Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32332d3233203d3e20323634323830.roa
File:                     3133382e3235352e3133362e302f32332d3233203d3e20323634323830.roa (raw, json)
Hash identifier:          OtgpoaWSYggZmGux+5x5+Is6U9BSlBmCde2Lwu62Okc=
Subject key identifier:   1E:73:A7:D2:96:BB:5C:9D:72:09:3A:92:14:73:AA:60:69:9D:4D:9A
Certificate issuer:       /CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
Certificate serial:       4C74A2A4E8903ED51707755878BF1F5D05BC988F
Authority key identifier: E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32332d3233203d3e20323634323830.roa
Signing time:             Tue 28 Jul 2026 18:32:03 +0000
ROA not before:           Tue 28 Jul 2026 18:27:03 +0000
ROA not after:            Tue 27 Jul 2027 18:32:03 +0000
asID:                     264280
IP address blocks:        138.255.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl
                          rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:74:a2:a4:e8:90:3e:d5:17:07:75:58:78:bf:1f:5d:05:bc:98:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
        Validity
            Not Before: Jul 28 18:27:03 2026 GMT
            Not After : Jul 27 18:32:03 2027 GMT
        Subject: CN=1E73A7D296BB5C9D72093A921473AA60699D4D9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:67:82:b4:e9:4b:3c:4a:0b:31:52:78:b7:
                    f8:7c:2d:e3:a5:cc:10:3c:c3:c5:ce:e9:63:b2:a9:
                    41:da:e3:ed:b5:db:59:37:bf:cc:fb:f4:af:20:04:
                    15:7f:80:aa:89:41:04:b8:85:c4:09:e8:e7:49:81:
                    ca:11:ac:2c:33:65:81:e8:6f:37:84:94:10:fe:2a:
                    f8:63:65:63:dc:dd:d3:81:95:66:b2:b7:ba:b3:26:
                    84:a6:e0:62:dc:78:58:0c:ab:75:0c:ad:20:03:90:
                    e4:86:75:75:de:3e:0c:42:76:c6:8a:3f:fa:38:ad:
                    ea:6f:ce:a3:bf:f7:9a:08:0f:a5:79:81:79:ed:53:
                    a4:94:c3:2c:da:58:c5:23:6b:90:d6:96:5e:dd:ba:
                    0d:13:0b:82:0b:d7:03:68:fd:f4:8e:4e:23:27:1e:
                    c0:dd:07:d9:30:b6:cb:f6:21:15:88:0e:7d:c3:97:
                    b4:c1:8a:3d:8e:d9:9b:82:56:87:67:e2:32:06:39:
                    80:a0:df:d4:62:7a:a1:1c:74:be:97:6a:9d:03:73:
                    90:38:33:86:67:fb:3b:8d:d9:d8:e6:3c:9a:dd:f5:
                    36:d3:23:23:0b:75:91:73:fa:44:56:f3:cc:89:ea:
                    55:ca:f7:73:1f:82:fe:65:f6:0e:8e:1e:fa:6f:14:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:73:A7:D2:96:BB:5C:9D:72:09:3A:92:14:73:AA:60:69:9D:4D:9A
            X509v3 Authority Key Identifier:
                keyid:E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32332d3233203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:16:55:76:f0:1e:76:06:17:a2:71:77:f0:01:77:61:95:50:
