Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/3133382e302e3137362e302f32342d3234203d3e20323731353634.roa
File:                     3133382e302e3137362e302f32342d3234203d3e20323731353634.roa (raw, json)
Hash identifier:          0DEwzV1oxuoI/tPUF6DjC4TdiUHJFVen+RWG0qhZ9RQ=
Subject key identifier:   C3:9C:82:CD:B8:73:10:1A:BA:0F:13:89:D4:D6:94:3F:10:1E:EB:93
Certificate issuer:       /CN=352697188E21CDA56966652063EA79DB7E2D6512
Certificate serial:       452D80E95CFDEC20822AD44E9FD2680CF422986E
Authority key identifier: 35:26:97:18:8E:21:CD:A5:69:66:65:20:63:EA:79:DB:7E:2D:65:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/3133382e302e3137362e302f32342d3234203d3e20323731353634.roa
Signing time:             Mon 04 Aug 2025 11:44:47 +0000
ROA not before:           Mon 04 Aug 2025 11:39:47 +0000
ROA not after:            Mon 03 Aug 2026 11:44:47 +0000
asID:                     271564
IP address blocks:        138.0.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/352697188E21CDA56966652063EA79DB7E2D6512.crl
                          rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/352697188E21CDA56966652063EA79DB7E2D6512.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 01:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2d:80:e9:5c:fd:ec:20:82:2a:d4:4e:9f:d2:68:0c:f4:22:98:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=352697188E21CDA56966652063EA79DB7E2D6512
        Validity
            Not Before: Aug  4 11:39:47 2025 GMT
            Not After : Aug  3 11:44:47 2026 GMT
        Subject: CN=C39C82CDB873101ABA0F1389D4D6943F101EEB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:d4:03:14:fc:9d:9f:65:a9:c8:98:e1:2c:
                    e8:aa:ea:b7:4f:3a:88:60:e6:92:1c:7a:ab:3b:52:
                    f5:fa:92:7f:ab:e1:2c:4f:b1:3e:04:ed:63:d0:7c:
                    6d:a8:09:4f:46:05:6e:af:fc:c9:7c:58:bc:f6:6e:
                    83:c8:81:a0:7b:ee:b8:af:72:80:42:c8:f5:24:4f:
                    d8:fd:f3:37:d6:90:b7:2a:e0:14:cc:27:5e:69:a6:
                    04:96:18:d9:d7:b9:2b:8a:18:03:1e:72:87:3e:80:
                    c9:aa:05:3c:8d:30:70:01:2c:74:59:7f:f9:b9:86:
                    bb:e0:e6:cb:41:e4:bf:a5:04:91:7b:ad:a6:48:99:
                    63:7b:b6:e5:54:56:9c:b9:02:71:74:f2:5d:a3:7c:
                    f4:13:c5:6d:19:52:41:e4:89:30:00:b9:38:05:b3:
                    82:13:89:4a:fe:3b:7b:fa:7f:22:b6:82:bc:5e:8c:
                    c1:bc:2c:67:2d:88:50:e6:4a:2a:c5:1a:ab:e2:8a:
                    ab:88:dd:c5:24:0e:f6:ae:1e:38:74:52:5c:5f:71:
                    5c:85:5d:1e:b7:cd:36:f1:b2:65:ae:bd:41:e1:1c:
                    5d:a3:80:ee:1f:c2:3a:9b:6c:5e:f6:8c:85:15:19:
                    76:1e:a2:db:48:c1:79:2b:f1:ed:8a:84:36:0b:93:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9C:82:CD:B8:73:10:1A:BA:0F:13:89:D4:D6:94:3F:10:1E:EB:93
            X509v3 Authority Key Identifier:
