Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa
File:                     3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa (raw, json)
Hash identifier:          YBJlJYlklie2xC96rq0ai9s6O48m6EL1WY2kZBBr2p4=
Subject key identifier:   C5:BE:A7:F6:A4:BE:47:F3:76:7B:BC:09:9D:7D:A4:C7:D9:57:61:64
Certificate issuer:       /CN=27874238C4198DC56AFAE0BB55DEBF31CD503526
Certificate serial:       075D63604CD79B191C8118A9462DF86AF31F041F
Authority key identifier: 27:87:42:38:C4:19:8D:C5:6A:FA:E0:BB:55:DE:BF:31:CD:50:35:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27874238C4198DC56AFAE0BB55DEBF31CD503526.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa
Signing time:             Mon 20 Oct 2025 23:05:19 +0000
ROA not before:           Mon 20 Oct 2025 23:00:19 +0000
ROA not after:            Mon 19 Oct 2026 23:05:19 +0000
asID:                     264246
IP address blocks:        138.118.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.crl
                          rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27874238C4198DC56AFAE0BB55DEBF31CD503526.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 20:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5d:63:60:4c:d7:9b:19:1c:81:18:a9:46:2d:f8:6a:f3:1f:04:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27874238C4198DC56AFAE0BB55DEBF31CD503526
        Validity
            Not Before: Oct 20 23:00:19 2025 GMT
            Not After : Oct 19 23:05:19 2026 GMT
        Subject: CN=C5BEA7F6A4BE47F3767BBC099D7DA4C7D9576164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:aa:e6:e7:e2:dc:57:7e:14:7b:fc:ca:24:07:
                    01:8e:22:bb:0c:79:f3:51:f2:4d:1c:3e:41:0a:d5:
                    bd:de:2d:e8:11:0a:54:c6:92:33:4c:cf:07:d8:30:
                    19:27:03:4e:86:3d:cb:c4:89:ed:26:4f:2f:d2:e8:
                    1d:96:1f:0b:1c:82:37:b0:a7:37:e7:a2:34:0f:25:
                    12:ab:f4:c7:8a:f7:a8:4c:35:16:d2:a7:13:a6:1a:
                    53:02:8f:a4:6c:36:44:8e:79:b9:56:3f:6c:7d:e6:
                    56:98:7e:c1:ac:26:9e:37:98:64:10:80:65:e5:8a:
                    00:47:70:3d:fd:ec:30:cf:ad:9a:7f:af:ab:e2:2e:
                    fa:e4:a1:8b:2f:a1:59:da:ac:8c:8a:a1:e7:da:b6:
                    1e:d2:40:40:9b:3c:5d:93:c5:14:c9:d0:9e:c5:11:
                    38:e6:74:8f:92:cd:57:2a:44:8d:f0:34:3f:eb:c7:
                    c4:00:9f:d6:fd:bc:73:50:72:79:a4:73:76:38:86:
                    53:92:be:72:ec:5e:e1:4e:8e:bd:25:43:20:83:06:
                    ff:8a:d8:16:02:24:08:ea:d1:02:79:78:ee:7e:4c:
                    10:ed:43:9e:f1:cd:57:b8:fe:69:a0:92:c7:68:a5:
                    71:ef:da:7b:e9:77:be:98:7d:61:07:ff:92:d8:39:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:BE:A7:F6:A4:BE:47:F3:76:7B:BC:09:9D:7D:A4:C7:D9:57:61:64
            X509v3 Authority Key Identifier:
                keyid:27:87:42:38:C4:19:8D:C5:6A:FA:E0:BB:55:DE:BF:31:CD:50:35:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/27874238C4198DC56AFAE0BB55DEBF31CD503526.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27874238C4198DC56AFAE0BB55DEBF31CD503526.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:15:02:de:5a:7a:19:db:74:81:d2:c1:47:21:57:b2:dd:6e:
         fa:27:c5:e7:da:56:8f:fc:e4:90:d7:c3:7a:40:be:85:f6:b9:
         f8:2f:38:a9:35:2e:0e:ce:2d:43:b7:bf:38:b3:ef:a6:aa:a1:
         dd:0e:8f:48:21:3d:ad:bb:6d:15:77:78:7e:46:a5:4d:2d:d7:
         19:d4:f1:e2:b3:30:81:6f:e8:da:a1:2d:05:41:17:63:26:f4:
         6f:00:69:51:98:7e:94:9d:f2:7f:5c:47:cc:2b:54:ac:ef:4e:
         8f:7c:b6:f2:14:02:6a:5b:11:49:14:fd:d8:2a:9a:ac:1d:07:
         62:1a:7e:e5:5e:bb:6c:de:df:8e:82:5f:cd:de:cf:c8:84:2b:
         16:04:42:a4:bc:ce:ed:dd:53:85:44:ab:20:f6:ef:ee:a7:ee:
         b7:f2:6a:23:9e:67:12:1b:fe:a6:e2:18:85:8e:fd:a6:0c:78:
         e8:ab:26:4e:cf:fe:e5:ba:f8:f6:b4:db:da:a5:48:9b:55:01:
         24:85:20:a2:e7:f5:f3:05:c2:ec:aa:46:8b:3f:60:87:c9:8f:
         b2:d3:1c:3a:2d:e8:ff:0e:d2:a2:6e:e6:cf:0e:e6:2e:6f:af:
         cb:f1:9d:be:4e:e5:e8:83:0a:b8:1b:64:ab:a2:95:5a:00:25:
         4b:9f:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 06:36:09 2025 by rpki-client