Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3137372e3133362e38302e302f32322d3332203d3e203232333831.roa
File:                     3137372e3133362e38302e302f32322d3332203d3e203232333831.roa (raw, json)
Hash identifier:          B2WEjqygIcn7Ckd3GIAiRn2nYrYuAyXo05S4tPw96ww=
Subject key identifier:   F2:2A:E1:80:BC:96:40:96:F4:5A:02:C3:CB:BF:24:50:E5:E7:1B:D6
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       09E3880342788351ECF5B3F043837E6284A4E070
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3137372e3133362e38302e302f32322d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:35 +0000
ROA not before:           Thu 28 Aug 2025 14:42:35 +0000
ROA not after:            Thu 27 Aug 2026 14:47:35 +0000
asID:                     22381
IP address blocks:        177.136.80.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e3:88:03:42:78:83:51:ec:f5:b3:f0:43:83:7e:62:84:a4:e0:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:35 2025 GMT
            Not After : Aug 27 14:47:35 2026 GMT
        Subject: CN=F22AE180BC964096F45A02C3CBBF2450E5E71BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:22:7b:f9:99:0e:b4:ef:3a:5d:0d:05:f5:
                    96:52:a0:64:77:a6:e4:da:8d:7b:5f:a2:05:09:72:
                    40:da:5f:ef:25:ef:9f:6c:69:36:70:1f:01:0f:ec:
                    3a:83:90:52:7e:d4:11:7a:00:a9:a7:38:00:7f:5e:
                    2c:13:d0:b4:da:24:9e:48:d6:34:89:a6:6a:ce:de:
                    4f:f8:37:e2:53:72:7f:43:cf:98:a9:c9:9c:83:2a:
                    21:9b:73:3d:e8:78:7e:a5:d1:d1:8b:ba:d9:30:cc:
                    4f:75:15:65:ee:de:08:29:5e:f2:a9:8d:80:19:3b:
                    65:62:88:37:63:0f:4f:85:63:20:c7:b8:3f:1e:1a:
                    4d:00:64:63:6e:22:67:24:5f:7d:ba:e3:7d:3a:a2:
                    ee:df:46:4d:e8:45:88:24:7b:a1:2c:ce:2f:4d:ed:
                    df:41:7c:fc:9d:f0:77:4b:e6:0b:35:ca:bb:fb:ea:
                    ab:82:b1:9f:fc:76:7e:4d:5c:46:5f:d4:73:d8:41:
                    f4:63:a3:21:60:3c:0c:a0:92:fe:44:26:a6:f0:68:
                    af:44:08:1e:af:16:e8:bf:0f:15:e6:d0:fb:0f:75:
                    42:e0:11:ea:07:94:cb:9a:9d:65:8b:cd:d9:19:e7:
                    ca:7c:f1:83:59:f5:44:28:89:15:4f:82:e2:fd:80:
                    a9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2A:E1:80:BC:96:40:96:F4:5A:02:C3:CB:BF:24:50:E5:E7:1B:D6
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3137372e3133362e38302e302f32322d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e7:7a:af:1f:05:ce:bf:8c:74:eb:ca:64:2d:24:29:3e:75:e1:
         1b:1c:25:df:71:43:7c:c1:17:ff:68:ab:5f:71:5c:d7:75:87:
         8a:27:8e:45:67:d0:42:fe:58:69:f9:2a:7e:ea:9f:74:d3:dd:
         c1:9e:48:93:c3:c2:9c:4d:ee:d1:d8:ea:4d:86:91:5c:bb:6a:
         cf:c7:4c:84:3c:97:30:76:f3:a3:94:e1:5b:b8:12:e0:5b:32:
         72:2c:56:36:dd:e6:01:e4:f2:80:a4:41:67:18:40:e0:91:e9:
         f4:b5:c4:a5:15:8b:7c:ba:68:95:b1:1e:1f:52:e6:ff:45:d8:
         70:2d:64:b9:96:99:d8:c3:bb:5f:c3:a6:22:8d:52:fb:ed:87:
         b5:cb:76:f6:7c:27:e4:b4:51:f0:3d:c2:0c:dc:c9:e1:b7:9a:
         59:fa:c7:67:4a:c0:49:bd:67:e2:09:a7:e8:b4:94:21:d2:89:
         2f:30:ab:c2:c1:a5:4b:93:bf:75:cf:10:9e:77:17:ea:cf:9d:
         e4:e6:0e:88:91:9b:d9:7c:2d:9f:f5:89:9e:9f:6f:a7:3f:4e:
         16:90:42:b3:05:9f:85:5f:cc:cb:47:13:d2:88:31:6a:94:f4:
         e0:84:ca:00:84:b6:8f:75:9f:7c:4e:86:81:0f:50:25:7a:7a:
         fd:ff:36:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:11:01 2025 by rpki-client