Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3133382e33362e3137322e302f32322d3332203d3e20323633353739.roa
File:                     3133382e33362e3137322e302f32322d3332203d3e20323633353739.roa (raw, json)
Hash identifier:          fwhVyQJPbJzoSABurvGYVoi+fIn4tItkI7McckmuAC8=
Subject key identifier:   66:03:45:A8:58:36:CF:99:E9:A9:B3:84:0B:7A:4D:87:55:87:1F:6E
Certificate issuer:       /CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
Certificate serial:       1716A9BD45DBEA4494707B085A806F55280ADC54
Authority key identifier: A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3133382e33362e3137322e302f32322d3332203d3e20323633353739.roa
Signing time:             Thu 21 Aug 2025 20:28:08 +0000
ROA not before:           Thu 21 Aug 2025 20:23:08 +0000
ROA not after:            Thu 20 Aug 2026 20:28:08 +0000
asID:                     263579
IP address blocks:        138.36.172.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl
                          rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 Aug 2025 04:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:16:a9:bd:45:db:ea:44:94:70:7b:08:5a:80:6f:55:28:0a:dc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A63144EF13C73200FAA13C8C9C346B4A57DBD32C
        Validity
            Not Before: Aug 21 20:23:08 2025 GMT
            Not After : Aug 20 20:28:08 2026 GMT
        Subject: CN=660345A85836CF99E9A9B3840B7A4D8755871F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:25:e2:44:c2:c0:4d:18:5a:3f:7b:12:9c:43:
                    64:63:06:8e:33:bb:aa:be:56:bb:81:8e:4b:b1:47:
                    da:65:31:cd:9d:f0:7d:72:b3:83:6c:cf:fb:37:47:
                    74:88:0e:26:fd:6c:52:96:79:aa:55:2c:cf:c9:ae:
                    c0:f3:59:46:04:9f:c6:26:66:ad:30:af:32:8b:66:
                    e8:fe:2e:6e:0c:c5:a6:83:8c:ba:bc:89:0b:f0:48:
                    13:51:f0:0b:cd:43:c8:5c:2e:04:e1:2b:72:ba:e4:
                    db:8f:85:16:78:06:92:c3:dc:70:ad:fd:21:de:f8:
                    94:2f:a5:3e:cb:c2:22:6d:42:06:b7:75:00:6e:c2:
                    44:59:e8:ce:d3:b3:d2:ab:92:ef:8c:a1:74:9e:91:
                    8a:55:81:35:34:68:a1:6d:5a:c2:1c:eb:af:01:5a:
                    13:c9:e7:cf:02:65:d5:23:2d:f5:d1:1e:7c:a8:30:
                    3a:39:1e:1c:19:d4:eb:89:95:50:60:8b:51:b3:85:
                    5b:3d:c6:64:3a:5c:5c:b8:16:55:09:f4:c1:cb:72:
                    2e:bd:b3:bc:7d:06:10:2e:7e:53:33:f7:73:f7:5b:
                    56:89:b0:2d:8c:ad:7b:6f:8f:9b:e3:4a:50:2b:60:
                    7f:06:12:62:fd:ae:8e:29:92:1b:91:a1:1d:3f:00:
                    57:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:03:45:A8:58:36:CF:99:E9:A9:B3:84:0B:7A:4D:87:55:87:1F:6E
            X509v3 Authority Key Identifier:
                keyid:A6:31:44:EF:13:C7:32:00:FA:A1:3C:8C:9C:34:6B:4A:57:DB:D3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A63144EF13C73200FAA13C8C9C346B4A57DBD32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8xb2BpYeJMRRirX6RGPxmZ9sFs8eeHMAAh7pkHvaQDwa/0/3133382e33362e3137322e302f32322d3332203d3e20323633353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:3e:8f:37:bf:da:44:62:35:54:3d:a5:15:d7:c9:8e:cd:af:
         7d:3f:08:14:07:00:d2:66:c5:16:02:48:d3:51:5a:c4:90:ae:
         57:c0:e5:4d:db:b5:fc:94:3b:21:cc:3f:a9:aa:4d:04:2f:b5:
         36:c9:03:09:7b:a1:79:69:d6:2f:cf:09:8c:29:27:4b:73:c9:
         56:85:80:91:3f:35:ce:09:d3:7f:b0:f8:8b:b6:8e:aa:4b:e4:
         29:81:fd:d4:fe:8f:26:1c:d9:b0:52:6c:9c:21:5b:56:06:ae:
         92:bf:a4:8e:e0:7c:e2:01:eb:54:99:ea:3c:65:f8:a7:60:86:
         24:ef:fd:f8:c0:04:72:46:98:43:81:ed:ae:ca:c3:ed:e9:a6:
         73:f8:ab:96:ac:9b:a0:ca:72:b2:8b:ec:91:6a:0c:01:1c:10:
         fe:e2:ff:b7:5c:1a:16:72:23:a1:3f:78:47:a8:db:ea:d8:c8:
         df:64:7c:86:68:41:30:79:a4:b1:b3:78:ca:db:e9:a1:f6:fd:
         12:75:d6:30:02:0b:bb:1d:cb:f5:37:a9:e3:ae:50:84:f0:3a:
         7d:28:e0:de:31:ba:e0:a2:bb:ac:76:80:a9:b0:e1:10:86:a6:
         de:39:48:00:a0:df:6a:fb:8f:23:b1:30:8f:02:a9:f3:a1:d7:
         b7:57:81:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 09:16:29 2025 by rpki-client