F0:A9:2B:A0:CD:87:DC:A1:64:67:6A:2F:2C:6B
Certificate issuer:       /CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
Certificate serial:       7FC0FC5B0A37B832F454DC9798888EE9D11FB344
Authority key identifier: 31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa
Signing time:             Tue 27 Oct 2026 15:46:32 +0000
ROA not before:           Tue 27 Oct 2026 15:41:32 +0000
ROA not after:            Tue 26 Oct 2027 15:46:32 +0000
asID:                     267513
IP address blocks:        186.227.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl
                          rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 28 Oct 2026 17:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c0:fc:5b:0a:37:b8:32:f4:54:dc:97:98:88:8e:e9:d1:1f:b3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C
        Validity
            Not Before: Oct 27 15:41:32 2026 GMT
            Not After : Oct 26 15:46:32 2027 GMT
        Subject: CN=B19CC9D6ADF8F0A92BA0CD87DCA164676A2F2C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:47:e6:4d:d4:96:eb:25:17:c5:f5:1f:e4:bd:
                    2f:33:05:a7:98:c1:9f:f1:11:0e:46:cc:56:1f:63:
                    a7:21:c1:a6:6c:97:de:c7:fe:00:a9:69:29:d7:64:
                    a2:5d:df:d0:7b:43:e8:64:78:02:8d:aa:09:0f:07:
                    30:01:9c:5a:1b:14:2a:a9:73:6e:d3:f2:f4:bd:be:
                    f0:70:7a:e7:09:24:9a:a3:6f:84:7a:23:77:ad:79:
                    91:cc:c7:f6:e6:9e:42:00:e1:d7:22:de:56:01:13:
                    b9:2f:57:59:7e:6c:99:16:87:36:ec:74:2c:f7:49:
                    1d:39:e4:1b:53:7a:ca:60:15:9a:16:03:a4:b1:d2:
                    be:da:04:eb:a3:d4:2a:4d:c7:d5:38:71:01:8f:c4:
                    cc:52:d0:45:7d:02:da:8c:bb:39:8e:81:cd:44:93:
                    e2:55:bf:14:d6:9b:66:22:48:54:9b:ed:f6:30:b6:
                    86:2b:5e:9f:fa:59:0f:62:a9:80:94:e6:45:f3:21:
                    33:0f:da:04:c1:9f:c5:51:60:c7:f3:eb:60:c5:5b:
                    08:34:52:e0:24:bc:b7:6c:43:0d:9b:16:3b:79:5f:
                    f3:e3:7d:9c:65:04:09:de:e1:11:53:2c:c4:b9:21:
                    d7:25:cc:12:a1:c4:58:29:7c:a7:4c:24:06:cd:2f:
                    dc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9C:C9:D6:AD:F8:F0:A9:2B:A0:CD:87:DC:A1:64:67:6A:2F:2C:6B
            X509v3 Authority Key Identifier:
                keyid:31:9D:AF:6D:91:7A:6B:C7:6D:7A:CC:FE:49:E2:8A:ED:8F:63:AB:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/319DAF6D917A6BC76D7ACCFE49E28AED8F63AB1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/3138362e3232372e37322e302f32342d3234203d3e20323637353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.227.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:30:91:5d:54:87:ae:76:7c:89:e6:aa:0a:4b:be:69:71:2e:
         de:5c:2c:f1:59:1a:e6:cd:83:26:e3:4a:fb:af:ca:7b:fa:7e:
         08:ec:1c:7c:c9:8b:02:c6:f9:82:b1:c8:b4:5d:0a:40:f8:ba:
         40:03:cd:80:3a:d7:9f:69:41:b7:4e:be:08:11:0a:52:8f:27:
         d7:ad:e7:ca:95:06:cc:3e:34:1d:69:19:ba:a0:43:9a:5d:1c:
         34:4f:86:13:c5:f7:25:cc:e6:e3:f7:f9:52:95:61:63:e9:fe:
         b9:86:f4:81:46:84:8a:2a:4e:50:9b:92:ad:d7:6d:98:51:d2:
         4f:68:4c:dd:d6:82:d6:23:f5:9e:8e:4e:b2:c6:4c:0c:83:e5:
         37:99:98:d0:a9:2b:55:9e:99:21:53:44:70:1d:08:9c:92:1f:
         b1:1c:34:ed:6a:c2:3f:6c:26:62:58:3b:f4:a4:08:ac:d0:e4:
         fc:b6:8a:f3:f1:76:2f:2d:1b:a2:5e:b6:bc:75:e3:c7:fa:a3:
         03:d2:f6:7f:52:d5:e8:4a:15:cc:61:8c:d3:33:63:50:38:96:
         a3:45:e3:95:d8:17:6e:79:4a:f3:b2:b1:83:ff:eb:03:9f:e1:
         c1:c1:62:a3:fb:65:04:99:a2:47:ee:94:d6:1d:b5:9a:fa:f6:
         2c:cf:23:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:37:34 2026 by rpki-client