Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
File:                     3133382e3131382e342e302f32322d3332203d3e20323634323431.roa (raw, json)
Hash identifier:          IfLNqYf/h/KlEskBZnGAEUBOcmiboQLx50e3BD0fkPM=
Subject key identifier:   8A:9B:A9:9F:D3:67:F2:D5:10:4D:19:CB:DA:DA:24:E3:25:1E:3B:7D
Certificate issuer:       /CN=163A822EB1F1299E4F1A306D50A95304A748A422
Certificate serial:       36582859261DC7549B82328433A8748A84E4B44B
Authority key identifier: 16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa
Signing time:             Mon 06 Oct 2025 19:13:05 +0000
ROA not before:           Mon 06 Oct 2025 19:08:05 +0000
ROA not after:            Mon 05 Oct 2026 19:13:05 +0000
asID:                     264241
IP address blocks:        138.118.4.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.crl
                          rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 08:55:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:58:28:59:26:1d:c7:54:9b:82:32:84:33:a8:74:8a:84:e4:b4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=163A822EB1F1299E4F1A306D50A95304A748A422
        Validity
            Not Before: Oct  6 19:08:05 2025 GMT
            Not After : Oct  5 19:13:05 2026 GMT
        Subject: CN=8A9BA99FD367F2D5104D19CBDADA24E3251E3B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3f:19:af:21:53:a9:f7:87:44:8a:34:5a:47:
                    82:54:4a:e6:d0:e1:be:ef:7c:62:75:e5:09:7b:1c:
                    bb:65:52:c5:f8:09:9c:f9:83:d3:25:78:8b:2d:fa:
                    b2:b1:08:79:b8:04:6b:8a:d1:6d:97:12:65:8b:c1:
                    a0:a3:4c:5b:22:da:38:2f:99:4a:5c:dd:fe:24:9d:
                    10:2e:99:5d:42:bf:c4:02:85:a2:b3:8c:dc:d1:d0:
                    eb:70:a6:45:b0:52:66:5d:1f:96:62:83:49:fa:00:
                    27:1d:cd:a3:92:5e:e0:f9:ea:9f:72:d2:e0:98:80:
                    34:c9:a3:ba:cb:d5:d2:0f:6e:27:9e:a5:70:6a:f0:
                    6f:36:7e:25:52:b9:6c:b6:af:46:24:11:3c:b7:0b:
                    53:02:4c:eb:e8:85:af:ce:5a:6d:9e:92:b8:ef:a6:
                    90:8a:3c:4b:3f:80:c8:32:d3:78:99:8b:68:b1:3e:
                    44:5d:09:03:b4:c4:be:46:4e:00:eb:bb:07:b6:bf:
                    90:0d:4d:8d:7f:80:78:87:ff:05:50:45:4d:38:f1:
                    b2:da:fb:99:89:43:5c:53:2f:b1:91:b0:1a:55:73:
                    2a:91:8d:94:84:59:89:ac:be:c8:27:64:52:a9:9b:
                    eb:9b:58:cf:a3:65:7f:c0:96:8f:72:db:ed:c8:f7:
                    bf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:A9:9F:D3:67:F2:D5:10:4D:19:CB:DA:DA:24:E3:25:1E:3B:7D
            X509v3 Authority Key Identifier:
                keyid:16:3A:82:2E:B1:F1:29:9E:4F:1A:30:6D:50:A9:53:04:A7:48:A4:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/163A822EB1F1299E4F1A306D50A95304A748A422.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/163A822EB1F1299E4F1A306D50A95304A748A422.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/3133382e3131382e342e302f32322d3332203d3e20323634323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:af:92:26:e0:69:16:e4:c7:29:b7:7f:ae:bd:73:fb:ab:6c:
         9f:df:2a:aa:87:9e:31:4c:d5:0b:db:a5:2b:9a:e0:bc:32:b2:
         b4:d6:48:8e:e6:f0:a0:71:a3:7a:c5:f2:f6:4c:ec:79:18:88:
         e2:cd:6d:4e:09:a5:ff:9d:00:b1:c9:79:11:ce:00:10:27:77:
         90:14:d8:16:c4:86:fd:54:a8:46:7e:03:4e:0c:c6:7f:f5:1a:
         89:6a:b3:fe:45:fd:dc:3a:5d:20:b7:73:a7:63:0b:a8:8c:9c:
         03:03:16:7c:f2:c3:21:77:5f:6f:1c:d7:97:c6:54:24:c9:b6:
         2f:2a:df:91:db:45:82:0f:12:32:5d:d2:c8:ad:12:02:3c:f9:
         a5:ca:3a:86:36:27:71:b5:c8:db:12:c8:d6:8d:58:ea:b1:bf:
         f3:3c:a0:2f:65:dd:af:4b:25:ac:69:3d:03:68:0f:8f:4e:fb:
         3b:21:00:cf:5c:37:db:c0:4a:12:80:39:11:12:38:79:76:ef:
         f2:e4:c7:33:ba:10:c5:95:60:2b:e6:3a:e7:c0:d9:8b:a0:b0:
         dc:0f:37:0d:eb:12:d7:32:d6:82:a5:fa:c1:6b:36:43:5e:01:
         3f:c2:b8:d1:7c:87:86:c2:3a:dd:5d:f8:68:bd:f0:0f:41:fc:
         d2:d0:8b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:38 2025 by rpki-client