         f2:55:76:51:ef:8c:3c:ca:d3:d1:18:a9:2b:9b:f6:f1:73:48:
         ad:56:8b:68:47:69:c2:eb:28:45:74:d6:fc:eb:bf:b6:48:58:
         f8:3b:3d:24:0f:d5:4a:ee:ad:06:dc:a1:f3:4d:bc:6f:0d:88:
         fb:e2:1d:a0:fb:f4:7e:ba:f4:30:95:7e:ab:15:01:21:54:49:
         ed:be:ae:fd:06:0e:98:88:24:4a:39:4a:c1:c0:ca:ae:c9:59:
         ae:3d:c4:1c:e0:b6:4e:c8:bd:7f:71:32:09:98:af:ed:50:92:
         84:d3:fb:d6:af:ca:08:19:cf:12:6d:05:b6:3f:3d:5b:2d:11:
         f5:f3:0d:8b:fc:3f:68:71:77:66:7a:d2:3e:1d:f6:a0:d3:d1:
         62:29:e6:5e:87:a5:ad:84:bb:ed:59:bd:71:78:e1:d0:52:6b:
         0a:c5:44:1c:f2:40:e7:b0:09:16:a1:91:f3:67:ad:8b:4f:47:
         c5:0d:18:cf:4e:c5:48:7d:ca:e0:3a:1e:3d:f2:ab:af:2d:38:
         d8:98:f7:fc:29:44:c5:6b:81:69:37:7c:f0:6f:84:1a:14:c9:
         50:3e:f3:1f:97:df:3f:ff:99:aa:36:89:7d:73:dd:c3:24:36:
         cf:61:36:35
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUTHSipOiQPtUXB3VYeL8fXQW8mI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3RjQ2OThFNjc5MkI1NkJBQUUxRDI0RTg3QUMyQzhF
M0U1RUIzQjAeFw0yNjA3MjgxODI3MDNaFw0yNzA3MjcxODMyMDNaMDMxMTAvBgNV
BAMTKDFFNzNBN0QyOTZCQjVDOUQ3MjA5M0E5MjE0NzNBQTYwNjk5RDREOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgcmeCtOlLPEoLMVJ4t/h8LeOl
zBA8w8XO6WOyqUHa4+2121k3v8z79K8gBBV/gKqJQQS4hcQJ6OdJgcoRrCwzZYHo
bzeElBD+KvhjZWPc3dOBlWayt7qzJoSm4GLceFgMq3UMrSADkOSGdXXePgxCdsaK
P/o4repvzqO/95oID6V5gXntU6SUwyzaWMUja5DWll7dug0TC4IL1wNo/fSOTiMn
HsDdB9kwtsv2IRWIDn3Dl7TBij2O2ZuCVodn4jIGOYCg39RieqEcdL6Xap0Dc5A4
M4Zn+zuN2djmPJrd9TbTIyMLdZFz+kRW88yJ6lXK93Mfgv5l9g6OHvpvFLkpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUHnOn0pa7XJ1yCTqSFHOqYGmdTZowHwYDVR0j
BBgwFoAU5H9GmOZ5K1a6rh0k6HrCyOPl6zswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNHUmh6cWhxUm9kQ290ZXR2RlJCdG52N0hTS29nUFJ2NWk0ejdwdGJv
U2EvMC9FNDdGNDY5OEU2NzkyQjU2QkFBRTFEMjRFODdBQzJDOEUzRTVFQjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0N0Y0Njk4RTY3OTJCNTZC
QUFFMUQyNEU4N0FDMkM4RTNFNUVCM0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTR1JoenFocVJvZENvdGV0dkZSQnRudjdIU0tvZ1BSdjVpNHo3cHRib1NhLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzMzNjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMy
MzYzNDMyMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAYr/iDANBgkqhkiG9w0BAQsFAAOCAQEATxZV
dvAedgYXonF38AF3YZVQ8lV2Ue+MPMrT0RipK5v28XNIrVaLaEdpwusoRXTW/Ou/
tkhY+Ds9JA/VSu6tBtyh8028bw2I++IdoPv0frr0MJV+qxUBIVRJ7b6u/QYOmIgk
SjlKwcDKrslZrj3EHOC2Tsi9f3EyCZiv7VCShNP71q/KCBnPEm0Ftj89Wy0R9fMN
i/w/aHF3ZnrSPh32oNPRYinmXoelrYS77Vm9cXjh0FJrCsVEHPJA57AJFqGR82et
i09HxQ0Yz07FSH3K4DoePfKrry042Jj3/ClExWuBaTd88G+EGhTJUD7zH5ffP/+Z
qjaJfXPdwyQ2z2E2NQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:40:28 2026 by rpki-client