Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32342d3234203d3e20323634353734.roa
File:                     3133382e33362e3130382e302f32342d3234203d3e20323634353734.roa (raw, json)
Hash identifier:          Lp6yx+1PUuDhnQU0K8d9c6PBpxhE2sD73NY0alagzzE=
Subject key identifier:   9D:EC:CD:23:1B:B4:43:23:08:E6:67:7A:DB:18:BB:AA:BC:21:52:B4
Certificate issuer:       /CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
Certificate serial:       3D17AB70C0970001A45F9220A6C87C25DAA7EF49
Authority key identifier: DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32342d3234203d3e20323634353734.roa
Signing time:             Wed 17 Sep 2025 20:29:26 +0000
ROA not before:           Wed 17 Sep 2025 20:24:26 +0000
ROA not after:            Wed 16 Sep 2026 20:29:26 +0000
asID:                     264574
IP address blocks:        138.36.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl
                          rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:17:ab:70:c0:97:00:01:a4:5f:92:20:a6:c8:7c:25:da:a7:ef:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
        Validity
            Not Before: Sep 17 20:24:26 2025 GMT
            Not After : Sep 16 20:29:26 2026 GMT
        Subject: CN=9DECCD231BB4432308E6677ADB18BBAABC2152B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5c:51:d4:c4:f4:c1:05:7d:e2:c4:a2:cd:c7:
                    de:86:c3:ab:c9:f6:42:f8:3d:22:81:e6:08:8c:2c:
                    f5:a7:fe:33:b3:0c:3a:d9:18:af:26:59:39:e2:d4:
                    c0:0d:fe:88:39:5f:7a:13:44:a4:ee:f5:25:c1:76:
                    26:d3:23:7b:26:2a:14:d8:b6:6a:80:7e:43:47:64:
                    5a:e0:59:0a:57:10:5b:0f:ed:95:1a:27:65:ea:0d:
                    c4:e0:c8:b3:d6:76:43:95:9c:05:62:5e:b8:e8:51:
                    42:32:4b:b8:dd:d6:5a:2b:00:6d:39:76:2e:65:ae:
                    a4:7c:70:b3:6c:6d:e7:4b:da:c9:65:04:f5:4b:43:
                    8d:91:6b:46:65:2f:2c:c1:18:27:c5:80:d5:3e:b8:
                    e4:0e:aa:fd:0b:cb:d9:2f:a1:32:32:a8:3c:92:d8:
                    a8:ae:72:00:10:45:cb:d9:c6:f5:fa:a5:91:1a:20:
                    e8:70:5a:75:a1:a5:50:0f:c3:77:83:10:47:e9:6a:
                    3c:87:05:4f:22:22:ea:c4:35:65:3d:db:19:04:3c:
                    97:10:cd:43:12:09:cf:20:d5:55:76:3f:56:fd:16:
                    2e:43:56:6f:5a:e5:8f:0b:c3:ea:a3:17:6a:e4:ba:
                    2e:64:50:a4:bc:be:81:db:dd:00:00:bb:19:52:4b:
                    30:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:CD:23:1B:B4:43:23:08:E6:67:7A:DB:18:BB:AA:BC:21:52:B4
            X509v3 Authority Key Identifier:
                keyid:DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130382e302f32342d3234203d3e20323634353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:bb:ab:af:cf:f4:98:40:c2:c2:b8:eb:f4:81:b1:b7:47:
         cb:8a:b3:a0:48:60:12:c1:fe:0f:fe:40:49:d1:22:a7:cb:62:
         c1:96:42:69:0e:aa:8c:dd:9f:60:af:90:66:b9:12:db:98:ea:
         d5:ba:23:2c:e0:49:c5:62:d4:97:1a:3e:06:57:40:70:5b:45:
         86:65:c5:20:eb:c2:fb:8f:9d:71:ea:63:5a:d9:e6:3d:90:28:
         10:4f:74:fb:8f:24:ee:65:2a:c4:7c:11:b9:a9:8d:78:8b:84:
         c1:c6:62:83:bd:88:4d:d5:36:04:78:45:06:8e:f5:aa:dc:84:
         36:c0:3d:f3:47:3c:00:83:77:e5:b3:16:0c:12:8d:b3:1f:19:
         d2:67:a6:ea:b4:0e:1b:4b:0d:ba:13:2f:0e:c6:08:50:21:5f:
         c5:22:40:47:cd:61:7c:f5:02:f2:6d:30:75:e4:7c:ad:17:e9:
         08:b2:b8:c1:05:d0:98:35:42:2b:48:70:87:62:7b:99:bd:c0:
         07:69:6e:fa:0c:e3:a9:28:47:80:85:0d:f3:5b:be:3f:5d:c4:
         fd:15:70:8f:bf:a6:1e:a7:2f:a5:ab:f6:d4:25:5b:a7:b5:ac:
         09:bf:00:ea:5e:28:fe:ec:35:41:29:1f:9e:5b:ea:8d:e6:fb:
         b7:d9:d6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 20:53:26 2025 by rpki-client