Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3235203d3e20323634353530.roa
File:                     3133382e302e3133362e302f32342d3235203d3e20323634353530.roa (raw, json)
Hash identifier:          MjYTZfgW+QtAMl56FYnvEMv9r2Ou+iM8dwRCTKGGbYk=
Subject key identifier:   BD:A7:C6:3D:F6:6E:FD:E6:04:09:CA:06:80:06:C8:CB:E5:0E:F4:87
Certificate issuer:       /CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
Certificate serial:       072D89E94E038AC492ABDF4C6E7BB7E2CA73D514
Authority key identifier: FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3235203d3e20323634353530.roa
Signing time:             Tue 23 Sep 2025 15:16:45 +0000
ROA not before:           Tue 23 Sep 2025 15:11:45 +0000
ROA not after:            Tue 22 Sep 2026 15:16:45 +0000
asID:                     264550
IP address blocks:        138.0.136.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl
                          rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 09:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:2d:89:e9:4e:03:8a:c4:92:ab:df:4c:6e:7b:b7:e2:ca:73:d5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB435E794D86CB9BAE800A6D289A88F771B5B583
        Validity
            Not Before: Sep 23 15:11:45 2025 GMT
            Not After : Sep 22 15:16:45 2026 GMT
        Subject: CN=BDA7C63DF66EFDE60409CA068006C8CBE50EF487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:e3:86:63:48:44:53:f0:49:b5:1f:98:d6:
                    bc:b9:06:9b:94:c4:29:04:fc:ce:58:e0:ce:4f:f7:
                    29:b9:b0:c9:01:c9:57:80:8c:68:1b:10:c6:4a:29:
                    8d:c1:28:b3:43:d9:e1:99:b1:e8:c2:0e:54:6d:db:
                    1f:49:4f:7c:c5:da:75:57:ee:32:bc:91:23:55:b1:
                    59:67:86:c1:69:58:e8:e3:ea:92:18:85:5b:f4:9e:
                    80:e7:ee:ff:77:e8:78:14:41:60:a8:92:ff:0e:2f:
                    ab:d6:39:33:94:97:ee:47:06:c9:78:49:f9:4f:0a:
                    f2:cd:fd:bc:1d:fd:4f:e4:50:95:95:c7:98:e0:28:
                    68:cc:ba:75:a3:73:80:a8:01:a9:52:0b:d4:41:ca:
                    2d:e5:b7:1d:25:86:93:5c:d9:8c:3f:dc:16:06:53:
                    fb:90:35:ec:c4:67:1c:03:a8:e6:74:07:2d:b8:99:
                    56:35:cf:7f:bc:83:b7:67:67:aa:44:92:dc:82:71:
                    c3:33:e5:80:98:be:d7:5f:59:88:d6:61:f7:c6:0c:
                    a6:06:a1:76:33:56:7a:7e:4f:fa:81:a8:c8:03:cb:
                    ba:72:da:51:87:3f:e9:e4:b3:ae:f9:50:22:ad:6c:
                    a0:ec:d0:d6:dd:60:0d:c7:46:eb:47:60:ad:c2:25:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A7:C6:3D:F6:6E:FD:E6:04:09:CA:06:80:06:C8:CB:E5:0E:F4:87
            X509v3 Authority Key Identifier:
