Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3133382e33362e3137322e302f32322d3332203d3e20313938393439.roa
File:                     3133382e33362e3137322e302f32322d3332203d3e20313938393439.roa (raw, json)
Hash identifier:          Ajh9R08ojPV7hCHr6n37o21iWZbRxiNXnc2JtmWxZHA=
Subject key identifier:   00:0A:0E:67:6D:C1:15:E8:90:4F:48:70:39:BC:9B:31:E2:EA:47:A1
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       0D1415AAD434805F07EC944C83DEFC92C83B4E67
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3133382e33362e3137322e302f32322d3332203d3e20313938393439.roa
Signing time:             Fri 22 Aug 2025 15:18:50 +0000
ROA not before:           Fri 22 Aug 2025 15:13:50 +0000
ROA not after:            Fri 21 Aug 2026 15:18:50 +0000
asID:                     198949
IP address blocks:        138.36.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 11:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:14:15:aa:d4:34:80:5f:07:ec:94:4c:83:de:fc:92:c8:3b:4e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Aug 22 15:13:50 2025 GMT
            Not After : Aug 21 15:18:50 2026 GMT
        Subject: CN=000A0E676DC115E8904F487039BC9B31E2EA47A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:eb:b0:bf:3f:fe:8a:0e:8e:52:54:89:c2:f9:
                    0a:b0:49:32:06:53:3f:04:e9:2c:c2:12:f9:25:04:
                    25:ec:a1:e8:57:05:57:76:c8:0f:bd:dc:dd:da:45:
                    6a:1f:e5:cd:1d:79:4d:62:c4:ca:63:b2:80:a7:f4:
                    3d:90:31:44:1c:5c:80:03:eb:fe:cb:87:48:b6:22:
                    d4:3f:95:54:eb:e2:1d:45:7c:0a:a1:ea:91:67:df:
                    7a:b2:f4:7d:41:77:2e:c0:69:77:c4:a3:54:b7:08:
                    1c:b4:42:ec:7e:0f:fc:fc:f6:bb:47:7f:9a:35:42:
                    d8:80:00:28:07:a2:81:6c:39:7a:d1:b7:b3:b7:6f:
                    d3:be:c1:de:38:67:c8:8a:96:cb:ff:d7:6d:bd:c7:
                    0e:b5:92:79:32:e1:34:3f:09:dc:60:5c:37:68:fd:
                    cb:7b:59:81:1f:7c:0c:a8:57:3a:99:6f:f4:b5:40:
                    b5:a7:5c:64:9a:b5:42:dc:7e:38:3a:e1:d1:e1:df:
                    28:46:d4:66:ef:b3:0d:3d:80:db:d1:41:7c:f7:1a:
                    4f:ed:4a:7b:73:91:d9:86:a2:a3:58:70:06:d3:ee:
                    2e:ec:e4:9c:64:d0:4b:60:89:c9:c4:9d:08:cd:17:
                    e4:de:4e:fd:2a:e0:12:e2:c6:0f:c3:0e:0d:8b:09:
                    97:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0A:0E:67:6D:C1:15:E8:90:4F:48:70:39:BC:9B:31:E2:EA:47:A1
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3133382e33362e3137322e302f32322d3332203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:c3:e0:69:8c:8c:4d:82:cf:15:f4:63:44:f7:fe:f6:70:ef:
         d8:81:fb:aa:ca:68:90:21:25:c6:5a:69:42:c7:69:bb:72:ef:
         c6:7a:b7:be:5c:fd:02:c3:3a:23:16:d7:fd:94:0b:96:c1:f6:
         44:b4:97:c7:7e:ff:03:b0:1b:27:72:1a:dc:31:69:2a:cf:a9:
         23:6d:89:3c:19:0e:a1:b8:48:f8:af:21:25:48:bf:18:01:cd:
         77:a0:e2:08:9c:3c:1c:37:aa:f2:d1:91:24:8b:1e:59:79:43:
         0f:b1:c2:3e:07:38:e0:d9:0b:80:85:95:eb:d9:8b:96:2f:95:
         62:cc:0f:22:51:9c:e0:83:6a:85:dd:99:83:68:47:59:25:1a:
         b4:49:ef:c9:9f:97:fa:42:b4:ef:e6:0b:52:b3:74:fd:d7:c9:
         4e:a7:ca:bb:e8:b9:ef:2f:25:d8:f4:5c:93:13:3d:0a:c5:60:
         78:9a:de:28:50:64:f9:fb:15:1b:9f:9e:71:c5:39:fa:e5:9e:
         fd:2f:89:83:b7:ae:15:5e:c2:c4:2c:4d:b2:f7:42:78:c2:16:
         f9:b5:fb:dd:d6:2f:2f:9b:70:0a:e5:f4:4d:73:22:69:4d:2d:
         ce:f4:c6:95:c4:c5:6c:f9:7d:0f:e4:ff:d7:be:42:c7:b4:fb:
         8f:7e:a7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:49:46 2025 by rpki-client