Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa
File:                     3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa (raw, json)
Hash identifier:          WlJfFS2bQ4BsOaS+LWZWNeTIh0wmUxUwvzwaypn4lEY=
Subject key identifier:   3C:BB:CF:27:EB:6C:34:49:27:2A:31:26:CC:E2:D3:07:23:D5:89:79
Certificate issuer:       /CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
Certificate serial:       39BB6ABEB7B5F4B27266E700E82FD2A5E87BF79E
Authority key identifier: FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa
Signing time:             Tue 19 Aug 2025 14:02:33 +0000
ROA not before:           Tue 19 Aug 2025 13:57:33 +0000
ROA not after:            Tue 18 Aug 2026 14:02:33 +0000
asID:                     262293
IP address blocks:        138.94.108.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl
                          rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 13:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:bb:6a:be:b7:b5:f4:b2:72:66:e7:00:e8:2f:d2:a5:e8:7b:f7:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC32F5E77BB553A3096A33BBDE768287D0B14B26
        Validity
            Not Before: Aug 19 13:57:33 2025 GMT
            Not After : Aug 18 14:02:33 2026 GMT
        Subject: CN=3CBBCF27EB6C3449272A3126CCE2D30723D58979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:08:18:b3:ef:a3:cd:28:9c:3f:68:d4:09:35:
                    97:98:a0:a2:cb:f6:38:df:e8:a4:bd:7a:cf:8a:e2:
                    04:f6:43:13:c4:60:ca:8d:ff:79:62:a3:b3:75:eb:
                    04:ae:64:c5:1a:ba:d8:4b:39:4b:80:e3:b2:de:c6:
                    f9:a6:98:27:41:47:e7:24:5e:e5:04:7c:ad:5c:c4:
                    7e:d6:8d:7a:0d:18:e5:35:f4:e9:db:ad:b2:6a:28:
                    60:a2:7a:d6:2d:1c:57:56:9b:ba:2e:d7:b0:7e:7d:
                    50:eb:01:a1:51:36:79:b8:00:55:47:eb:d3:cf:18:
                    b7:0e:52:c6:80:80:5c:31:e1:ed:5a:6c:e2:ad:19:
                    06:5b:63:4b:f8:6c:c6:87:bb:34:aa:5d:b8:e4:65:
                    19:a4:26:cb:5b:31:fb:4f:4a:94:95:9c:a0:90:f3:
                    ff:54:49:1f:3f:cc:11:10:33:3e:c4:23:15:ba:73:
                    32:2a:17:9d:47:d1:01:8d:73:43:5a:0d:e2:0d:89:
                    3a:2b:b0:a3:b1:0d:9b:85:6d:9e:bd:e8:f8:5e:08:
                    a9:61:88:d0:03:80:16:51:92:77:31:16:76:ec:15:
                    eb:52:03:85:01:ba:b5:47:da:6c:30:b8:95:3b:53:
                    9b:3f:ca:0f:1f:21:85:ba:7e:72:6b:cc:d1:82:f5:
                    6e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BB:CF:27:EB:6C:34:49:27:2A:31:26:CC:E2:D3:07:23:D5:89:79
            X509v3 Authority Key Identifier:
                keyid:FC:32:F5:E7:7B:B5:53:A3:09:6A:33:BB:DE:76:82:87:D0:B1:4B:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/FC32F5E77BB553A3096A33BBDE768287D0B14B26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FC32F5E77BB553A3096A33BBDE768287D0B14B26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/3133382e39342e3130382e302f32322d3332203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:57:13:b8:b9:75:de:6c:c8:07:97:8e:32:ce:91:07:bc:d7:
         a4:32:29:6f:78:2f:57:51:66:4c:e1:d5:9f:32:c9:f0:fe:14:
         31:ab:7a:ab:69:79:1e:ef:79:6a:42:3d:8f:b0:88:80:ea:f6:
         7b:2a:3d:e1:40:98:54:ff:07:bd:1b:7a:61:c3:13:fb:eb:7b:
         68:e1:92:c2:b4:46:5d:3e:20:38:1c:75:93:86:bd:c6:1f:89:
         d5:3f:7f:08:16:7f:86:80:00:0d:3f:63:7b:ed:36:59:49:7c:
         53:03:6d:f0:d8:f2:cb:db:79:c3:8b:53:59:e9:8f:95:8a:bf:
         81:ab:11:1d:48:de:f3:8f:ae:38:68:54:1b:e8:75:81:f5:43:
         ba:40:43:3d:91:6b:37:fd:3f:71:d8:ab:e4:de:eb:17:7b:b2:
         94:63:9f:ab:6f:94:c2:41:cc:8c:ed:0a:ea:b7:ba:29:af:d4:
         a7:78:d9:7b:a3:3a:4b:ec:18:9b:e3:8f:c0:cb:d5:b1:37:3e:
         7a:02:8a:05:a3:05:68:25:79:99:b5:01:23:76:38:a4:54:8c:
         a0:4f:c2:5d:45:a7:4b:6c:d5:f8:83:c7:63:74:7a:a1:52:d0:
         36:cd:25:9d:19:4f:10:ba:d6:a8:e8:58:e9:e6:87:f6:c0:6b:
         ac:c4:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:55:04 2025 by rpki-client