Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134372e302f32342d3234203d3e20323730373034.roa
File:                     3138392e3132372e3134372e302f32342d3234203d3e20323730373034.roa (raw, json)
Hash identifier:          e5ZW7O9Uoqvgv+PAaJU2dlRbraYjptqukczKZ6rtBFQ=
Subject key identifier:   B7:84:4B:4A:22:4A:5F:11:D4:77:5E:29:CB:70:4A:10:9A:B1:35:BB
Certificate issuer:       /CN=1374315B9575D65AACB45CAFC3702522BE608F60
Certificate serial:       0A581EB15B8FF7A44C20BF51932E8EA86843220A
Authority key identifier: 13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134372e302f32342d3234203d3e20323730373034.roa
Signing time:             Fri 03 Oct 2025 02:28:52 +0000
ROA not before:           Fri 03 Oct 2025 02:23:52 +0000
ROA not after:            Fri 02 Oct 2026 02:28:52 +0000
asID:                     270704
IP address blocks:        189.127.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl
                          rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 Oct 2025 23:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:58:1e:b1:5b:8f:f7:a4:4c:20:bf:51:93:2e:8e:a8:68:43:22:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1374315B9575D65AACB45CAFC3702522BE608F60
        Validity
            Not Before: Oct  3 02:23:52 2025 GMT
            Not After : Oct  2 02:28:52 2026 GMT
        Subject: CN=B7844B4A224A5F11D4775E29CB704A109AB135BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:4d:5e:ab:be:1d:97:d2:4e:f7:34:4a:99:
                    b5:a1:d7:23:67:a2:7f:b3:93:53:ba:e0:c9:e7:18:
                    d2:f3:db:48:6e:97:a4:35:82:ca:24:34:7f:69:e5:
                    be:1c:ed:4d:33:57:d6:bc:20:8a:bb:77:d3:d2:96:
                    67:07:21:b5:ef:fa:ef:ef:99:0d:53:3c:4f:d3:fe:
                    9b:77:34:6f:6b:c2:7e:2b:93:da:e7:5d:1c:b3:71:
                    3c:da:b1:19:be:0a:db:96:f2:b7:e4:84:56:19:c2:
                    31:66:0f:72:bc:1e:dc:bc:87:71:bb:fe:da:97:76:
                    1e:49:8d:c2:59:84:f7:05:00:1b:0a:f3:bf:46:03:
                    b0:48:53:ee:2e:1b:cd:73:d8:6e:46:43:ba:aa:54:
                    ed:15:5d:ed:7c:7c:44:70:a1:9a:aa:e1:90:56:33:
                    82:08:51:8b:a8:66:19:1a:d4:de:5d:4e:3a:52:d8:
                    15:17:9c:43:b5:83:02:b9:ae:9a:17:b1:02:f0:4b:
                    d0:04:c6:75:4b:fe:c5:da:05:ea:f9:69:33:ba:ef:
                    1a:a7:e0:a8:98:aa:c9:64:95:b6:23:08:dc:2d:7d:
                    28:70:34:f2:55:da:b3:00:86:d9:fd:c4:4d:15:6e:
                    90:97:e9:be:be:90:36:3b:e0:ea:40:db:6a:9f:c4:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:84:4B:4A:22:4A:5F:11:D4:77:5E:29:CB:70:4A:10:9A:B1:35:BB
            X509v3 Authority Key Identifier:
                keyid:13:74:31:5B:95:75:D6:5A:AC:B4:5C:AF:C3:70:25:22:BE:60:8F:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/1374315B9575D65AACB45CAFC3702522BE608F60.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1374315B9575D65AACB45CAFC3702522BE608F60.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/3138392e3132372e3134372e302f32342d3234203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:98:92:f7:25:f8:e7:d6:a9:bf:3d:7e:c5:c4:1d:f6:e6:c5:
         8d:62:8f:b0:95:d4:69:34:bc:45:e3:6c:4b:31:0b:4f:86:09:
         af:08:44:29:c5:3d:2b:01:c6:e4:77:69:b6:71:53:65:57:0b:
         0a:6c:05:0a:f1:97:3b:6b:7a:05:14:2b:8f:e7:85:63:1e:4f:
         91:76:0e:3e:b9:7c:15:13:ba:d9:ae:30:85:ec:aa:8f:18:0f:
         ba:d8:df:de:67:bf:2b:14:a5:b8:fb:c0:f0:8a:d5:22:10:22:
         81:ba:be:e5:26:c9:72:3c:e1:3e:c7:8f:d0:50:2b:6f:68:ca:
         9c:b4:98:fe:0c:28:77:30:a6:df:cf:60:55:dc:03:67:7e:d7:
         6a:0d:ae:14:21:73:76:2e:72:fb:d4:a1:81:a3:e3:b0:05:06:
         48:04:be:ca:7b:f3:8b:29:5d:5d:64:4b:ca:6c:05:d8:78:63:
         4b:14:d5:26:de:d4:25:ed:73:fa:8a:f4:c4:50:1f:65:3d:a2:
         32:e2:19:16:00:1f:2f:3e:5d:9e:46:b3:9d:dc:f4:1f:dd:49:
         32:19:98:c5:42:0e:97:af:b0:5c:d4:ac:2a:2d:4d:9e:60:38:
         d2:63:1b:a2:f9:fb:82:c8:43:e9:6a:6c:b6:55:45:9c:8e:9a:
         ee:83:f1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:49 2025 by rpki-client