Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa
File:                     3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa (raw, json)
Hash identifier:          TawxUCXANgcp3ulofqw5wWrjuXidOZBn7VohelwThKA=
Subject key identifier:   80:21:BA:28:51:45:C0:97:86:95:16:33:54:4F:CF:CA:B6:62:C7:0B
Certificate issuer:       /CN=28C772F802942018601488095AA6C547A3694782
Certificate serial:       437CFC2A213DB468D5CAB4CA6E2594BEB7DCE79D
Authority key identifier: 28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa
Signing time:             Thu 14 Aug 2025 23:53:43 +0000
ROA not before:           Thu 14 Aug 2025 23:48:43 +0000
ROA not after:            Thu 13 Aug 2026 23:53:43 +0000
asID:                     262535
IP address blocks:        138.36.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl
                          rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 19:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:7c:fc:2a:21:3d:b4:68:d5:ca:b4:ca:6e:25:94:be:b7:dc:e7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28C772F802942018601488095AA6C547A3694782
        Validity
            Not Before: Aug 14 23:48:43 2025 GMT
            Not After : Aug 13 23:53:43 2026 GMT
        Subject: CN=8021BA285145C09786951633544FCFCAB662C70B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:ca:f9:22:74:39:ce:14:8f:a6:32:3c:5b:
                    e7:4e:b9:4e:08:64:00:d9:58:82:be:5b:48:49:4a:
                    f3:7e:b9:08:64:cf:f4:8a:92:1d:6e:ef:d4:12:9b:
                    f7:46:3d:c0:6d:1b:14:12:83:26:c4:20:c5:f1:c9:
                    1f:1b:65:f4:6e:6a:0b:b2:ee:55:2d:4c:b1:f9:31:
                    34:4b:eb:1d:92:9b:42:7b:74:09:9f:12:b0:df:ec:
                    f5:fd:fe:65:11:09:cb:2f:9d:2e:c7:f4:d5:2e:e8:
                    83:17:b1:f1:57:20:fb:a4:2e:ed:43:e4:85:40:7e:
                    ed:fa:4e:fc:45:ba:75:16:fc:28:89:8e:45:f5:a3:
                    0c:f0:ae:80:99:38:fa:61:d9:9d:47:94:61:6c:34:
                    62:b9:4d:f6:c8:f7:dc:21:a8:76:e8:95:81:aa:e9:
                    c1:ba:49:c6:41:02:06:5a:4f:75:05:af:74:5d:9b:
                    4d:9a:46:50:53:41:70:42:0c:5f:7a:d9:06:7c:37:
                    ad:e1:31:e4:94:c9:b0:41:b5:8e:7f:eb:ea:39:8d:
                    1f:46:fe:0d:d3:9a:95:29:27:8f:a6:44:ae:70:ab:
                    e7:45:92:f0:ff:aa:92:fe:63:d3:0f:64:7b:9e:7d:
                    30:29:9f:dc:fb:67:30:61:93:73:a1:9b:1f:25:ec:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:21:BA:28:51:45:C0:97:86:95:16:33:54:4F:CF:CA:B6:62:C7:0B
            X509v3 Authority Key Identifier:
                keyid:28:C7:72:F8:02:94:20:18:60:14:88:09:5A:A6:C5:47:A3:69:47:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/28C772F802942018601488095AA6C547A3694782.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C772F802942018601488095AA6C547A3694782.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eqm2Ao45m9b7krCBouQkrY7RV9XW6pWZurr1Es5Ggxri/0/3133382e33362e3139352e302f32342d3234203d3e20323632353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:82:1a:04:fd:55:52:1f:ed:d3:19:bf:6a:bd:a5:e2:81:fb:
         dc:82:71:b9:07:da:b1:64:81:38:dd:8b:0f:02:03:a1:9f:b6:
         a5:33:b4:e8:02:a0:be:46:9a:fe:41:70:6b:8a:67:a1:85:e9:
         ed:46:a1:61:09:d0:4d:03:48:d3:f5:6a:80:5e:77:88:b6:49:
         b2:f6:c7:72:6d:9c:c2:c6:78:31:51:c0:40:07:ce:b5:3d:b4:
         1b:96:a1:75:2c:53:fa:15:b6:e3:54:22:78:f8:5e:a8:14:fa:
         2f:e3:81:89:10:6e:da:41:0c:66:80:b7:7d:30:05:0f:1f:80:
         7f:68:5a:fa:d1:18:f5:06:aa:e5:6f:78:9f:b0:29:1e:6f:ec:
         4a:d3:82:84:6c:40:d8:4c:b3:02:b6:94:91:b5:ab:87:02:9a:
         db:86:cc:ab:d6:f9:d3:01:e3:4c:41:e0:8e:ac:d7:d7:ee:4d:
         00:28:a6:4a:39:f1:f6:d5:a7:41:74:54:6e:b4:6b:78:77:f1:
         2a:48:c9:dc:d3:30:af:4b:44:a2:cb:9d:01:32:db:18:5d:95:
         6f:d2:f4:80:71:f7:a4:ee:24:ad:e6:e2:a5:15:37:f8:55:f9:
         ff:fc:a0:52:46:58:e6:8d:94:ff:8a:ed:3a:9a:2a:53:ee:b8:
         89:6f:f9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:50:24 2025 by rpki-client