Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
File:                     3133382e302e3235322e302f32322d3332203d3e20323634353631.roa (raw, json)
Hash identifier:          +LZy/dlZRH2l9B6e1uxkHlI9s/Y1lPxZ/z88QqHFBZ8=
Subject key identifier:   D3:B7:90:AC:54:ED:9B:F6:2A:5E:D2:93:67:C0:D3:51:EB:D4:92:B7
Certificate issuer:       /CN=FB23625168A378A59EA0C6658E899F73AA0FFBF9
Certificate serial:       36FB7AC62EA2D23D352DF0F3B4DDED990E3EC5C8
Authority key identifier: FB:23:62:51:68:A3:78:A5:9E:A0:C6:65:8E:89:9F:73:AA:0F:FB:F9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB23625168A378A59EA0C6658E899F73AA0FFBF9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa
Signing time:             Tue 19 Aug 2025 14:18:01 +0000
ROA not before:           Tue 19 Aug 2025 14:13:01 +0000
ROA not after:            Tue 18 Aug 2026 14:18:01 +0000
asID:                     264561
IP address blocks:        138.0.252.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/FB23625168A378A59EA0C6658E899F73AA0FFBF9.crl
                          rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/FB23625168A378A59EA0C6658E899F73AA0FFBF9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB23625168A378A59EA0C6658E899F73AA0FFBF9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 10:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:fb:7a:c6:2e:a2:d2:3d:35:2d:f0:f3:b4:dd:ed:99:0e:3e:c5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB23625168A378A59EA0C6658E899F73AA0FFBF9
        Validity
            Not Before: Aug 19 14:13:01 2025 GMT
            Not After : Aug 18 14:18:01 2026 GMT
        Subject: CN=D3B790AC54ED9BF62A5ED29367C0D351EBD492B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:cc:54:44:5d:3d:5d:6c:6d:76:31:56:ea:
                    db:33:50:79:db:9c:41:5f:24:7b:e8:eb:57:84:9c:
                    89:4c:cb:20:f3:ab:06:ac:4d:a9:4a:6f:5e:5e:b2:
                    25:b3:73:68:db:09:a8:2a:09:a6:2a:f7:b1:5f:2e:
                    5b:b0:08:c2:92:e0:e4:5e:12:04:9b:63:08:34:36:
                    92:d2:51:88:4c:0c:52:46:b7:43:1a:92:e0:6a:e8:
                    50:76:39:94:6b:6b:a2:bd:47:d7:6d:04:8b:79:46:
                    c4:e5:4f:f2:5b:05:39:b2:70:14:46:b6:d9:72:69:
                    5f:4f:e0:cd:da:1a:aa:ac:5e:e1:2b:1c:3a:ec:99:
                    01:52:09:a9:e9:ca:dd:11:32:f1:34:ea:b0:b5:2f:
                    bd:1d:40:9e:81:85:25:25:6a:d7:c1:d9:48:d2:77:
                    6b:4a:aa:68:19:8b:74:63:c3:f2:ec:74:1d:3a:12:
                    d9:5c:e2:62:63:35:4e:4c:f0:2e:d6:e8:81:17:3a:
                    86:32:17:13:2c:95:f8:bb:7c:7e:81:bb:3b:5d:d3:
                    7f:48:15:55:b8:6d:9e:ad:91:9b:59:78:42:18:8d:
                    5d:11:e1:eb:16:0f:ad:37:ae:2f:c3:c7:d4:6b:de:
                    48:be:b0:4a:44:2b:9f:5d:f0:b3:2a:13:93:59:0e:
                    20:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B7:90:AC:54:ED:9B:F6:2A:5E:D2:93:67:C0:D3:51:EB:D4:92:B7
            X509v3 Authority Key Identifier:
                keyid:FB:23:62:51:68:A3:78:A5:9E:A0:C6:65:8E:89:9F:73:AA:0F:FB:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/FB23625168A378A59EA0C6658E899F73AA0FFBF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB23625168A378A59EA0C6658E899F73AA0FFBF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDLHgrNjRFeeDq9oyRDfhgrGHWT4td5BhiR7MkgpRhJF/0/3133382e302e3235322e302f32322d3332203d3e20323634353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:d8:af:ad:6d:30:24:21:22:0e:29:aa:c8:c9:fa:99:f2:ca:
         dc:8f:b2:00:3f:05:35:b7:70:10:d3:04:57:c6:0f:92:74:42:
         9b:c5:9e:14:29:35:49:04:10:09:ac:b4:4b:17:d8:c7:42:4a:
         44:40:0a:18:12:95:7c:7a:b8:15:f0:ef:ce:cd:18:c3:eb:ad:
         19:66:d6:40:55:80:4a:f2:ef:cf:8b:e2:98:97:19:f6:f9:12:
         48:a3:b7:69:51:7f:37:9c:44:b1:c4:1a:73:da:92:c8:51:64:
         3e:d7:e5:57:ff:48:fa:f1:76:f9:e4:93:a9:77:49:e7:74:0e:
         f6:b0:e7:70:c9:88:2a:0a:a0:d1:24:64:7f:99:0b:f8:89:8b:
         39:3f:09:64:46:71:0b:5d:a2:f0:9b:a6:18:61:a7:32:b4:f1:
         9a:f4:b0:a5:ad:fe:3e:8a:7f:e1:64:12:f3:2a:44:af:a0:a3:
         ea:2c:66:4f:b8:ef:15:50:00:58:b2:9d:f6:24:24:5d:98:cf:
         97:88:1c:53:3a:b7:94:f3:88:98:f1:5f:77:b0:73:3a:7f:31:
         3e:b1:33:bf:13:17:e4:c8:b8:aa:d1:2b:b7:92:df:e5:c0:6e:
         fb:14:cc:fd:5e:3a:56:df:0f:67:ad:5c:af:d6:43:6e:b5:da:
         e9:61:6f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 22:24:20 2025 by rpki-client