                keyid:35:26:97:18:8E:21:CD:A5:69:66:65:20:63:EA:79:DB:7E:2D:65:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/352697188E21CDA56966652063EA79DB7E2D6512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/352697188E21CDA56966652063EA79DB7E2D6512.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSpPnkw5hh2mLN7Fm9GhESxpxnM1zw4VMi9Ha81KGvdb/1/3133382e302e3137362e302f32342d3234203d3e20323731353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:ad:ca:c8:01:4b:ac:7f:e1:31:4f:da:8c:bf:c5:45:2a:
         d4:4c:e5:04:12:9b:7c:28:f4:5a:9b:3b:75:cc:72:09:04:1c:
         5e:52:78:43:97:94:75:8c:ed:e9:52:ae:80:68:67:7e:33:d0:
         ec:cb:1c:1b:7b:08:ca:8d:85:4b:00:7b:2e:76:59:c7:98:71:
         d3:e5:db:12:71:b6:a5:cb:ca:f5:0d:3b:9c:fd:76:d8:a0:92:
         62:56:bd:4f:26:4d:4f:bc:14:38:59:81:f2:c6:aa:f0:fb:e0:
         02:e0:e0:c7:f8:ae:8f:9a:85:f6:30:90:93:6c:8f:30:76:b2:
         9d:da:cb:a0:ff:12:23:31:ae:48:ba:2c:ca:10:3e:b4:91:8d:
         6b:7d:b1:d8:e7:3a:c0:75:02:0d:85:61:15:73:f2:ea:f1:e6:
         66:16:10:65:dd:b9:09:3f:02:f8:3c:ad:dc:26:53:bd:53:e7:
         72:1f:a7:25:16:95:21:c6:ee:1d:d8:f8:30:4d:27:fb:6d:74:
         80:a1:8a:c6:d7:4a:8f:53:92:c7:a6:ea:29:09:82:02:0f:e4:
         81:04:27:e9:02:23:45:21:c4:93:0f:f0:5d:a8:26:ff:79:9d:
         b1:fb:43:1e:b2:3d:7f:64:cc:b7:23:12:dc:e3:c2:94:d6:a8:
         90:4b:da:5b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURS2A6Vz97CCCKtROn9JoDPQimG4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyNjk3MTg4RTIxQ0RBNTY5NjY2NTIwNjNFQTc5REI3
RTJENjUxMjAeFw0yNTA4MDQxMTM5NDdaFw0yNjA4MDMxMTQ0NDdaMDMxMTAvBgNV
BAMTKEMzOUM4MkNEQjg3MzEwMUFCQTBGMTM4OUQ0RDY5NDNGMTAxRUVCOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7z9QDFPydn2WpyJjhLOiq6rdP
Oohg5pIceqs7UvX6kn+r4SxPsT4E7WPQfG2oCU9GBW6v/Ml8WLz2boPIgaB77riv
coBCyPUkT9j98zfWkLcq4BTMJ15ppgSWGNnXuSuKGAMecoc+gMmqBTyNMHABLHRZ
f/m5hrvg5stB5L+lBJF7raZImWN7tuVUVpy5AnF08l2jfPQTxW0ZUkHkiTAAuTgF
s4ITiUr+O3v6fyK2grxejMG8LGctiFDmSirFGqviiquI3cUkDvauHjh0UlxfcVyF
XR63zTbxsmWuvUHhHF2jgO4fwjqbbF72jIUVGXYeottIwXkr8e2KhDYLk5fjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUw5yCzbhzEBq6DxOJ1NaUPxAe65MwHwYDVR0j
BBgwFoAUNSaXGI4hzaVpZmUgY+p5234tZRIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNwUG5rdzVoaDJtTE43Rm05R2hFU3hweG5NMXp3NFZNaTlIYTgxS0d2
ZGIvMS8zNTI2OTcxODhFMjFDREE1Njk2NjY1MjA2M0VBNzlEQjdFMkQ2NTEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjY5NzE4OEUyMUNEQTU2
OTY2NjUyMDYzRUE3OURCN0UyRDY1MTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTcFBua3c1aGgybUxON0ZtOUdoRVN4cHhuTTF6dzRWTWk5SGE4MUtHdmRiLzEv
MzEzMzM4MmUzMDJlMzEzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzUzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAigCwMA0GCSqGSIb3DQEBCwUAA4IBAQAf763KyAFL
rH/hMU/ajL/FRSrUTOUEEpt8KPRamzt1zHIJBBxeUnhDl5R1jO3pUq6AaGd+M9Ds
yxwbewjKjYVLAHsudlnHmHHT5dsScbaly8r1DTuc/XbYoJJiVr1PJk1PvBQ4WYHy
xqrw++AC4ODH+K6PmoX2MJCTbI8wdrKd2sug/xIjMa5IuizKED60kY1rfbHY5zrA
dQINhWEVc/Lq8eZmFhBl3bkJPwL4PK3cJlO9U+dyH6clFpUhxu4d2PgwTSf7bXSA
oYrG10qPU5LHpuopCYICD+SBBCfpAiNFIcSTD/BdqCb/eZ2x+0Mesj1/ZMy3IxLc
48KU1qiQS9pb
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:12 2025 by rpki-client