Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138362e3231392e302e302f31392d3332203d3e20323632353839.roa
File:                     3138362e3231392e302e302f31392d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          vOaUMl2vP/1YLt268J+qYVjhIMNeQIRK7TxGpTt/mng=
Subject key identifier:   34:17:61:A9:39:EB:2E:E1:BA:00:4F:E8:6D:CD:41:D8:E0:6B:80:E3
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       422BA4F9921FDB9374A1EE7FDBC461B2F28FBDF7
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138362e3231392e302e302f31392d3332203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:37 +0000
ROA not before:           Thu 28 Aug 2025 14:42:37 +0000
ROA not after:            Thu 27 Aug 2026 14:47:37 +0000
asID:                     262589
IP address blocks:        186.219.0.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2b:a4:f9:92:1f:db:93:74:a1:ee:7f:db:c4:61:b2:f2:8f:bd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:37 2025 GMT
            Not After : Aug 27 14:47:37 2026 GMT
        Subject: CN=341761A939EB2EE1BA004FE86DCD41D8E06B80E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b2:b4:e0:db:18:a6:aa:9d:f1:dc:1e:02:f3:
                    d5:90:df:9c:3e:89:6f:ef:9a:fa:16:54:58:e0:73:
                    fe:85:55:95:59:0f:31:e6:2d:bc:58:36:68:1c:05:
                    aa:75:86:04:50:44:d4:09:5b:ac:64:94:ef:d4:ef:
                    8b:d5:d9:fc:33:69:23:08:f5:69:d0:ca:2a:81:a0:
                    a4:04:0f:0d:70:bd:d8:6e:69:8c:60:75:de:0c:a1:
                    fe:43:b8:62:f2:ae:5e:90:21:9b:b4:11:0a:ed:f6:
                    5c:de:f4:9a:c9:af:c6:07:0a:c4:61:eb:8c:99:11:
                    f6:7e:19:20:b7:02:46:36:11:39:9c:ba:18:a9:38:
                    b7:c8:c0:a4:0e:91:e4:a8:0f:2c:c5:d9:48:0c:10:
                    ca:90:75:e1:07:20:fb:39:91:90:6c:9f:1f:52:2a:
                    6a:48:1f:e9:ce:1d:a8:48:e8:8c:d5:2b:b7:33:a9:
                    8b:ed:96:28:ad:5f:ac:0b:42:9a:64:7f:a2:3b:be:
                    d2:48:37:32:d8:3f:83:92:97:88:12:00:3c:4d:37:
                    3b:98:f3:86:4c:b7:24:7c:12:82:f0:6d:63:b6:f9:
                    0c:ac:b9:9f:c9:d8:b6:52:12:dc:cf:0b:29:07:cc:
                    35:e2:0c:03:94:ae:31:04:b7:49:64:4d:0c:5c:15:
                    3d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:17:61:A9:39:EB:2E:E1:BA:00:4F:E8:6D:CD:41:D8:E0:6B:80:E3
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138362e3231392e302e302f31392d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:eb:48:fe:34:be:71:01:a1:40:6c:5f:3b:f7:33:6d:3c:54:
