Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32342d3234203d3e20323634323830.roa
File:                     3133382e3235352e3133362e302f32342d3234203d3e20323634323830.roa (raw, json)
Hash identifier:          xdjEngluLBk6IJwoyOAzu3ArOrFf0VB5KvJvq/H6HiE=
Subject key identifier:   FE:A8:0C:FE:64:04:7A:68:45:0D:F2:C7:EB:74:C8:83:B5:C9:5E:09
Certificate issuer:       /CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
Certificate serial:       05C732F90793D82EFCE2EEF5A6243559D480E777
Authority key identifier: E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32342d3234203d3e20323634323830.roa
Signing time:             Tue 28 Jul 2026 18:32:05 +0000
ROA not before:           Tue 28 Jul 2026 18:27:05 +0000
ROA not after:            Tue 27 Jul 2027 18:32:05 +0000
asID:                     264280
IP address blocks:        138.255.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl
                          rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 24 Aug 2026 02:25:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:c7:32:f9:07:93:d8:2e:fc:e2:ee:f5:a6:24:35:59:d4:80:e7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B
        Validity
            Not Before: Jul 28 18:27:05 2026 GMT
            Not After : Jul 27 18:32:05 2027 GMT
        Subject: CN=FEA80CFE64047A68450DF2C7EB74C883B5C95E09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:de:7c:26:55:70:88:08:16:bc:5b:55:b3:02:
                    68:99:57:b9:c7:3e:15:6d:a5:c5:6b:dc:6e:14:60:
                    fa:a4:9b:84:e4:f9:5c:eb:bc:f5:cc:6f:c0:34:05:
                    51:55:7d:70:cb:f5:7c:40:e3:13:35:e2:83:f5:aa:
                    62:00:2d:a9:20:57:29:2e:68:2b:6e:07:19:a9:39:
                    b1:0c:bf:ec:5f:6a:46:40:fe:ea:90:52:fc:25:53:
                    78:dd:7d:27:97:87:59:e3:4b:23:7a:61:10:cf:c9:
                    22:74:26:e3:c3:7c:22:e0:7a:c9:66:77:9b:ff:a0:
                    80:95:19:48:68:7c:d1:c0:7a:8a:ff:30:c7:80:b9:
                    a2:10:fd:56:17:a3:7b:d4:c8:2e:44:70:03:df:ed:
                    c7:14:7b:72:14:12:54:eb:ae:b6:0e:34:1a:84:b7:
                    38:87:67:51:df:77:be:2d:af:0a:be:3f:82:6e:5d:
                    a6:fc:55:db:89:07:28:bc:c4:3a:ec:9e:80:7f:48:
                    a8:6e:e8:38:70:b9:55:db:46:72:5a:77:0b:56:9a:
                    93:cd:73:0e:c0:3c:6b:cc:b2:c9:14:d0:53:f4:d1:
                    4b:b2:0c:97:86:e0:bb:8a:59:66:d2:9d:b8:f9:85:
                    6b:46:51:36:05:b6:4e:3c:4c:2d:87:9e:3f:94:95:
                    33:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A8:0C:FE:64:04:7A:68:45:0D:F2:C7:EB:74:C8:83:B5:C9:5E:09
            X509v3 Authority Key Identifier:
