Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa
File:                     3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa (raw, json)
Hash identifier:          WLL4bT6zT/YNcyFYSYOWTtguKbJujGIUFIuIYVKu5gg=
Subject key identifier:   5D:9B:F1:72:37:DE:F3:EB:44:32:02:F2:BE:3D:FE:81:99:98:B4:C8
Certificate issuer:       /CN=5498E92D0EFAC40E6DAB462876A7133D517C5D06
Certificate serial:       75218B79A370803F61E53048CAA76C75F3037A2E
Authority key identifier: 54:98:E9:2D:0E:FA:C4:0E:6D:AB:46:28:76:A7:13:3D:51:7C:5D:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5498E92D0EFAC40E6DAB462876A7133D517C5D06.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa
Signing time:             Fri 24 Oct 2025 12:01:10 +0000
ROA not before:           Fri 24 Oct 2025 11:56:10 +0000
ROA not after:            Fri 23 Oct 2026 12:01:10 +0000
asID:                     263982
IP address blocks:        186.233.48.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/5498E92D0EFAC40E6DAB462876A7133D517C5D06.crl
                          rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/5498E92D0EFAC40E6DAB462876A7133D517C5D06.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5498E92D0EFAC40E6DAB462876A7133D517C5D06.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Nov 2025 21:59:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:21:8b:79:a3:70:80:3f:61:e5:30:48:ca:a7:6c:75:f3:03:7a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5498E92D0EFAC40E6DAB462876A7133D517C5D06
        Validity
            Not Before: Oct 24 11:56:10 2025 GMT
            Not After : Oct 23 12:01:10 2026 GMT
        Subject: CN=5D9BF17237DEF3EB443202F2BE3DFE819998B4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a3:67:11:ae:eb:56:fe:de:4b:cb:65:3f:e1:
                    80:11:99:2f:71:ea:0b:22:14:5e:36:d3:03:10:13:
                    e6:d5:10:70:a9:54:97:84:c7:ce:ab:47:bf:f9:9e:
                    53:5a:bf:fa:f2:4e:7f:98:1e:48:bf:d7:a8:e8:c9:
                    01:d0:e6:b2:59:92:1b:5c:98:79:84:a2:81:d5:37:
                    72:05:75:8d:46:91:ed:b7:ed:32:38:19:a0:cb:11:
                    0f:aa:aa:1c:74:c4:b6:46:d3:b6:bc:19:57:88:d0:
                    9b:b2:f8:44:b6:07:42:99:f4:ef:31:3c:f1:01:e7:
                    e4:ac:96:60:db:a1:e6:34:dc:ca:3c:17:1e:d0:86:
                    d5:9a:2c:ff:f3:77:73:6b:fe:47:8c:cc:07:25:60:
                    c5:af:50:6a:52:4c:42:57:f3:01:00:bf:a0:5c:b2:
                    ff:67:74:7f:2b:4c:7c:9b:c1:f5:13:91:03:68:ff:
                    fb:59:8e:78:e6:29:84:4e:f1:23:61:71:60:41:32:
                    92:c4:06:44:2d:ff:0c:38:7d:14:81:07:87:8d:0d:
                    f2:07:df:8a:30:9b:f2:a2:44:94:0a:9d:54:7f:eb:
                    c3:20:1e:03:93:ab:04:e0:f4:a2:97:c6:29:bc:a3:
                    4f:3c:6a:76:aa:a8:50:7c:f1:a2:0d:87:00:de:b3:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:F1:72:37:DE:F3:EB:44:32:02:F2:BE:3D:FE:81:99:98:B4:C8
            X509v3 Authority Key Identifier:
                keyid:54:98:E9:2D:0E:FA:C4:0E:6D:AB:46:28:76:A7:13:3D:51:7C:5D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/5498E92D0EFAC40E6DAB462876A7133D517C5D06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5498E92D0EFAC40E6DAB462876A7133D517C5D06.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ELYX2RgQuosNBPqmwTxvHZtfYfuRFa5iffCTbHcJEUpE/0/3138362e3233332e34382e302f32322d3332203d3e20323633393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:02:4c:46:80:23:30:86:e4:f9:5e:f5:ac:97:cf:eb:08:48:
         5f:29:55:03:a7:42:e7:e3:e3:75:a5:1b:43:8e:c3:ec:c9:5e:
         29:d2:25:31:f1:db:f6:59:c6:a8:fa:b9:16:0d:0f:47:80:dd:
         6d:ac:59:b5:07:49:24:d4:8b:c0:62:31:97:c0:f2:aa:6c:f3:
         6f:e4:a1:09:1d:ee:0c:ea:1a:20:89:ea:7e:14:d7:ed:a7:9e:
         2a:a7:72:0e:cb:f7:b4:52:c0:42:99:90:2d:90:93:4c:4a:f2:
         d3:9d:3b:dd:45:e5:de:af:1a:57:bc:3f:b3:bb:08:5e:62:1a:
         88:7c:40:26:03:1a:10:e2:8e:b4:55:21:e9:d2:d6:43:ae:36:
         9b:72:a9:b8:c9:e3:b7:46:14:83:61:22:a9:f4:4b:cd:20:4e:
         82:dc:5e:68:bc:da:b5:07:f7:5f:dc:ec:7f:d5:45:b6:b4:b2:
         96:25:78:ab:6e:a9:1f:7e:b7:6a:c7:fb:4e:5b:33:d2:76:ed:
         11:54:d5:68:40:41:1c:b4:9a:65:9e:55:7b:6b:9d:70:5b:d2:
         47:c9:05:83:5c:86:45:63:91:7a:19:ff:93:2b:23:e0:a6:1c:
         b5:25:f3:20:ba:1b:4f:4c:34:00:2f:39:14:f3:08:0b:1b:93:
         5e:18:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:26:56 2025 by rpki-client