         06:03:94:07:17:7d:5d:3f:62:da:ac:78:08:4b:56:9b:74:2e:
         cf:8b:8e:70:2a:80:a9:26:0a:25:85:d5:f8:02:43:8a:9a:22:
         c6:de:82:d2:df:d5:67:0d:47:0c:1e:2b:b1:e9:3c:43:b5:2f:
         bf:59:72:89:51:6f:0c:ab:e1:63:64:5c:ce:6b:cb:c5:bd:da:
         f6:97:7d:3e:c0:af:16:3a:d5:0e:23:01:2e:58:71:aa:3a:53:
         79:6d:3f:d1:01:12:38:4a:9f:92:b0:10:99:aa:df:61:a8:b3:
         89:dd:99:10:09:4e:a8:0c:98:02:67:c6:2a:bf:7b:c3:ae:c2:
         eb:0e:c6:f5:7a:5a:01:f9:9d:6b:e7:4a:32:fe:58:05:f5:35:
         19:b1:1d:6a:74:09:cd:cc:5a:cb:33:f9:2c:c8:a7:28:bc:4f:
         44:54:ec:5b:37:50:30:78:38:7d:76:6d:e4:f3:5b:c9:e8:a5:
         85:ef:00:8e:01:83:f6:38:01:3f:dd:b6:a4:b6:74:01:ec:4f:
         00:df:f3:24:23:9d:4e:1e:43:e7:24:ef:7b:f7:bb:4a:6f:d5:
         da:da:63:e5:f1:18:70:a2:c1:5c:fe:b3:9e:cd:5e:d9:eb:74:
         02:b9:a3:2c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQiuk+ZIf25N0oe5/28RhsvKPvfcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDRjU2OUQ4MkYzMjMzNTNCRjAxOUZDQzhEQTIzMTQ2
RDY2NkVGNTAeFw0yNTA4MjgxNDQyMzdaFw0yNjA4MjcxNDQ3MzdaMDMxMTAvBgNV
BAMTKDM0MTc2MUE5MzlFQjJFRTFCQTAwNEZFODZEQ0Q0MUQ4RTA2QjgwRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+srTg2ximqp3x3B4C89WQ35w+
iW/vmvoWVFjgc/6FVZVZDzHmLbxYNmgcBap1hgRQRNQJW6xklO/U74vV2fwzaSMI
9WnQyiqBoKQEDw1wvdhuaYxgdd4Mof5DuGLyrl6QIZu0EQrt9lze9JrJr8YHCsRh
64yZEfZ+GSC3AkY2ETmcuhipOLfIwKQOkeSoDyzF2UgMEMqQdeEHIPs5kZBsnx9S
KmpIH+nOHahI6IzVK7czqYvtliitX6wLQppkf6I7vtJINzLYP4OSl4gSADxNNzuY
84ZMtyR8EoLwbWO2+QysuZ/J2LZSEtzPCykHzDXiDAOUrjEEt0lkTQxcFT2LAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNBdhqTnrLuG6AE/obc1B2OBrgOMwHwYDVR0j
BBgwFoAUs89WnYLzIzU78Bn8yNojFG1mbvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV
bXcvMi9CM0NGNTY5RDgyRjMyMzM1M0JGMDE5RkNDOERBMjMxNDZENjY2RUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQ0Y1NjlEODJGMzIzMzUz
QkYwMTlGQ0M4REEyMzE0NkQ2NjZFRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyTnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzIv
MzEzODM2MmUzMjMxMzkyZTMwMmUzMDJmMzEzOTJkMzMzMjIwM2QzZTIwMzIzNjMy
MzUzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFutsAMA0GCSqGSIb3DQEBCwUAA4IBAQBk60j+NL5x
AaFAbF879zNtPFQGA5QHF31dP2LarHgIS1abdC7Pi45wKoCpJgolhdX4AkOKmiLG
3oLS39VnDUcMHiux6TxDtS+/WXKJUW8Mq+FjZFzOa8vFvdr2l30+wK8WOtUOIwEu
WHGqOlN5bT/RARI4Sp+SsBCZqt9hqLOJ3ZkQCU6oDJgCZ8Yqv3vDrsLrDsb1eloB
+Z1r50oy/lgF9TUZsR1qdAnNzFrLM/ksyKcovE9EVOxbN1AweDh9dm3k81vJ6KWF
7wCOAYP2OAE/3baktnQB7E8A3/MkI51OHkPnJO9797tKb9Xa2mPl8RhwosFc/rOe
zV7Z63QCuaMs
-----END CERTIFICATE-----
Generated at Mon Sep 15 12:40:40 2025 by rpki-client