                keyid:FB:43:5E:79:4D:86:CB:9B:AE:80:0A:6D:28:9A:88:F7:71:B5:B5:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/FB435E794D86CB9BAE800A6D289A88F771B5B583.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB435E794D86CB9BAE800A6D289A88F771B5B583.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/0/3133382e302e3133362e302f32342d3235203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:99:b5:b0:92:98:0a:41:fc:5d:33:b3:30:89:75:6c:35:2a:
         4b:24:44:f2:70:2d:7f:0b:64:3c:78:2a:1e:e9:19:dc:20:7c:
         16:17:8f:da:14:3c:39:b3:de:65:f4:9d:cc:43:a4:50:42:dc:
         a9:17:8f:7a:e5:c3:41:ca:6a:21:fe:e0:f9:fc:ba:7a:60:e3:
         ad:ed:6c:fc:38:8f:31:1f:69:fa:33:e3:0e:f8:63:27:d6:45:
         a0:17:77:0f:88:32:05:0e:4f:7c:32:1b:8a:54:b8:13:2e:0b:
         cb:92:0c:ae:80:ce:dc:10:85:d6:63:a2:bc:12:24:65:db:73:
         cf:9f:3c:05:44:39:b4:b0:06:ee:03:54:1e:b0:df:00:22:1b:
         9a:fd:53:25:7a:0a:df:29:e8:dc:bc:a1:60:7d:07:d0:2f:c4:
         e0:70:d9:7e:41:d3:b8:a9:52:98:41:a1:8d:83:96:6c:6e:8b:
         1d:99:eb:de:f4:77:f6:0d:ce:0c:56:f1:cd:26:ba:94:27:49:
         a2:46:d5:57:84:24:91:c6:95:fa:5c:d2:63:cb:30:90:cd:18:
         bb:40:c6:1b:43:81:33:0a:ed:a3:c9:60:2c:9d:76:1c:29:71:
         9b:25:0c:a5:6d:c9:24:e9:a8:16:2d:c0:ec:fa:8f:59:59:b4:
         ac:34:ff:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBy2J6U4DisSSq99Mbnu34spz1RQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI0MzVFNzk0RDg2Q0I5QkFFODAwQTZEMjg5QTg4Rjc3
MUI1QjU4MzAeFw0yNTA5MjMxNTExNDVaFw0yNjA5MjIxNTE2NDVaMDMxMTAvBgNV
BAMTKEJEQTdDNjNERjY2RUZERTYwNDA5Q0EwNjgwMDZDOENCRTUwRUY0ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwseOGY0hEU/BJtR+Y1ry5BpuU
xCkE/M5Y4M5P9ym5sMkByVeAjGgbEMZKKY3BKLND2eGZsejCDlRt2x9JT3zF2nVX
7jK8kSNVsVlnhsFpWOjj6pIYhVv0noDn7v936HgUQWCokv8OL6vWOTOUl+5HBsl4
SflPCvLN/bwd/U/kUJWVx5jgKGjMunWjc4CoAalSC9RByi3ltx0lhpNc2Yw/3BYG
U/uQNezEZxwDqOZ0By24mVY1z3+8g7dnZ6pEktyCccMz5YCYvtdfWYjWYffGDKYG
oXYzVnp+T/qBqMgDy7py2lGHP+nks675UCKtbKDs0NbdYA3HRutHYK3CJfRzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvafGPfZu/eYECcoGgAbIy+UO9IcwHwYDVR0j
BBgwFoAU+0NeeU2Gy5uugAptKJqI93G1tYMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMlZ1SndLd25uNDZuTmRTOWRFc3paOEp6S3FHbmFOOVpwRFBnZnNVbVN1
VVAvMC9GQjQzNUU3OTREODZDQjlCQUU4MDBBNkQyODlBODhGNzcxQjVCNTgzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNDM1RTc5NEQ4NkNCOUJB
RTgwMEE2RDI4OUE4OEY3NzFCNUI1ODMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJWdUp3S3dubjQ2bk5kUzlkRXN6WjhKektxR25hTjlacERQZ2ZzVW1TdVVQLzAv
MzEzMzM4MmUzMDJlMzEzMzM2MmUzMDJmMzIzNDJkMzIzNTIwM2QzZTIwMzIzNjM0
MzUzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAigCIMA0GCSqGSIb3DQEBCwUAA4IBAQAwmbWwkpgK
QfxdM7MwiXVsNSpLJETycC1/C2Q8eCoe6RncIHwWF4/aFDw5s95l9J3MQ6RQQtyp
F4965cNBymoh/uD5/Lp6YOOt7Wz8OI8xH2n6M+MO+GMn1kWgF3cPiDIFDk98MhuK
VLgTLgvLkgyugM7cEIXWY6K8EiRl23PPnzwFRDm0sAbuA1QesN8AIhua/VMlegrf
KejcvKFgfQfQL8TgcNl+QdO4qVKYQaGNg5Zsbosdmeve9Hf2Dc4MVvHNJrqUJ0mi
RtVXhCSRxpX6XNJjyzCQzRi7QMYbQ4EzCu2jyWAsnXYcKXGbJQylbckk6agWLcDs
+o9ZWbSsNP/d
-----END CERTIFICATE-----
Generated at Mon Oct 20 17:52:15 2025 by rpki-client