Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa
File:                     3133382e33362e33362e302f32322d3234203d3e20323634353638.roa (raw, json)
Hash identifier:          Yk2NOjjXp59xSSu7PiyeXVPWtwrxRE//8hZ37HoJd9U=
Subject key identifier:   11:D7:73:50:21:97:AB:51:65:84:1D:19:C8:88:CC:8C:A5:FD:CD:AB
Certificate issuer:       /CN=FE5057C3CE318CF3863966D33006E15CD948B449
Certificate serial:       2949DF3B0DC33BD9462AD1342B541E043E8E523E
Authority key identifier: FE:50:57:C3:CE:31:8C:F3:86:39:66:D3:30:06:E1:5C:D9:48:B4:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5057C3CE318CF3863966D33006E15CD948B449.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa
Signing time:             Tue 29 Jul 2025 20:21:49 +0000
ROA not before:           Tue 29 Jul 2025 20:16:49 +0000
ROA not after:            Tue 28 Jul 2026 20:21:49 +0000
asID:                     264568
IP address blocks:        138.36.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/FE5057C3CE318CF3863966D33006E15CD948B449.crl
                          rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/FE5057C3CE318CF3863966D33006E15CD948B449.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5057C3CE318CF3863966D33006E15CD948B449.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 13 Aug 2025 19:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:49:df:3b:0d:c3:3b:d9:46:2a:d1:34:2b:54:1e:04:3e:8e:52:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE5057C3CE318CF3863966D33006E15CD948B449
        Validity
            Not Before: Jul 29 20:16:49 2025 GMT
            Not After : Jul 28 20:21:49 2026 GMT
        Subject: CN=11D773502197AB5165841D19C888CC8CA5FDCDAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:e6:77:c9:ad:91:5d:25:db:6e:68:37:72:
                    ea:30:f2:1d:66:9f:d6:a8:ed:0b:1b:39:e0:3c:c3:
                    73:1b:17:e2:55:4a:c8:7c:38:28:b6:fa:db:c7:d3:
                    54:5f:86:74:65:69:f3:ba:e6:d0:29:4f:b7:f9:53:
                    28:ae:c1:95:04:d1:52:73:57:74:bb:e4:f7:c4:ba:
                    ff:ce:88:63:4c:d6:11:92:ca:a1:00:b8:fc:62:47:
                    60:5c:d7:e5:d2:15:77:20:94:08:a8:c8:6d:66:54:
                    07:23:68:e7:4b:c1:8a:f5:98:c2:40:d9:9b:3a:99:
                    8c:a7:50:51:88:6f:f7:26:d0:19:3a:e2:d7:b6:f5:
                    07:9b:92:7c:f8:a1:2e:7a:22:35:0f:da:80:44:6d:
                    f6:2e:a3:a7:24:66:42:43:a3:d7:bd:2d:ca:0c:b2:
                    0e:c1:a2:5c:bc:26:5c:3b:e8:72:51:90:da:4e:7d:
                    d9:8d:87:ee:a0:c8:3e:fc:39:7e:34:0f:5f:22:b2:
                    c6:d8:4e:b9:f2:79:f5:00:fb:cb:72:36:44:ff:9b:
                    de:55:46:79:a7:52:85:60:1c:ff:f7:52:c8:fc:13:
                    d4:08:b9:a2:0c:3a:a5:fb:b6:aa:be:96:7d:50:e5:
                    a9:89:e2:a5:d8:27:7a:c0:c9:e0:11:f6:d6:56:0f:
                    5d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D7:73:50:21:97:AB:51:65:84:1D:19:C8:88:CC:8C:A5:FD:CD:AB
            X509v3 Authority Key Identifier:
                keyid:FE:50:57:C3:CE:31:8C:F3:86:39:66:D3:30:06:E1:5C:D9:48:B4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/FE5057C3CE318CF3863966D33006E15CD948B449.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE5057C3CE318CF3863966D33006E15CD948B449.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H81nc1FXRrm37m6HjtDBHBCFK6D7uNmEdtemPMc5Ppo/0/3133382e33362e33362e302f32322d3234203d3e20323634353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:41:56:1c:8e:ee:c3:37:19:10:d2:54:4c:8d:00:99:89:f8:
         bf:d6:30:c5:a0:6a:b1:45:93:28:13:66:36:64:f9:5e:b3:9a:
         97:78:e9:cf:01:d5:14:da:f0:30:ec:8e:93:4d:73:df:0a:2b:
         38:3e:1a:be:69:46:cc:05:a2:b5:ba:ad:14:c9:42:2f:19:50:
         a4:e8:96:ba:07:f4:eb:b2:51:85:e0:0b:a7:6f:08:a6:40:35:
         3d:a3:49:bb:d6:9b:c0:ac:94:04:e9:c2:b8:fb:3e:e6:be:77:
         03:2b:9c:10:8f:cf:10:61:6e:89:eb:0a:c1:58:1b:fa:dc:21:
         b4:63:67:d5:ca:8d:9b:89:73:75:51:23:0c:d8:f4:ca:9c:55:
         37:9e:60:08:d1:af:06:58:0a:1b:e2:25:c2:c4:2d:9a:60:d0:
         3c:cc:3d:a5:0e:c3:c9:5b:13:93:27:01:65:1c:70:99:91:fd:
         4b:ee:48:c8:5b:0f:d4:db:8e:25:5a:ee:a9:14:c5:8c:9f:ee:
         06:f8:32:a1:1e:98:fc:07:f8:31:32:3e:76:0a:6f:1a:9f:c4:
         9f:e0:0a:c7:06:24:00:1a:4b:ec:b1:95:5d:1e:7b:3d:ed:ea:
         fd:c1:f3:89:b1:00:dc:1d:02:4e:64:52:45:99:b4:c7:7b:f2:
         26:b0:d8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:11:07 2025 by rpki-client