Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa
File:                     3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa (raw, json)
Hash identifier:          SwaRFgaT80DuN1G4a1DNJpkPsGzLBXjjnIF85MbHtiA=
Subject key identifier:   89:A9:D0:B7:D2:8F:D0:2B:0C:DD:1F:3A:D5:4D:91:47:C1:C3:B5:EC
Certificate issuer:       /CN=27874238C4198DC56AFAE0BB55DEBF31CD503526
Certificate serial:       1275277001CE6603CD8D58250A90964DA63A4C89
Authority key identifier: 27:87:42:38:C4:19:8D:C5:6A:FA:E0:BB:55:DE:BF:31:CD:50:35:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27874238C4198DC56AFAE0BB55DEBF31CD503526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa
Signing time:             Mon 20 Oct 2025 23:04:35 +0000
ROA not before:           Mon 20 Oct 2025 22:59:35 +0000
ROA not after:            Mon 19 Oct 2026 23:04:35 +0000
asID:                     264246
IP address blocks:        138.118.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.crl
                          rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27874238C4198DC56AFAE0BB55DEBF31CD503526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:75:27:70:01:ce:66:03:cd:8d:58:25:0a:90:96:4d:a6:3a:4c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27874238C4198DC56AFAE0BB55DEBF31CD503526
        Validity
            Not Before: Oct 20 22:59:35 2025 GMT
            Not After : Oct 19 23:04:35 2026 GMT
        Subject: CN=89A9D0B7D28FD02B0CDD1F3AD54D9147C1C3B5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b6:4d:a1:bc:33:69:32:41:1b:7f:e0:04:49:
                    da:80:7a:9b:24:22:7f:1d:4e:64:e2:4a:d5:11:11:
                    ac:21:8d:1e:de:c7:6b:4c:62:2d:b6:af:c0:29:ed:
                    9d:1e:a2:ed:5f:eb:05:f4:4c:1b:71:0c:33:08:81:
                    57:fd:ca:f7:61:23:4e:0a:bb:12:7d:6c:6a:54:b6:
                    33:c1:14:78:73:a8:05:c0:3b:c9:3f:19:a5:2b:f7:
                    bb:a4:d1:f5:25:c1:a0:e7:e4:1e:26:f1:f3:fe:23:
                    70:2a:65:3c:83:77:7e:c8:81:53:3a:29:b7:ea:a3:
                    ad:36:37:a2:f1:fc:2e:a1:ad:11:f7:2d:2c:01:08:
                    6b:6b:18:d0:56:36:fd:8f:a7:58:cc:ac:60:4c:ac:
                    7a:af:c1:37:12:92:50:79:1b:c2:10:c9:c9:89:67:
                    74:a5:f3:08:43:98:3c:0c:c5:f2:e4:55:b4:03:38:
                    9d:02:19:d0:0c:e2:fb:cd:d5:0e:7e:84:74:83:f0:
                    9f:53:d8:65:1e:6c:e1:82:cd:49:a4:4a:97:31:e1:
                    12:7c:98:27:8f:bd:72:81:98:a7:70:31:fa:da:d8:
                    78:da:4b:81:e0:3e:52:11:83:1c:05:1b:6b:32:42:
                    52:74:7d:f4:f6:38:2d:35:7a:2b:d1:69:1f:02:0f:
                    db:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:D0:B7:D2:8F:D0:2B:0C:DD:1F:3A:D5:4D:91:47:C1:C3:B5:EC
            X509v3 Authority Key Identifier:
                keyid:27:87:42:38:C4:19:8D:C5:6A:FA:E0:BB:55:DE:BF:31:CD:50:35:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27874238C4198DC56AFAE0BB55DEBF31CD503526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:fa:20:3a:3f:b8:4b:fc:2b:ae:46:83:42:6f:b0:79:73:
         85:44:c8:88:56:45:79:d6:fd:49:97:fd:f4:68:d4:ec:7c:7d:
         93:d4:4a:92:33:1d:f1:b7:5b:92:5c:bf:63:d3:fd:12:b1:a2:
         58:64:4b:ba:81:19:0f:6e:94:80:3d:7d:c5:3a:ec:83:8e:d9:
         e5:52:c7:58:ec:d7:35:da:f4:93:9d:66:b1:5a:33:70:03:b9:
         a2:bb:d4:8c:e2:d4:f3:fe:5a:3c:6c:a6:1f:57:db:ce:c1:ff:
         b3:95:d6:33:df:40:2e:2a:2b:6f:1e:f9:a7:f9:b7:a8:84:58:
         88:b0:f0:8a:a3:df:92:ee:47:d5:23:32:7f:ae:af:d8:63:88:
         fb:0e:da:72:b0:6e:fc:8a:dd:e3:80:cc:15:01:56:6a:9c:78:
         5a:ac:e6:f1:e8:fb:e4:8e:8a:68:df:ac:e1:5d:13:24:1f:50:
         e2:b1:cc:90:67:c8:93:85:1c:19:4c:e6:06:06:88:c3:c8:0d:
         96:17:8f:00:48:21:fe:11:16:9d:e3:73:4e:52:66:4d:aa:79:
         43:51:8a:cf:62:4b:66:03:29:d6:b9:04:2e:32:7c:43:48:44:
         ee:a3:55:25:5d:fe:6e:e3:74:bd:da:8d:e1:7d:c6:65:27:53:
         08:5e:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:36:06 2025 by rpki-client