Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130392e302f32342d3234203d3e20323634353734.roa
File:                     3133382e33362e3130392e302f32342d3234203d3e20323634353734.roa (raw, json)
Hash identifier:          4QiN4Rl6ZY8kxoIkvZ/7kwONf6VyPHZQKt83wsbIJk0=
Subject key identifier:   E4:55:8A:21:2C:BE:61:6B:97:E4:D9:55:17:D2:7C:A3:B0:4E:BF:18
Certificate issuer:       /CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
Certificate serial:       7115AFC9E44A89C8EC84148D7B2E02983F724D50
Authority key identifier: DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130392e302f32342d3234203d3e20323634353734.roa
Signing time:             Wed 17 Sep 2025 20:29:27 +0000
ROA not before:           Wed 17 Sep 2025 20:24:27 +0000
ROA not after:            Wed 16 Sep 2026 20:29:27 +0000
asID:                     264574
IP address blocks:        138.36.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl
                          rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:15:af:c9:e4:4a:89:c8:ec:84:14:8d:7b:2e:02:98:3f:72:4d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
        Validity
            Not Before: Sep 17 20:24:27 2025 GMT
            Not After : Sep 16 20:29:27 2026 GMT
        Subject: CN=E4558A212CBE616B97E4D95517D27CA3B04EBF18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8e:15:69:a6:44:b8:9b:4c:94:e6:8f:c5:24:
                    58:8b:90:d5:d7:f8:8d:fd:25:f5:50:c4:2b:10:c7:
                    43:75:50:8b:aa:a0:cb:85:cd:e5:6e:df:8c:1b:e5:
                    36:95:21:b6:0e:99:5f:1c:42:69:b4:7a:56:40:00:
                    6a:69:7c:55:70:f9:38:19:9e:53:69:17:10:ba:68:
                    89:d4:b0:df:ef:9d:82:0b:ae:34:f6:97:29:9f:d7:
                    84:39:af:7e:e8:b6:9d:ff:ce:3c:e4:c1:97:16:78:
                    fb:6f:a6:d1:de:a7:98:65:d7:71:a6:d9:2f:7f:a2:
                    00:0b:21:aa:f0:53:ef:9e:0d:2e:94:a3:3a:df:d1:
                    3d:ab:08:b9:94:c6:a1:c1:b4:d0:60:d9:56:23:fa:
                    d7:17:7f:6a:13:02:34:1d:b3:50:e8:54:bd:00:0e:
                    3e:8b:6c:78:63:94:8c:48:35:4e:0b:98:04:53:24:
                    a5:6a:91:60:b6:51:14:d5:df:b6:3f:90:89:82:ba:
                    03:23:cd:7d:5d:f5:f3:52:96:c3:d3:f8:04:af:90:
                    57:0c:7c:29:e1:bf:de:f9:e4:20:4f:c8:26:fe:77:
                    99:fb:3d:98:1e:37:8a:f7:bf:64:05:9c:a2:84:12:
                    0d:7c:da:0f:42:45:8d:4e:0f:31:df:5c:a9:1a:52:
                    70:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:55:8A:21:2C:BE:61:6B:97:E4:D9:55:17:D2:7C:A3:B0:4E:BF:18
            X509v3 Authority Key Identifier:
                keyid:DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3130392e302f32342d3234203d3e20323634353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:90:66:e9:44:d6:22:95:82:28:2a:77:36:5f:50:fa:7f:c8:
         a1:32:00:a3:0b:80:0b:8c:50:d5:12:4c:e8:c7:61:ce:5e:0e:
         b3:3a:63:53:0e:04:64:0d:6a:18:81:89:c3:e4:8e:66:b3:e8:
         e6:c3:eb:ba:fb:a8:85:9b:26:e5:59:f1:97:30:72:9b:bd:45:
         26:39:00:f5:a0:73:10:e7:53:40:06:8c:b1:dd:54:b8:7d:0d:
         63:6a:92:1a:72:3e:2f:6a:7f:40:2a:dc:26:88:47:97:f4:87:
         e7:fc:70:5c:d6:6b:8e:a8:69:43:c3:f2:22:17:dc:7f:97:51:
         1b:b6:bb:dc:bb:fb:68:b0:58:3d:d8:64:95:2c:bc:89:b6:1f:
         bb:bc:a7:bf:dc:67:a9:a4:48:c2:7d:97:da:da:bf:42:84:45:
         33:b7:fe:42:05:b0:26:44:dd:67:3a:45:ae:3d:ef:26:a2:1c:
         0e:d4:c7:9c:fc:5f:0a:05:ba:f9:bc:a1:c3:15:c0:c8:d2:fd:
         78:ef:98:46:87:51:af:ee:59:3e:03:65:d6:7e:82:d7:36:89:
         ec:7f:a7:1d:05:85:06:0f:c8:93:a8:ee:e1:3d:68:9f:36:38:
         e4:5e:fc:db:7b:18:66:a8:23:ad:38:f7:e3:22:4c:2f:65:1e:
         61:eb:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:51:37 2025 by rpki-client