Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3137372e38342e3136302e302f32312d3332203d3e203232333831.roa
File:                     3137372e38342e3136302e302f32312d3332203d3e203232333831.roa (raw, json)
Hash identifier:          uwjRCZFnNTV2mRamexFoWhG+ZNBedFSiPcL5dP1Ba6E=
Subject key identifier:   B6:FC:FE:D4:E8:4E:BD:F8:BC:81:6F:0B:44:C2:13:F0:6D:BE:3A:27
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       5A2D7450574B61C4942186D6652169A727EDA30C
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3137372e38342e3136302e302f32312d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:42 +0000
ROA not before:           Thu 28 Aug 2025 14:42:42 +0000
ROA not after:            Thu 27 Aug 2026 14:47:42 +0000
asID:                     22381
IP address blocks:        177.84.160.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 16:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:2d:74:50:57:4b:61:c4:94:21:86:d6:65:21:69:a7:27:ed:a3:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:42 2025 GMT
            Not After : Aug 27 14:47:42 2026 GMT
        Subject: CN=B6FCFED4E84EBDF8BC816F0B44C213F06DBE3A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cf:44:2e:2e:03:7e:c9:cc:82:9f:6a:a4:85:
                    0e:1d:e2:5e:73:72:1b:bd:82:07:44:ab:77:e3:93:
                    29:03:a0:8e:b9:6f:5c:52:a1:56:da:fc:bd:07:71:
                    ff:40:d8:63:ca:5f:cb:5a:b4:02:ca:40:c9:b6:bd:
                    9c:39:02:0b:e3:d1:37:51:4c:65:b1:ca:ea:30:91:
                    1e:e4:c8:2a:f9:6b:10:e2:bd:f6:74:22:c0:79:bc:
                    26:ce:62:6d:c2:9d:91:a4:0b:ba:4c:6d:52:89:4a:
                    83:c5:28:49:6c:19:b4:3d:32:fa:f9:2a:89:85:77:
                    73:cc:b6:a7:36:2a:19:56:9a:33:98:b3:88:21:f9:
                    cc:96:41:bc:85:6a:30:38:1c:31:f4:e7:df:1e:69:
                    02:58:ab:b8:89:cb:66:9b:d0:b8:22:aa:11:ff:ae:
                    73:94:14:48:05:f1:b4:a2:9c:11:17:cd:54:0b:2a:
                    65:a5:32:32:fd:29:33:a2:e7:4b:e2:8e:cc:1f:00:
                    f1:f1:27:d7:88:a4:74:e4:fe:7e:f0:e4:83:47:18:
                    77:99:58:c9:58:fc:a6:28:e9:86:3e:f3:76:9d:0f:
                    44:74:24:dd:4b:b1:0f:f4:ae:a5:6c:a4:49:e9:3f:
                    c6:8d:e3:d7:e1:4b:be:21:0e:d4:8b:05:78:9f:7a:
                    6e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FC:FE:D4:E8:4E:BD:F8:BC:81:6F:0B:44:C2:13:F0:6D:BE:3A:27
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3137372e38342e3136302e302f32312d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.84.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         18:63:a0:25:ed:89:13:2b:cc:a0:69:1c:39:9c:5f:c9:67:1f:
         e5:08:0c:53:77:7d:0b:18:44:17:88:99:0b:bb:d1:7b:99:fd:
         be:6a:cf:91:f4:6b:43:02:ef:87:be:ed:aa:b1:09:55:a6:2e:
         97:ab:1e:38:28:25:8a:c9:bd:80:d1:d3:1b:75:b7:f7:cc:85:
         0b:b1:38:73:ea:41:c0:61:11:14:a6:ae:ed:0d:b1:c9:6a:4c:
         81:bc:5d:11:75:bc:53:46:42:f2:6b:d6:d4:f3:2b:05:3c:38:
         49:0a:1a:96:ed:c7:56:03:70:fb:a8:fb:a7:cf:7a:84:0e:71:
         91:e1:c7:5f:0c:a2:04:39:dc:35:db:9a:cc:15:1d:a1:d2:e1:
         36:32:3c:0e:07:8f:59:f0:48:e9:3c:a7:66:c6:c0:1e:c1:57:
         7b:db:d8:33:0f:a2:74:2e:66:b1:88:2b:9d:95:48:fb:89:1f:
         02:54:3e:65:da:c0:6a:2a:e7:bf:dc:53:ca:d0:88:a2:a1:08:
         54:e7:70:3a:7f:f5:fa:61:a9:7b:f8:a7:4b:ad:48:ad:b4:ff:
         72:5c:4e:b3:c0:79:78:cc:f6:11:1b:ea:d9:3a:92:ce:5a:ab:
         ac:46:56:18:83:fd:d9:94:93:e1:e5:ec:3a:ea:e4:d9:36:88:
         b1:67:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:18:20 2025 by rpki-client