                keyid:E4:7F:46:98:E6:79:2B:56:BA:AE:1D:24:E8:7A:C2:C8:E3:E5:EB:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E47F4698E6792B56BAAE1D24E87AC2C8E3E5EB3B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FSGRhzqhqRodCotetvFRBtnv7HSKogPRv5i4z7ptboSa/0/3133382e3235352e3133362e302f32342d3234203d3e20323634323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:ac:f8:dd:59:4f:ee:23:bf:7c:1e:e3:63:d5:14:d7:56:7d:
         c1:ae:e0:52:82:a3:a6:10:81:b6:0d:12:ea:6c:8d:c8:4f:d5:
         59:c7:04:65:9e:39:00:68:af:57:3d:42:93:4f:48:ad:a1:fe:
         d0:99:8a:0d:2e:d0:b9:b0:7a:b1:ff:53:0b:96:32:58:a3:63:
         6e:55:f7:ad:70:66:3a:fe:f2:05:d7:6b:ae:fe:d4:b3:6e:68:
         c3:ae:f3:51:fb:3f:f8:9c:98:e0:61:8a:40:49:cd:3a:4a:cd:
         1f:d9:45:96:e9:1a:6a:4a:41:53:2c:16:3e:16:20:42:91:d7:
         f0:17:42:e1:98:65:cb:10:d1:31:ee:94:88:fe:2b:2b:1a:77:
         b8:dc:3a:6c:66:24:ab:07:9d:48:26:b2:2c:de:60:cb:27:92:
         4b:4e:25:2f:13:a9:d1:16:68:50:a3:aa:ef:e4:a3:dd:d8:35:
         f4:2d:82:8e:c2:32:72:7f:3c:85:74:59:ca:5a:27:6a:dd:d1:
         36:5c:3e:69:90:72:cd:fd:d8:ec:8c:cf:f5:b5:1b:d0:b9:2f:
         69:f3:0c:f7:4d:93:7a:97:bd:cd:5e:45:88:a6:77:77:8c:6f:
         7a:c0:f8:c7:92:f9:72:79:cb:99:65:80:d2:6a:d8:af:e0:43:
         7f:65:e3:9d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUBccy+QeT2C784u71piQ1WdSA53cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ3RjQ2OThFNjc5MkI1NkJBQUUxRDI0RTg3QUMyQzhF
M0U1RUIzQjAeFw0yNjA3MjgxODI3MDVaFw0yNzA3MjcxODMyMDVaMDMxMTAvBgNV
BAMTKEZFQTgwQ0ZFNjQwNDdBNjg0NTBERjJDN0VCNzRDODgzQjVDOTVFMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY3nwmVXCICBa8W1WzAmiZV7nH
PhVtpcVr3G4UYPqkm4Tk+VzrvPXMb8A0BVFVfXDL9XxA4xM14oP1qmIALakgVyku
aCtuBxmpObEMv+xfakZA/uqQUvwlU3jdfSeXh1njSyN6YRDPySJ0JuPDfCLgeslm
d5v/oICVGUhofNHAeor/MMeAuaIQ/VYXo3vUyC5EcAPf7ccUe3IUElTrrrYONBqE
tziHZ1Hfd74trwq+P4JuXab8VduJByi8xDrsnoB/SKhu6DhwuVXbRnJadwtWmpPN
cw7APGvMsskU0FP00UuyDJeG4LuKWWbSnbj5hWtGUTYFtk48TC2Hnj+UlTOLAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU/qgM/mQEemhFDfLH63TIg7XJXgkwHwYDVR0j
BBgwFoAU5H9GmOZ5K1a6rh0k6HrCyOPl6zswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlNHUmh6cWhxUm9kQ290ZXR2RlJCdG52N0hTS29nUFJ2NWk0ejdwdGJv
U2EvMC9FNDdGNDY5OEU2NzkyQjU2QkFBRTFEMjRFODdBQzJDOEUzRTVFQjNCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0N0Y0Njk4RTY3OTJCNTZC
QUFFMUQyNEU4N0FDMkM4RTNFNUVCM0IuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZTR1JoenFocVJvZENvdGV0dkZSQnRudjdIU0tvZ1BSdjVpNHo3cHRib1NhLzAv
MzEzMzM4MmUzMjM1MzUyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNDMyMzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIr/iDANBgkqhkiG9w0BAQsFAAOCAQEAVqz4
3VlP7iO/fB7jY9UU11Z9wa7gUoKjphCBtg0S6myNyE/VWccEZZ45AGivVz1Ck09I
raH+0JmKDS7QubB6sf9TC5YyWKNjblX3rXBmOv7yBddrrv7Us25ow67zUfs/+JyY
4GGKQEnNOkrNH9lFlukaakpBUywWPhYgQpHX8BdC4ZhlyxDRMe6UiP4rKxp3uNw6
bGYkqwedSCayLN5gyyeSS04lLxOp0RZoUKOq7+Sj3dg19C2CjsIycn88hXRZylon
at3RNlw+aZByzf3Y7IzP9bUb0LkvafMM902Tepe9zV5FiKZ3d4xvesD4x5L5cnnL
mWWA0mrYr+BDf2XjnQ==
-----END CERTIFICATE-----
Generated at Sun Aug 23 08:38:44 2026 by rpki-client