Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa
File:                     3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa (raw, json)
Hash identifier:          g6Zn8yS8GcLarUL1QJADlhzVNRlQvPmZQ3mg3hjeRtQ=
Subject key identifier:   B1:C1:89:0A:64:0F:31:39:8E:9D:FF:05:B4:40:72:29:FE:F1:9D:08
Certificate issuer:       /CN=80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1
Certificate serial:       203AD0171889C6B87343EC376B029005E0238452
Authority key identifier: 80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa
Signing time:             Mon 04 Aug 2025 18:15:50 +0000
ROA not before:           Mon 04 Aug 2025 18:10:50 +0000
ROA not after:            Mon 03 Aug 2026 18:15:50 +0000
asID:                     263369
IP address blocks:        191.37.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.crl
                          rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 21 Aug 2025 15:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3a:d0:17:18:89:c6:b8:73:43:ec:37:6b:02:90:05:e0:23:84:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1
        Validity
            Not Before: Aug  4 18:10:50 2025 GMT
            Not After : Aug  3 18:15:50 2026 GMT
        Subject: CN=B1C1890A640F31398E9DFF05B4407229FEF19D08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:29:83:9f:dc:b8:f1:c2:14:15:73:2c:af:18:
                    0c:f8:e7:16:fa:51:1c:15:76:49:73:9e:61:4d:3b:
                    0b:42:56:0b:75:6b:93:e0:10:b0:cf:86:db:c9:dc:
                    e3:b8:41:70:26:c4:e9:6a:e6:04:71:11:72:b6:35:
                    14:9c:4b:10:0f:5d:06:45:50:60:fa:fb:78:41:97:
                    c0:63:5b:7a:c0:f4:19:22:35:da:5f:b1:21:69:25:
                    dd:dc:34:4a:40:22:0a:bd:2d:2b:a2:1c:b4:fe:8c:
                    eb:57:2f:8b:ef:62:84:6f:29:06:4b:25:fa:33:6e:
                    ce:2b:f3:de:2f:3b:a8:2b:d5:be:bf:af:5c:18:3d:
                    5d:3b:81:53:7d:d2:43:a0:74:6b:d7:41:a6:77:ad:
                    fe:69:a3:44:77:0f:10:7e:b1:0e:31:fa:7f:eb:85:
                    03:1f:76:ab:95:fb:91:2a:40:42:10:1d:2f:61:a9:
                    cf:49:39:06:76:38:be:34:21:bc:97:91:6a:02:22:
                    43:ba:2b:0f:3a:10:6c:ef:0a:2b:cd:2e:9a:02:2b:
                    62:cd:4d:2e:bb:fb:27:2c:df:5c:bc:1d:45:43:86:
                    7f:f5:2f:70:cf:dd:b8:25:f1:ca:fd:b8:c3:60:fd:
                    09:81:1f:13:b3:eb:d2:ce:0c:71:b0:16:9b:d1:ff:
                    f8:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C1:89:0A:64:0F:31:39:8E:9D:FF:05:B4:40:72:29:FE:F1:9D:08
            X509v3 Authority Key Identifier:
                keyid:80:C2:02:64:AF:C5:25:D5:C8:E6:3C:70:9C:E7:AB:E0:ED:AF:C9:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C20264AFC525D5C8E63C709CE7ABE0EDAFC9F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/818kYEcyWohxS9KaatwzkdU5HHzeY6Rp4C87vpB33SmQ/0/3139312e33372e3138312e302f32342d3234203d3e20323633333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:af:45:41:2f:ae:a5:08:11:fd:9d:0d:3e:a2:63:87:8e:68:
         da:60:71:ea:df:d9:71:c5:11:58:d0:79:a8:69:fe:69:8f:bd:
         cd:56:61:23:26:8e:a0:ba:4d:d6:fe:9a:92:d1:bd:35:f2:11:
         27:f1:3a:ad:46:5a:18:2d:cd:2e:df:b1:34:41:56:7f:75:ad:
         00:c1:cb:64:72:57:7d:3d:9f:fb:a5:d7:58:57:b9:91:e6:6f:
         b9:f4:71:0c:fa:74:39:28:c7:8c:d8:db:6a:10:44:2d:0a:8c:
         68:1c:94:f9:d7:ed:f2:11:d8:d2:82:9b:9a:90:bc:6a:86:6e:
         87:37:de:95:bd:51:18:3d:c2:85:f2:e1:22:0c:87:5b:c1:9a:
         69:a3:ff:86:04:25:4e:07:ca:0e:fe:cc:cb:73:a0:e8:fb:5b:
         02:31:c2:0f:ea:4b:ad:05:2f:6e:01:23:05:7c:99:6e:e8:bb:
         eb:df:49:30:d6:34:13:d3:89:02:44:46:d6:63:f2:b9:a9:c9:
         2e:3f:f9:7b:3f:bb:cc:02:b6:3c:98:41:97:e7:2b:48:e9:70:
         3d:6c:20:d3:ff:ea:dd:83:e9:b6:08:66:ca:91:e3:2a:61:f6:
         4a:09:d2:1f:41:8d:97:f6:39:c1:af:a9:9a:94:f0:31:d9:dd:
         70:be:e8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:13:00 2025 by rpki-client