Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3131302e302f32342d3234203d3e20323634353734.roa
File:                     3133382e33362e3131302e302f32342d3234203d3e20323634353734.roa (raw, json)
Hash identifier:          UhhsJqo2rUuTlDlJZ/15PV4lIBdIaLwJaxrKqK4+bAc=
Subject key identifier:   E5:66:D1:42:7E:07:FA:79:EA:3F:A3:8A:15:86:75:CE:2B:CB:A3:18
Certificate issuer:       /CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
Certificate serial:       5DFC5AD19412607BAE79B1D00368B637060D02E0
Authority key identifier: DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3131302e302f32342d3234203d3e20323634353734.roa
Signing time:             Wed 17 Sep 2025 20:29:27 +0000
ROA not before:           Wed 17 Sep 2025 20:24:27 +0000
ROA not after:            Wed 16 Sep 2026 20:29:27 +0000
asID:                     264574
IP address blocks:        138.36.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl
                          rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 14:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fc:5a:d1:94:12:60:7b:ae:79:b1:d0:03:68:b6:37:06:0d:02:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DEE97EA822C5C1473B05759617FBCDB55BB6E7AD
        Validity
            Not Before: Sep 17 20:24:27 2025 GMT
            Not After : Sep 16 20:29:27 2026 GMT
        Subject: CN=E566D1427E07FA79EA3FA38A158675CE2BCBA318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:f8:4c:67:66:3e:c1:61:7b:ec:57:4d:24:
                    e1:03:5f:2e:aa:31:65:21:24:c5:50:24:73:a3:ff:
                    2d:1d:14:de:91:21:ce:c7:4b:96:06:fc:bf:ca:52:
                    ea:44:8c:92:89:bd:e1:8a:4d:4d:e4:6f:26:c3:d5:
                    c1:da:92:48:d2:b0:29:bd:56:8d:59:9b:88:1c:1f:
                    b2:16:9f:c9:13:fc:ac:f6:7c:c2:d0:02:d8:ee:00:
                    7e:3c:6b:46:f3:d4:9e:01:9d:eb:e1:c4:7b:33:a3:
                    da:6f:7d:36:de:55:a5:3c:39:0c:7a:18:cf:7b:2f:
                    cd:b4:c3:ef:00:4d:a5:4c:01:59:ba:7d:81:ac:93:
                    20:4b:83:5c:5b:b6:c3:0e:df:49:fd:2f:ce:33:48:
                    a9:22:68:1b:a4:1d:08:45:25:80:2f:ac:1e:f5:68:
                    86:d4:5e:95:72:ac:09:03:65:50:8f:89:6a:fd:6d:
                    46:b7:3c:44:4b:8e:f0:5d:e2:5d:c8:c7:1e:1e:83:
                    18:42:47:3e:d7:14:7b:30:09:30:13:9e:a2:f5:9f:
                    40:07:4c:b5:ba:fe:b9:47:0c:e8:93:ea:06:5c:0a:
                    4a:a2:c8:55:fe:94:05:e9:de:1d:c5:44:59:0a:b9:
                    05:c0:fd:61:a0:97:18:d2:8a:27:07:25:b7:92:cf:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:66:D1:42:7E:07:FA:79:EA:3F:A3:8A:15:86:75:CE:2B:CB:A3:18
            X509v3 Authority Key Identifier:
                keyid:DE:E9:7E:A8:22:C5:C1:47:3B:05:75:96:17:FB:CD:B5:5B:B6:E7:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE97EA822C5C1473B05759617FBCDB55BB6E7AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FUEyKHcJU65Gc2ZEFcM4Pmi9AcwbXVqRgkEvqF35FLh4/0/3133382e33362e3131302e302f32342d3234203d3e20323634353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:41:fe:4e:45:1f:68:fa:f3:7a:aa:45:62:ab:af:26:6c:fa:
         b3:db:87:14:c9:8a:09:03:1a:d6:3d:48:09:80:87:6d:dc:90:
         57:1e:64:e0:72:8a:69:31:3e:95:b5:f3:35:3d:c7:3e:d9:b5:
         3d:c2:c9:f7:a7:ed:c1:76:a8:23:6a:e7:28:84:ba:a1:dc:f9:
         c1:ad:6e:2e:47:d3:7e:fe:ca:09:d2:c8:99:21:86:01:ba:cd:
         f1:a3:af:a3:2a:13:21:1d:1d:d6:23:71:c6:60:8e:5d:cf:79:
         e4:b0:12:0f:7e:bd:c2:ef:83:e2:70:76:5e:2f:9c:9e:de:59:
         28:6d:d0:65:22:8e:37:47:c0:a4:00:47:17:50:35:fa:90:75:
         37:97:d8:e0:b0:41:cc:af:46:7b:e0:ba:3c:8f:10:dd:de:f6:
         c0:65:8d:f5:23:20:8d:2e:46:b5:38:22:25:78:27:26:b3:af:
         1c:68:e1:d7:96:4d:ef:a3:d4:13:c0:f8:a3:3b:e0:d0:76:bb:
         3d:ea:76:a9:6a:ae:96:07:3b:19:c1:65:08:53:3b:60:93:9f:
         4e:30:92:2b:38:ee:6a:40:82:0a:12:74:7f:fd:bf:6e:23:ce:
         9c:59:9e:3a:f1:6e:f2:96:95:fb:7c:cb:76:12:2f:28:8b:2f:
         ad:44:55:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUXfxa0ZQSYHuuebHQA2i2NwYNAuAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVFOTdFQTgyMkM1QzE0NzNCMDU3NTk2MTdGQkNEQjU1
QkI2RTdBRDAeFw0yNTA5MTcyMDI0MjdaFw0yNjA5MTYyMDI5MjdaMDMxMTAvBgNV
BAMTKEU1NjZEMTQyN0UwN0ZBNzlFQTNGQTM4QTE1ODY3NUNFMkJDQkEzMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrvhMZ2Y+wWF77FdNJOEDXy6q
MWUhJMVQJHOj/y0dFN6RIc7HS5YG/L/KUupEjJKJveGKTU3kbybD1cHakkjSsCm9
Vo1Zm4gcH7IWn8kT/Kz2fMLQAtjuAH48a0bz1J4BnevhxHszo9pvfTbeVaU8OQx6
GM97L820w+8ATaVMAVm6fYGskyBLg1xbtsMO30n9L84zSKkiaBukHQhFJYAvrB71
aIbUXpVyrAkDZVCPiWr9bUa3PERLjvBd4l3Ixx4egxhCRz7XFHswCTATnqL1n0AH
TLW6/rlHDOiT6gZcCkqiyFX+lAXp3h3FRFkKuQXA/WGglxjSiicHJbeSz3xTAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU5WbRQn4H+nnqP6OKFYZ1zivLoxgwHwYDVR0j
BBgwFoAU3ul+qCLFwUc7BXWWF/vNtVu2560wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlVFeUtIY0pVNjVHYzJaRUZjTTRQbWk5QWN3YlhWcVJna0V2cUYzNUZM
aDQvMC9ERUU5N0VBODIyQzVDMTQ3M0IwNTc1OTYxN0ZCQ0RCNTVCQjZFN0FELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RFRTk3RUE4MjJDNUMxNDcz
QjA1NzU5NjE3RkJDREI1NUJCNkU3QUQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZVRXlLSGNKVTY1R2MyWkVGY000UG1pOUFjd2JYVnFSZ2tFdnFGMzVGTGg0LzAv
MzEzMzM4MmUzMzM2MmUzMTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzQzNTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKJG4wDQYJKoZIhvcNAQELBQADggEBACBB/k5F
H2j683qqRWKrryZs+rPbhxTJigkDGtY9SAmAh23ckFceZOByimkxPpW18zU9xz7Z
tT3Cyfen7cF2qCNq5yiEuqHc+cGtbi5H037+ygnSyJkhhgG6zfGjr6MqEyEdHdYj
ccZgjl3PeeSwEg9+vcLvg+Jwdl4vnJ7eWSht0GUijjdHwKQARxdQNfqQdTeX2OCw
QcyvRnvgujyPEN3e9sBljfUjII0uRrU4IiV4Jyazrxxo4deWTe+j1BPA+KM74NB2
uz3qdqlqrpYHOxnBZQhTO2CTn04wkis47mpAggoSdH/9v24jzpxZnjrxbvKWlft8
y3YSLyiLL61EVb4=
-----END CERTIFICATE-----
Generated at Thu Sep 18 23:51:38 2025 by rpki-client