Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3234203d3e20323634353731.roa
File:                     3133382e33362e38302e302f32322d3234203d3e20323634353731.roa (raw, json)
Hash identifier:          W9cuh6TY+DbzNPDLc450PMX/lZENV+B6iA3ixoKigao=
Subject key identifier:   13:77:7D:91:EA:A4:89:F0:56:92:4D:AD:66:FB:A3:CD:1A:CA:4B:9F
Certificate issuer:       /CN=84210C699884A23E38D45F40B27833D84A440F91
Certificate serial:       6CA3333F92B175012F24A533E504BFEF7776FC87
Authority key identifier: 84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3234203d3e20323634353731.roa
Signing time:             Tue 15 Jul 2025 18:00:00 +0000
ROA not before:           Tue 15 Jul 2025 17:55:00 +0000
ROA not after:            Tue 14 Jul 2026 18:00:00 +0000
asID:                     264571
IP address blocks:        138.36.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl
                          rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 01:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:a3:33:3f:92:b1:75:01:2f:24:a5:33:e5:04:bf:ef:77:76:fc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84210C699884A23E38D45F40B27833D84A440F91
        Validity
            Not Before: Jul 15 17:55:00 2025 GMT
            Not After : Jul 14 18:00:00 2026 GMT
        Subject: CN=13777D91EAA489F056924DAD66FBA3CD1ACA4B9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4a:8f:9a:af:b6:64:2f:e5:71:fc:84:bf:93:
                    33:4e:6f:dc:76:72:c1:85:39:ee:f6:b7:08:3a:0d:
                    f6:ab:c2:53:d0:64:f0:e5:16:c7:c5:ec:1e:13:f8:
                    6d:0f:a9:ac:eb:97:a8:8a:2d:eb:b9:20:09:1f:b4:
                    15:04:92:e4:9a:6c:86:27:e2:a5:87:f4:94:81:da:
                    db:9f:52:27:8c:41:bf:61:21:b7:1f:e4:3a:2c:20:
                    19:de:da:b1:43:49:f5:33:4f:12:f6:b1:53:b2:19:
                    87:e9:5a:f6:43:07:2f:d9:a5:76:02:ad:71:38:b9:
                    34:1d:dd:ff:e3:43:9c:40:f0:79:01:3c:c2:e6:22:
                    08:87:0c:3e:5c:cb:8a:1b:42:ff:95:6a:f1:52:f1:
                    39:77:15:20:7d:f2:06:76:be:76:fc:93:85:86:7e:
                    aa:74:a9:49:78:d5:9a:7b:dd:18:89:f4:f8:fa:1b:
                    14:ff:17:b7:0d:1b:70:32:f6:c2:98:a7:8b:91:38:
                    98:e3:0c:61:89:22:55:76:34:fe:be:70:2c:3b:66:
                    2e:44:ed:11:c4:1c:e1:74:43:6f:4d:71:f1:bf:40:
                    e8:65:ce:37:db:cd:17:47:e7:b4:6c:f5:ca:48:dc:
                    d5:a6:86:df:1b:f6:8f:01:cc:0a:11:89:d0:c6:e8:
                    ac:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:7D:91:EA:A4:89:F0:56:92:4D:AD:66:FB:A3:CD:1A:CA:4B:9F
            X509v3 Authority Key Identifier:
                keyid:84:21:0C:69:98:84:A2:3E:38:D4:5F:40:B2:78:33:D8:4A:44:0F:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/84210C699884A23E38D45F40B27833D84A440F91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/84210C699884A23E38D45F40B27833D84A440F91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CPxhNqg5EAcghUDjU4YBeesmmKaFdqnvE3r5GK5fnyFF/1/3133382e33362e38302e302f32322d3234203d3e20323634353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:31:1d:d8:a2:83:53:64:69:a0:f9:3f:43:44:cc:f1:60:
         87:b6:b1:24:e0:55:91:38:a4:3b:a7:12:ba:25:1a:05:d8:23:
         44:c1:83:89:c8:82:84:61:6c:56:8b:75:ba:95:c1:37:c6:8e:
         7f:74:54:3b:3f:b4:f8:c1:d3:e4:a4:51:8f:e5:f2:82:e3:b5:
         fc:83:1e:d4:c7:0f:f0:0a:44:42:7e:5f:0b:84:1a:29:73:bf:
         0c:c3:c1:0f:59:95:8e:50:00:0c:fe:ac:99:05:fc:0c:6c:1d:
         ea:46:81:0d:75:d8:a1:19:8d:50:63:44:51:0a:66:b3:28:71:
         31:21:ab:1e:36:ed:d9:cd:ec:bd:4c:88:66:8e:ef:a0:d4:99:
         e3:6a:05:f5:66:11:1b:28:bb:17:b7:05:e1:7e:b7:7b:88:17:
         e9:a3:71:6a:72:73:8a:cd:26:97:d4:97:d5:d9:78:6d:cf:9c:
         d4:93:fe:28:08:31:d2:8f:0a:26:3e:70:03:21:6b:4b:e8:0a:
         e6:62:c7:4d:ff:6e:00:14:df:a8:e6:d8:bb:b9:61:df:5a:cf:
         04:80:52:41:45:5f:fc:68:61:56:f6:df:48:26:a9:4a:20:f1:
         73:fa:ea:6d:79:df:0d:11:74:40:da:e5:8b:83:3f:d3:1b:80:
         e3:60:cc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:08:07 2025 by rpki-client