Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa
File:                     3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa (raw, json)
Hash identifier:          7xLYMQfYiwnVWsjg1TPZ/eCxQEAAh5DEhW9o+Q0ToXA=
Subject key identifier:   DB:14:BB:AA:F2:D8:18:70:A1:6E:F4:54:90:89:D6:56:CA:80:38:C0
Certificate issuer:       /CN=7681FB7E1B23E78BDF33E01409581F639CDDA12C
Certificate serial:       79621E0B1F04B8EAE026A4F9B01FB4D98D02782B
Authority key identifier: 76:81:FB:7E:1B:23:E7:8B:DF:33:E0:14:09:58:1F:63:9C:DD:A1:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7681FB7E1B23E78BDF33E01409581F639CDDA12C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa
Signing time:             Sat 02 Aug 2025 05:28:49 +0000
ROA not before:           Sat 02 Aug 2025 05:23:49 +0000
ROA not after:            Sat 01 Aug 2026 05:28:49 +0000
asID:                     264246
IP address blocks:        138.118.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/7681FB7E1B23E78BDF33E01409581F639CDDA12C.crl
                          rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/7681FB7E1B23E78BDF33E01409581F639CDDA12C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7681FB7E1B23E78BDF33E01409581F639CDDA12C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 11:45:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:62:1e:0b:1f:04:b8:ea:e0:26:a4:f9:b0:1f:b4:d9:8d:02:78:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7681FB7E1B23E78BDF33E01409581F639CDDA12C
        Validity
            Not Before: Aug  2 05:23:49 2025 GMT
            Not After : Aug  1 05:28:49 2026 GMT
        Subject: CN=DB14BBAAF2D81870A16EF4549089D656CA8038C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f9:41:97:85:c9:e9:c2:b8:4d:6e:b2:81:5d:
                    79:05:5b:44:56:5c:44:b0:25:53:c3:54:59:2e:d6:
                    4c:16:2c:e0:df:6e:5f:54:67:85:1f:c1:17:c2:a7:
                    78:32:e0:09:6f:ed:a4:17:c9:ce:25:fc:0a:18:81:
                    62:be:4b:24:48:4c:02:cc:49:b9:a0:2f:d9:64:e4:
                    cf:79:60:91:b7:97:0e:b9:b8:63:28:77:f3:35:bb:
                    1c:1c:e0:b3:2a:44:30:98:07:c6:41:4e:67:81:4f:
                    ef:e7:0c:3b:0a:8f:42:92:ac:60:1c:23:2f:a2:8a:
                    a2:ae:bb:a9:70:b6:95:fe:f9:34:e7:ac:c5:cc:ca:
                    bf:ee:34:ad:cd:4a:3e:9e:2b:74:e2:b2:b7:2a:6f:
                    ef:aa:59:f7:a6:e7:f1:40:e3:75:ca:4a:41:b6:2c:
                    bd:31:45:63:7c:d1:48:3f:30:a3:f7:1c:81:c5:fc:
                    8d:9b:08:47:90:2b:d1:18:9c:3e:30:94:42:70:b4:
                    5e:e3:25:41:d2:76:df:86:36:3a:35:28:89:6c:47:
                    74:8b:d5:d7:63:88:e2:8a:a9:20:a3:b9:e5:7d:c3:
                    7f:c7:0a:11:cb:50:06:3d:b8:9b:ae:c3:5a:5d:cd:
                    ef:d7:cb:b2:a7:35:d2:d8:54:09:b0:58:88:02:ed:
                    90:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:14:BB:AA:F2:D8:18:70:A1:6E:F4:54:90:89:D6:56:CA:80:38:C0
            X509v3 Authority Key Identifier:
                keyid:76:81:FB:7E:1B:23:E7:8B:DF:33:E0:14:09:58:1F:63:9C:DD:A1:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/7681FB7E1B23E78BDF33E01409581F639CDDA12C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7681FB7E1B23E78BDF33E01409581F639CDDA12C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4p3K7ZzKsrxqjMz4jmp3eXBZg8dcQLv8AXytoMp811DN/0/3133382e3131382e35372e302f32342d3234203d3e20323634323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:81:96:f1:b3:6a:b9:26:13:72:00:2f:b7:2e:5a:d0:e9:a2:
         7f:19:38:37:f7:7f:d4:a6:81:c3:76:42:94:82:78:45:58:0b:
         a0:36:e5:cb:d8:c8:16:72:e6:cc:d3:19:5e:d6:2d:85:37:4c:
         ee:a0:87:8f:65:c1:7f:55:63:a7:39:b6:f1:2f:0c:8d:91:50:
         f1:a6:76:20:9d:fd:e5:5e:59:7c:d4:d7:1d:be:dc:a3:67:e4:
         8a:d1:73:37:b6:4e:5a:4c:24:ef:09:ae:3c:1c:8d:e5:6f:90:
         fa:88:ed:3b:8d:92:6e:3c:ce:f0:fb:63:ac:29:35:c2:f9:55:
         a0:41:ce:78:ee:00:0a:aa:27:cb:67:5d:64:ee:e1:91:c9:19:
         88:cd:7f:c4:86:c8:31:b0:a9:b3:3c:d4:a7:b1:18:f6:ef:a1:
         c0:3a:9f:99:33:8c:d5:5a:b0:0f:7a:f9:0a:b7:58:ef:a0:29:
         20:c4:af:3b:94:5f:ad:8d:b3:16:fb:0b:81:c0:d2:9d:ce:67:
         84:0c:20:f7:39:30:12:f8:2d:99:2a:db:6a:07:ae:3b:10:1b:
         d2:00:d1:05:51:48:af:7c:a7:c9:c1:93:3e:93:a1:cb:6d:82:
         da:2a:a3:b2:07:ac:f1:06:b6:f1:87:e8:4d:84:b9:cc:ff:34:
         5a:d2:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:49 2025 by rpki-client