Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa
File:                     3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa (raw, json)
Hash identifier:          CWcUcUewcfV12zPQuBDAW0G0wDzaXwITQFFr5CWUcA8=
Subject key identifier:   DC:F6:04:53:40:A5:F1:00:E4:B6:16:78:14:7D:FB:44:B0:9A:55:A5
Certificate issuer:       /CN=7681FB7E1B23E78BDF33E01409581F639CDDA12C
Certificate serial:       1A94036BA6DDB4FE90B63E2167F10A69B8837A67
Authority key identifier: 76:81:FB:7E:1B:23:E7:8B:DF:33:E0:14:09:58:1F:63:9C:DD:A1:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7681FB7E1B23E78BDF33E01409581F639CDDA12C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa
Signing time:             Sat 02 Aug 2025 05:28:41 +0000
ROA not before:           Sat 02 Aug 2025 05:23:41 +0000
ROA not after:            Sat 01 Aug 2026 05:28:41 +0000
asID:                     264246
IP address blocks:        138.118.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/7681FB7E1B23E78BDF33E01409581F639CDDA12C.crl
                          rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/7681FB7E1B23E78BDF33E01409581F639CDDA12C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7681FB7E1B23E78BDF33E01409581F639CDDA12C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 11:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:94:03:6b:a6:dd:b4:fe:90:b6:3e:21:67:f1:0a:69:b8:83:7a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7681FB7E1B23E78BDF33E01409581F639CDDA12C
        Validity
            Not Before: Aug  2 05:23:41 2025 GMT
            Not After : Aug  1 05:28:41 2026 GMT
        Subject: CN=DCF6045340A5F100E4B61678147DFB44B09A55A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:bb:93:46:8c:77:97:6f:19:29:50:2c:0f:
                    1d:cf:f4:ca:07:8d:08:24:b8:72:db:f2:c6:f3:07:
                    e3:79:ad:5e:31:58:d2:6c:fd:e7:81:c7:dc:09:03:
                    fc:8b:08:ad:d8:f1:aa:36:6f:a5:c5:e6:f5:3f:89:
                    fd:31:52:c1:cf:99:cf:8d:2f:69:24:8b:94:1f:90:
                    6e:ee:ec:e7:ec:18:26:05:90:e7:3e:c6:6e:21:23:
                    da:ac:1f:38:91:fb:b9:28:a0:eb:c3:4c:3d:18:3d:
                    7c:4d:af:0a:7d:ba:f8:ff:a9:53:0a:a2:5e:b7:12:
                    aa:ea:9e:ae:fd:9b:92:83:ba:b1:7f:ec:86:4e:5a:
                    f9:58:45:17:2e:69:c5:48:8c:8b:84:c9:b5:c5:06:
                    a0:f0:80:a0:0d:45:e2:08:0a:ac:8c:df:16:4d:f2:
                    38:11:38:0b:e6:9f:54:e5:55:cb:2f:16:1e:8c:6b:
                    2c:37:29:da:b6:16:87:8c:88:65:7e:50:26:3b:fa:
                    ce:ad:3b:fc:41:91:0f:9b:8d:70:9d:b5:14:bd:d5:
                    57:cb:47:17:f6:44:88:a3:42:3f:f6:4d:2e:44:a0:
                    b0:a3:9b:a0:17:52:87:1e:2b:b1:a4:28:ee:fc:da:
                    55:e9:10:29:d2:5c:e7:3c:4d:2b:dc:f2:c4:c7:29:
                    4a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F6:04:53:40:A5:F1:00:E4:B6:16:78:14:7D:FB:44:B0:9A:55:A5
            X509v3 Authority Key Identifier:
                keyid:76:81:FB:7E:1B:23:E7:8B:DF:33:E0:14:09:58:1F:63:9C:DD:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/7681FB7E1B23E78BDF33E01409581F639CDDA12C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7681FB7E1B23E78BDF33E01409581F639CDDA12C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35362e302f32342d3234203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:13:fe:d2:5f:07:08:4e:2f:78:6f:79:04:3b:6b:a7:49:f2:
         80:d9:81:ed:58:5f:28:b5:54:62:cc:32:fe:32:80:cb:d5:19:
         de:bd:95:7d:cd:55:1b:4b:ab:ee:98:bd:12:3a:6f:fd:da:89:
         c2:64:39:c0:9d:e5:46:a7:21:08:b7:85:a8:cf:99:53:43:87:
         d4:af:aa:68:eb:15:40:26:06:70:44:d1:06:8b:6c:86:dd:18:
         75:c7:44:bc:2b:a6:cb:ba:9e:e6:35:20:52:4a:7e:3b:80:33:
         61:46:74:62:2d:9e:de:19:33:e1:2f:03:a7:c1:d7:41:80:58:
         f1:7d:0e:be:c8:0a:4e:b4:f7:63:7c:4e:0f:45:58:68:a0:09:
         2f:e9:30:b6:60:a7:05:95:94:28:6e:87:ea:6d:d7:a9:b8:fe:
         af:b5:13:54:a5:dd:34:67:d3:3e:43:21:94:96:29:21:3d:dd:
         fb:da:2e:0a:0f:2c:bc:d2:77:26:28:b9:cf:3c:e3:f1:c7:de:
         ac:0a:59:01:14:b4:8d:34:a6:40:1d:70:c4:f0:cb:c9:c3:11:
         a2:a6:e6:af:64:3a:9c:5f:d0:f7:89:89:6d:d3:27:82:20:f0:
         c5:6c:45:9f:31:d5:c3:11:cb:3e:b2:37:2b:e6:dd:fb:cd:60:
         e2:19:dd:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:24 2025 by rpki-client