Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138362e3231392e33322e302f32302d3332203d3e203232333831.roa
File:                     3138362e3231392e33322e302f32302d3332203d3e203232333831.roa (raw, json)
Hash identifier:          +/VJnl9uUq9xxe/v3NxTpOy4FIy8sulwAe11QNbfCRw=
Subject key identifier:   A9:CD:CF:97:5A:4F:F5:AF:FC:BD:DC:A9:84:F9:93:07:61:5B:C5:80
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       6F152A47C8CB6E85A83DAF6BA772F73D0ABB6112
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138362e3231392e33322e302f32302d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:41 +0000
ROA not before:           Thu 28 Aug 2025 14:42:41 +0000
ROA not after:            Thu 27 Aug 2026 14:47:41 +0000
asID:                     22381
IP address blocks:        186.219.32.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:15:2a:47:c8:cb:6e:85:a8:3d:af:6b:a7:72:f7:3d:0a:bb:61:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:41 2025 GMT
            Not After : Aug 27 14:47:41 2026 GMT
        Subject: CN=A9CDCF975A4FF5AFFCBDDCA984F99307615BC580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:cd:55:b3:c8:eb:de:05:d4:1c:e2:aa:79:
                    b6:7a:f9:9f:35:f0:1a:87:7c:7d:cc:03:b2:78:3c:
                    87:88:39:de:7a:27:81:40:07:c1:82:0d:dd:6e:33:
                    12:3f:4c:bb:6d:58:58:44:7c:7a:34:62:c3:5b:b2:
                    06:4d:73:3f:97:0f:c5:1b:46:e4:3b:24:2a:9b:ba:
                    1d:7a:41:d9:85:d7:3b:2e:e7:d0:23:23:c0:6c:9e:
                    2e:bb:d4:cb:ac:92:e8:e6:ce:39:8b:03:b2:5a:a5:
                    e9:7a:2d:16:3a:f7:fd:31:49:bc:fb:09:47:61:e1:
                    11:f6:cd:a4:4f:ac:67:6b:c6:00:4d:a0:f7:97:c5:
                    93:d8:0c:79:52:6e:de:d4:a6:08:8d:4b:70:4f:b0:
                    94:9e:e3:57:73:88:96:a9:0b:19:e7:0c:a5:9a:6d:
                    8a:f0:be:85:46:ec:53:b9:d7:3e:ca:6a:e8:dc:06:
                    8e:18:2a:dd:5d:69:ca:17:f2:30:a8:4d:f0:c6:04:
                    b6:1e:5b:bd:81:f9:e0:2e:a7:1a:0b:69:fb:9f:f7:
                    8e:63:4e:98:ca:98:83:d6:b6:f3:a8:1a:31:f3:c0:
                    79:c9:a6:85:e3:38:27:70:b7:ff:54:5e:a5:4f:44:
                    ff:62:e4:fa:f4:2e:73:7e:24:70:e0:88:6e:40:b0:
                    d3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CD:CF:97:5A:4F:F5:AF:FC:BD:DC:A9:84:F9:93:07:61:5B:C5:80
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138362e3231392e33322e302f32302d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:d9:14:a9:2e:47:66:6c:52:22:c5:41:8f:73:a0:3c:36:
         ae:b6:13:ac:ee:3e:a6:26:aa:65:81:31:96:21:f9:8d:28:80:
         2a:9a:17:c8:fd:40:4c:c3:9b:2c:bd:54:3f:17:a6:ea:47:11:
         65:f7:0b:b5:4d:10:47:38:9a:dd:aa:ff:46:ba:b7:11:d5:5b:
         37:10:26:0c:fd:a1:55:a1:e6:c7:b9:a4:67:fb:c5:48:08:bd:
         f0:5b:87:6a:1b:38:0a:a1:3d:c9:11:35:de:f5:98:b0:31:4e:
         2f:18:ca:eb:55:69:b3:13:e7:d7:5e:19:60:f8:54:ab:65:ab:
         d9:8b:bf:0c:e2:93:b7:ce:85:ff:01:66:93:ab:3a:f4:09:8c:
         1f:b4:8e:eb:91:2e:54:8d:a3:5e:87:93:d6:a0:65:f4:ef:cf:
         b6:81:3f:09:f6:d4:77:66:82:29:d2:2c:6b:49:90:e0:2d:86:
         54:49:53:ae:08:d5:2c:60:27:17:4a:08:ca:ee:fa:70:26:b9:
         f8:c5:9a:ea:ef:0d:29:a8:03:2b:d2:fc:49:d0:8b:83:5c:62:
         e4:e0:89:bb:c4:cb:25:e1:18:e2:fa:95:21:76:66:e0:e8:cb:
         de:85:02:a7:4d:9f:18:3f:5f:da:a6:85:fa:7b:73:98:df:c0:
         d7:d4:5e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:11:52 2025 by rpki-client