Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139322e302f32342d3234203d3e20323632353335.roa
File:                     3133382e33362e3139322e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          CNHDXcK8Mi3Sbs+2oTJpX02xiwENyhJdL7LIS/LrVA8=
Subject key identifier:   76:45:13:85:07:01:9F:01:5D:94:C0:07:03:F1:98:94:B8:8A:2E:19
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       7E01DC4838E9B94B8A6C6E9AFAF47D5F629E1754
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139322e302f32342d3234203d3e20323632353335.roa
Signing time:             Thu 14 Aug 2025 23:53:43 +0000
ROA not before:           Thu 14 Aug 2025 23:48:43 +0000
ROA not after:            Thu 13 Aug 2026 23:53:43 +0000
asID:                     262535
IP address blocks:        138.36.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 01:45:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:01:dc:48:38:e9:b9:4b:8a:6c:6e:9a:fa:f4:7d:5f:62:9e:17:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Aug 14 23:48:43 2025 GMT
            Not After : Aug 13 23:53:43 2026 GMT
        Subject: CN=7645138507019F015D94C00703F19894B88A2E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:ee:2c:00:fc:a8:a7:64:12:ef:29:44:f6:
                    c9:15:2d:a1:dc:12:37:70:bd:c1:ab:41:46:05:da:
                    30:54:07:89:f9:88:db:e0:f4:69:df:62:e4:23:0d:
                    2c:05:b8:df:3d:58:13:fb:ef:84:84:5f:62:13:3e:
                    a5:97:45:c5:13:2a:67:a7:60:42:42:70:a6:91:15:
                    64:17:13:ca:5f:3c:e5:68:48:3f:d4:50:1b:9c:4b:
                    cd:d9:15:6a:e2:de:ae:68:fb:03:25:74:f3:26:33:
                    94:a5:f0:26:c9:21:9b:a9:9b:0b:1a:27:2c:1e:97:
                    f6:f9:38:91:71:67:19:c2:62:b4:58:57:64:bf:e7:
                    15:7a:87:a0:5d:ac:35:c2:a8:03:cc:78:81:54:a1:
                    c0:05:7c:6c:69:12:87:c4:a1:a6:a4:14:4f:86:8f:
                    73:ff:02:7a:bd:64:50:27:84:95:d3:1f:30:ed:a5:
                    85:52:76:65:d5:a8:ae:cf:ae:eb:7c:18:21:fd:c8:
                    b7:f5:89:18:e7:23:1e:65:23:a2:f2:13:c3:f4:d6:
                    d8:04:47:fc:48:7b:03:6c:68:57:d5:35:53:9f:e0:
                    e5:76:d2:a7:ce:07:b4:90:fd:7b:df:dd:75:0b:37:
                    46:0c:21:17:e4:6c:92:45:19:6e:40:62:af:c8:e7:
                    f4:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:45:13:85:07:01:9F:01:5D:94:C0:07:03:F1:98:94:B8:8A:2E:19
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139322e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:ae:ef:f0:ea:db:12:b4:29:de:02:f8:e8:ee:16:ba:33:1b:
         93:44:c2:27:2c:47:f0:d7:fb:93:81:76:b5:34:52:35:74:4b:
         24:ac:f4:6b:c4:cb:06:06:10:21:35:0c:6b:ea:fc:b4:be:26:
         b8:1f:d0:43:64:ab:5f:d2:da:76:ed:94:e8:a4:56:f6:25:30:
         84:71:89:08:cb:3f:9c:53:94:ea:df:3e:19:97:4a:8e:cc:8e:
         4e:da:77:d9:38:58:06:47:d2:38:8d:17:bd:0d:6d:fc:03:d1:
         ae:de:e3:25:88:ff:8c:d1:8b:ae:b9:20:97:9d:dd:a1:e8:33:
         b9:97:3b:5a:4f:f3:9b:05:3c:1c:4d:92:83:03:9a:55:73:37:
         37:80:2f:8f:10:39:ff:6b:29:3e:31:02:fe:2f:96:cf:02:5b:
         05:d6:41:cf:8b:19:4a:89:4d:75:e3:0a:39:c3:5e:40:60:42:
         ad:13:51:44:38:44:7b:fa:a3:91:2d:ee:66:bf:75:f8:14:d0:
         f5:83:f0:38:30:7a:5e:22:e3:0c:c7:44:32:b0:e9:e3:44:09:
         00:66:22:06:d6:46:0e:27:69:e4:d8:e8:e6:2f:f9:2c:6e:e8:
         ce:4e:99:53:98:c9:e9:d9:ab:9e:d4:93:44:c2:80:42:8f:50:
         13:b3:7a:f7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUfgHcSDjpuUuKbG6a+vR9X2KeF1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNzcyRjgwMjk0MjAxODYwMTQ4ODA5NUFBNkM1NDdB
MzY5NDc4MjAeFw0yNTA4MTQyMzQ4NDNaFw0yNjA4MTMyMzUzNDNaMDMxMTAvBgNV
BAMTKDc2NDUxMzg1MDcwMTlGMDE1RDk0QzAwNzAzRjE5ODk0Qjg4QTJFMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7CO4sAPyop2QS7ylE9skVLaHc
EjdwvcGrQUYF2jBUB4n5iNvg9GnfYuQjDSwFuN89WBP774SEX2ITPqWXRcUTKmen
YEJCcKaRFWQXE8pfPOVoSD/UUBucS83ZFWri3q5o+wMldPMmM5Sl8CbJIZupmwsa
Jywel/b5OJFxZxnCYrRYV2S/5xV6h6BdrDXCqAPMeIFUocAFfGxpEofEoaakFE+G
j3P/Anq9ZFAnhJXTHzDtpYVSdmXVqK7Prut8GCH9yLf1iRjnIx5lI6LyE8P01tgE
R/xIewNsaFfVNVOf4OV20qfOB7SQ/Xvf3XULN0YMIRfkbJJFGW5AYq/I5/TFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUdkUThQcBnwFdlMAHA/GYlLiKLhkwHwYDVR0j
BBgwFoAUKMdy+AKUIBhgFIgJWqbFR6NpR4IwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRXFtMkFvNDVtOWI3a3JDQm91UWtyWTdSVjlYVzZwV1p1cnIxRXM1R2d4
cmkvMC8yOEM3NzJGODAyOTQyMDE4NjAxNDg4MDk1QUE2QzU0N0EzNjk0NzgyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4Qzc3MkY4MDI5NDIwMTg2
MDE0ODgwOTVBQTZDNTQ3QTM2OTQ3ODIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VxbTJBbzQ1bTliN2tyQ0JvdVFrclk3UlY5WFc2cFdadXJyMUVzNUdneHJpLzAv
MzEzMzM4MmUzMzM2MmUzMTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKJMAwDQYJKoZIhvcNAQELBQADggEBAFOu7/Dq
2xK0Kd4C+OjuFrozG5NEwicsR/DX+5OBdrU0UjV0SySs9GvEywYGECE1DGvq/LS+
Jrgf0ENkq1/S2nbtlOikVvYlMIRxiQjLP5xTlOrfPhmXSo7Mjk7ad9k4WAZH0jiN
F70NbfwD0a7e4yWI/4zRi665IJed3aHoM7mXO1pP85sFPBxNkoMDmlVzNzeAL48Q
Of9rKT4xAv4vls8CWwXWQc+LGUqJTXXjCjnDXkBgQq0TUUQ4RHv6o5Et7ma/dfgU
0PWD8Dgwel4i4wzHRDKw6eNECQBmIgbWRg4naeTY6OYv+Sxu6M5OmVOYyenZq57U
k0TCgEKPUBOzevc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:08 2025 by rpki-client