Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32322d3232203d3e20323634353734.roa
File:                     3133382e33362e3130382e302f32322d3232203d3e20323634353734.roa (raw, json)
Hash identifier:          zXkPGpDMppabPOTJ4uLtqWhHUa8In+NHffG60ihBt70=
Subject key identifier:   EA:02:55:92:23:66:4F:FA:95:8E:CF:76:36:F8:77:58:75:6B:32:CE
Certificate issuer:       /CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
Certificate serial:       2B40BF84538B975E0A57AB0F25C53CED8C222481
Authority key identifier: DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32322d3232203d3e20323634353734.roa
Signing time:             Wed 17 Sep 2025 20:29:28 +0000
ROA not before:           Wed 17 Sep 2025 20:24:28 +0000
ROA not after:            Wed 16 Sep 2026 20:29:28 +0000
asID:                     264574
IP address blocks:        138.36.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl
                          rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:40:bf:84:53:8b:97:5e:0a:57:ab:0f:25:c5:3c:ed:8c:22:24:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
        Validity
            Not Before: Sep 17 20:24:28 2025 GMT
            Not After : Sep 16 20:29:28 2026 GMT
        Subject: CN=EA02559223664FFA958ECF7636F87758756B32CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a1:48:61:79:a0:05:6a:6f:34:2f:16:24:15:
                    ae:1c:c9:d2:44:91:8b:b2:b2:1a:9a:a1:72:df:71:
                    e0:06:f3:c7:ad:26:d5:13:32:da:01:1b:eb:52:db:
                    b9:36:cc:01:6c:bc:74:e8:fc:8f:ff:2a:c8:12:20:
                    73:38:05:24:0a:4e:91:2b:14:4e:67:af:55:02:14:
                    4a:e2:dd:54:67:0f:27:fc:2e:2e:42:d1:3e:44:69:
                    73:83:c7:08:96:00:2f:00:62:a3:0d:61:59:7b:96:
                    b8:a2:79:90:a3:9c:95:69:f7:1c:e1:c9:82:67:00:
                    f7:08:91:69:d7:4e:c7:93:06:19:ca:1d:b8:97:70:
                    1f:b0:0e:e4:f0:2f:27:69:10:cc:01:a8:19:b9:7d:
                    77:b9:b0:b1:f3:cd:18:f7:77:ba:f3:09:c8:e1:f2:
                    89:3a:16:ec:15:4b:f0:c4:76:28:e7:0d:25:60:f4:
                    9a:95:18:5c:a9:d0:0d:b8:8b:54:4d:06:bd:70:13:
                    30:48:bd:52:82:b5:93:76:f9:6d:53:c3:47:5d:22:
                    58:51:96:5d:e6:96:9a:c1:8c:37:94:7c:0e:a9:43:
                    60:8d:fd:27:6a:73:88:46:f0:71:d3:d0:d3:c8:5d:
                    59:a1:b8:a8:5c:c4:a6:6c:16:41:e4:94:3e:90:83:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:02:55:92:23:66:4F:FA:95:8E:CF:76:36:F8:77:58:75:6B:32:CE
            X509v3 Authority Key Identifier:
                keyid:DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32322d3232203d3e20323634353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:ef:2f:3f:3c:a3:20:b0:13:1a:2e:06:f2:00:8a:f9:bc:d2:
         6b:af:99:27:f7:96:99:12:d0:8b:67:d7:87:6f:45:61:16:78:
         fc:88:1b:ed:48:f9:40:6f:e3:96:a5:d0:00:dc:1e:8f:2f:f8:
         02:fd:07:31:ea:a4:79:20:0d:d1:ed:31:76:28:29:1b:31:87:
         51:27:67:3e:a3:32:37:d8:77:af:10:9a:0e:1a:b1:02:32:00:
         53:f7:6b:71:e7:da:9c:8c:0d:d2:43:e3:ad:23:46:f5:42:b6:
         73:e4:d6:7f:14:72:45:37:15:31:34:db:04:65:85:04:75:84:
         e1:10:7c:7b:78:4f:24:ae:04:70:97:16:5e:f6:9e:8e:ee:35:
         6b:91:4b:2e:0a:7f:8d:a7:c9:ed:22:5b:ba:aa:93:b5:f1:cf:
         8f:b1:75:45:6d:78:51:0e:a2:3a:77:27:a8:c5:9d:a4:dc:40:
         4a:86:c2:13:4e:5e:9c:88:bc:c3:af:8c:fb:d1:f6:00:69:7c:
         60:b5:90:6e:0a:8b:43:99:01:b1:50:ae:5b:1e:56:c3:c2:05:
         5b:7e:a2:f7:3d:20:cf:4f:c7:82:91:ec:9d:04:ac:d4:55:f5:
         d6:2a:61:2f:66:d3:16:43:de:ad:5f:06:3f:ac:0c:ba:bb:04:
         60:1c:42:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:50:31 2025 by rpki-client