Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139332e302f32342d3234203d3e20323632353335.roa
File:                     3133382e33362e3139332e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          xB0EOkRTyYzpqA912zr5o0BmRZ35/jySaJKYTJPV6U8=
Subject key identifier:   3F:49:F2:0B:66:F8:B1:6D:EA:A4:7A:82:6F:A2:15:71:F1:E1:0F:80
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       7D308E5EC2BB88C27DA057492F84B1B35DB1A6E7
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139332e302f32342d3234203d3e20323632353335.roa
Signing time:             Thu 14 Aug 2025 23:53:43 +0000
ROA not before:           Thu 14 Aug 2025 23:48:43 +0000
ROA not after:            Thu 13 Aug 2026 23:53:43 +0000
asID:                     262535
IP address blocks:        138.36.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 05:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:30:8e:5e:c2:bb:88:c2:7d:a0:57:49:2f:84:b1:b3:5d:b1:a6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Aug 14 23:48:43 2025 GMT
            Not After : Aug 13 23:53:43 2026 GMT
        Subject: CN=3F49F20B66F8B16DEAA47A826FA21571F1E10F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:a2:89:40:e6:7f:b9:0e:10:7b:be:f6:bb:
                    0c:af:2d:18:41:cf:bf:da:c7:ea:01:e9:7a:50:e5:
                    05:d8:81:4d:86:2a:df:52:f7:c2:72:0d:22:51:68:
                    42:8a:56:f5:2a:d9:f0:f0:6a:fe:66:36:3b:74:26:
                    26:9e:9a:e5:8e:5a:b7:ab:ca:75:4b:fe:84:58:1b:
                    70:08:70:f8:89:53:a2:38:10:2b:17:5e:80:47:cb:
                    5d:b9:69:0d:a4:97:1a:54:86:b5:e5:3b:c5:bf:b1:
                    7f:96:f9:15:49:72:73:b0:40:3e:3f:ce:6e:91:56:
                    c0:0b:51:0f:68:77:c2:d6:1b:f1:88:37:2b:f7:db:
                    3e:57:77:44:03:e8:2b:54:30:5d:b0:ac:b3:eb:31:
                    69:26:87:db:b6:72:1b:bf:18:20:f9:8d:ba:cf:84:
                    0b:14:0b:e6:7f:5c:93:f1:1b:b4:9f:98:e8:c4:d6:
                    5d:b9:01:ad:ef:98:f8:2c:63:d0:cd:6b:0c:c8:9e:
                    89:ad:dd:f7:2d:04:2a:a2:a8:52:fe:b5:b3:e2:5c:
                    5d:20:83:f2:fb:61:2a:1d:06:c5:02:c8:80:eb:f7:
                    50:ff:57:cf:66:6b:b5:95:f7:8e:73:6b:22:fa:0d:
                    db:c0:22:22:81:ea:e6:1d:74:28:69:d7:44:47:5a:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:49:F2:0B:66:F8:B1:6D:EA:A4:7A:82:6F:A2:15:71:F1:E1:0F:80
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139332e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:f3:d1:b0:f3:c6:23:e9:95:51:48:37:5b:fd:59:c9:c0:49:
         31:51:5a:d6:19:8f:76:8c:a4:4b:f7:7d:b2:79:e8:a6:a3:71:
         d6:45:df:82:95:4b:9f:16:0f:3d:e3:f4:5e:4b:2b:4b:32:d6:
         36:0f:b6:6a:21:a7:71:a7:f0:e7:42:83:2e:1a:76:fb:54:b3:
         5b:ea:76:8b:62:6b:39:d2:2d:53:9a:f1:24:b4:b9:3d:96:fa:
         83:8d:87:c0:ad:2d:03:68:d0:7a:48:62:d6:e5:1d:bc:1b:e6:
         e2:b0:87:9e:50:8e:ee:b7:47:a7:60:81:9b:dc:a2:1d:19:ca:
         8a:da:f9:9c:9f:10:de:7d:66:11:03:c2:83:21:28:02:cf:53:
         74:ff:30:f7:28:29:80:e2:d6:4c:af:ca:b7:70:8c:96:48:9b:
         e2:b6:00:68:fe:b9:e1:f4:9a:98:7b:cd:fd:1a:a9:b3:b8:21:
         ee:c2:0d:65:37:4b:c2:d1:a8:30:72:9b:fa:c0:da:48:76:a7:
         53:5a:0e:33:30:2d:d8:33:58:15:92:10:14:2f:24:b8:1b:77:
         c7:56:82:f2:25:95:4d:2d:b4:82:57:d8:ff:0c:a3:f1:78:cd:
         a3:d3:a3:e7:ec:61:dc:51:cf:21:16:e5:fa:9a:b6:59:c8:fc:
         38:28:ae:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 18:31:39 2025 by rpki-client