Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3234203d3e20323730393434.roa
File:                     3133382e302e3130392e302f32342d3234203d3e20323730393434.roa (raw, json)
Hash identifier:          giWLnw1ryY9Fr7XBO+yYMxs6MEVvRWoCcCo1nrPp0kQ=
Subject key identifier:   3E:4B:EB:A3:E5:F2:30:5C:84:73:20:14:DD:B2:C3:84:49:0F:26:CB
Certificate issuer:       /CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
Certificate serial:       527D1CA88870988DCD70F46DF9511DC1493B2EB6
Authority key identifier: 85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3234203d3e20323730393434.roa
Signing time:             Wed 12 Aug 2026 13:11:10 +0000
ROA not before:           Wed 12 Aug 2026 13:06:10 +0000
ROA not after:            Wed 11 Aug 2027 13:11:10 +0000
asID:                     270944
IP address blocks:        138.0.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl
                          rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:1c:a8:88:70:98:8d:cd:70:f4:6d:f9:51:1d:c1:49:3b:2e:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
        Validity
            Not Before: Aug 12 13:06:10 2026 GMT
            Not After : Aug 11 13:11:10 2027 GMT
        Subject: CN=3E4BEBA3E5F2305C84732014DDB2C384490F26CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:31:fa:2f:f1:89:6e:40:5e:ac:ed:3a:e0:66:
                    d0:9d:b7:03:07:83:aa:b1:b4:60:14:b9:e4:16:3a:
                    6b:70:83:bb:42:39:60:ee:80:23:94:55:c8:f1:b5:
                    b9:1a:43:c4:2e:7a:6f:b9:f6:f3:7d:8c:dc:49:f1:
                    23:aa:04:77:ec:fd:4a:8b:4e:56:c1:5f:f9:0f:5a:
                    68:2e:95:b1:d7:65:04:1d:a4:a8:6c:ca:45:ee:52:
                    f8:67:e6:7a:6e:c4:b8:05:e4:e3:93:e0:28:49:b1:
                    22:7d:8a:aa:4d:1c:f6:0f:2f:f0:f8:6d:b0:c6:8e:
                    c9:14:3d:c4:eb:d3:79:23:51:bd:49:ea:13:c1:46:
                    30:41:55:d4:19:60:24:31:67:b4:e8:9f:d0:3a:e6:
                    5f:81:ad:45:23:a3:0c:bf:73:28:0d:01:12:d0:82:
                    83:c7:fa:00:05:b3:49:b9:db:3a:41:aa:11:16:3d:
                    f0:50:fb:20:0c:ad:bc:e7:57:9d:2e:2c:88:0b:0b:
                    de:bc:69:7a:04:00:84:6f:e8:d1:3c:70:e8:97:01:
                    33:2a:87:46:78:f0:78:42:fe:43:89:36:5d:63:24:
                    54:f4:fa:d8:49:41:55:9c:af:eb:6e:27:71:8e:a9:
                    25:84:c8:a1:e9:48:e6:77:09:90:c2:9c:c8:fb:27:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4B:EB:A3:E5:F2:30:5C:84:73:20:14:DD:B2:C3:84:49:0F:26:CB
            X509v3 Authority Key Identifier:
                keyid:85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3130392e302f32342d3234203d3e20323730393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:98:39:92:6c:32:be:77:08:0a:00:0c:1c:e4:9c:8b:f2:1c:
         40:78:53:a8:6a:0a:2d:89:5a:d1:f2:5c:f1:17:a3:70:35:13:
         d7:07:f7:14:cf:0c:9b:6c:fe:61:b5:e0:3a:3d:75:3a:bc:0f:
         36:b5:2a:0f:d0:96:78:15:a4:36:60:b2:b2:e2:58:e1:bd:b0:
         12:3c:d5:96:c2:86:7c:9e:17:42:58:a8:7d:41:f3:fe:52:27:
         a6:08:10:1f:6d:b6:a2:44:d6:f5:8e:e1:1c:99:c6:8b:cf:5e:
         8e:3d:89:25:30:93:36:b1:76:10:7d:20:7e:60:70:e9:48:e9:
         dc:a4:7c:5b:f7:54:71:24:16:c1:db:71:74:94:cb:64:7f:aa:
         39:0a:31:43:77:ff:46:46:9e:4a:55:a6:03:b7:52:ee:ff:88:
         82:bd:17:e5:f5:a3:4a:40:a8:b7:05:f1:d5:02:ff:e4:2e:7f:
         d5:2b:ef:a0:93:6c:06:b7:69:11:dc:26:34:91:37:ff:ff:1e:
         5a:45:8e:c5:b8:4c:d8:cf:14:55:57:98:d7:ca:0c:2d:bc:d4:
         5f:e6:fd:42:80:e4:09:3e:e3:8c:80:7f:f2:c5:5f:5c:95:36:
         6e:09:a6:c9:47:e9:22:31:73:02:5a:59:63:bb:d3:9e:e8:b7:
         0e:d6:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:55 2026 by rpki-client