Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3131302e302f32342d3234203d3e20323730393434.roa
File:                     3133382e302e3131302e302f32342d3234203d3e20323730393434.roa (raw, json)
Hash identifier:          IQehs3K3358sMyKX3Gj1Es4bWsDDcFn9yXKXRXWSfAs=
Subject key identifier:   E9:37:A5:CB:59:D4:D6:DE:C6:BE:A6:30:15:F6:41:E3:76:F2:CC:C9
Certificate issuer:       /CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
Certificate serial:       7C2ED4ECAD3ED3AB2D1EC17F3AB38A53CEA8D7CE
Authority key identifier: 85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3131302e302f32342d3234203d3e20323730393434.roa
Signing time:             Wed 12 Aug 2026 13:11:12 +0000
ROA not before:           Wed 12 Aug 2026 13:06:12 +0000
ROA not after:            Wed 11 Aug 2027 13:11:12 +0000
asID:                     270944
IP address blocks:        138.0.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl
                          rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 25 Aug 2026 13:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2e:d4:ec:ad:3e:d3:ab:2d:1e:c1:7f:3a:b3:8a:53:ce:a8:d7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8553806E67C661EB076F5FBA2506FA518AFD57B8
        Validity
            Not Before: Aug 12 13:06:12 2026 GMT
            Not After : Aug 11 13:11:12 2027 GMT
        Subject: CN=E937A5CB59D4D6DEC6BEA63015F641E376F2CCC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:d8:7d:a1:a1:91:8c:c8:49:79:31:84:64:
                    a6:71:9e:c7:a4:e2:f0:1d:fa:73:e0:ea:b3:b6:04:
                    db:31:2b:be:cb:0e:a6:5c:01:67:45:92:2c:91:2e:
                    4d:2d:45:b8:90:b4:f8:8a:bf:dc:86:fa:71:0f:73:
                    d8:c1:ca:34:14:a3:fa:b7:11:60:a8:0b:96:64:46:
                    72:e7:17:7b:a9:b3:ab:d6:79:cb:fb:c6:57:54:ce:
                    a6:8c:a7:d2:15:d9:2e:6e:33:2a:02:d3:4d:a7:2f:
                    4d:53:97:de:b8:d8:c4:27:df:11:e5:82:87:e0:76:
                    eb:b7:f0:52:1c:db:03:f8:32:13:88:74:1b:33:99:
                    d4:21:05:1c:d3:4a:76:d5:4b:23:a2:85:6a:73:ea:
                    12:65:9e:a2:7d:1a:2f:54:9c:47:f7:db:3d:9f:67:
                    45:8a:c8:bf:6f:a2:f1:78:9b:83:52:ba:53:22:c4:
                    0b:5f:ca:f5:07:90:32:3b:d0:33:b7:3f:97:ac:e9:
                    f5:48:ec:c9:76:95:5f:2b:48:9d:85:3b:b2:66:f2:
                    92:da:0c:e4:87:93:89:1d:9e:f3:ef:1b:c7:61:c9:
                    68:cc:dc:2a:08:8c:88:b0:db:46:75:ed:c8:b7:d9:
                    d8:e1:38:4d:fd:46:06:5a:01:4f:fe:8c:f5:38:d1:
                    1a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:37:A5:CB:59:D4:D6:DE:C6:BE:A6:30:15:F6:41:E3:76:F2:CC:C9
            X509v3 Authority Key Identifier:
                keyid:85:53:80:6E:67:C6:61:EB:07:6F:5F:BA:25:06:FA:51:8A:FD:57:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/8553806E67C661EB076F5FBA2506FA518AFD57B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8553806E67C661EB076F5FBA2506FA518AFD57B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RZ4BdTx4jUXkop1ve9b3GRcH4cmiYB6LJCF3REDJQJm/0/3133382e302e3131302e302f32342d3234203d3e20323730393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:64:ab:62:2b:05:78:71:e1:b0:cb:63:a4:a7:78:a1:85:e4:
         a8:93:23:9a:ce:5b:6f:33:d6:7a:3d:54:41:e3:a5:06:a1:c7:
         51:62:a0:c4:bd:17:01:de:a6:ac:77:76:b5:ee:fc:4f:98:3e:
         e5:e5:a4:bd:88:4e:77:51:c1:58:d7:09:61:17:74:49:ca:bf:
         a1:05:1f:ad:10:e6:e2:dc:48:29:4f:26:89:83:a4:98:b4:47:
         51:d7:9a:83:47:80:de:eb:43:9b:8a:f4:d4:33:c9:80:ff:5a:
         81:06:94:68:23:5d:98:34:c9:12:78:c0:f5:da:18:c1:32:9c:
         5c:63:c6:e1:9a:3d:17:2b:82:ea:76:f1:bc:64:6b:70:6f:0a:
         f7:f6:a6:82:9e:1d:97:39:99:ab:26:0f:ba:5f:88:f7:18:65:
         29:5f:b9:a8:a9:00:9c:c1:1e:48:39:e9:6b:d2:2c:0a:1a:ff:
         08:85:e2:50:4d:6a:2c:12:ca:0b:c7:f3:e0:ea:55:13:2e:96:
         21:ad:53:32:e1:34:cf:c8:4e:f0:b3:45:a9:f5:0c:6a:a8:67:
         ec:1e:db:6f:99:1d:75:8e:e1:d0:11:67:be:2a:32:31:b4:76:
         6e:9b:4c:09:38:07:fb:c4:ea:3e:94:b8:3f:c4:13:72:9f:a1:
         e3:41:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:13:59 2026 by rpki-client