Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa
File:                     3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          F/zAJ0uPec3gumxmF6MgH1yNb/TNQRBObgQFP9q3j+Q=
Subject key identifier:   E6:EF:E6:69:69:00:B6:8F:6C:A5:E7:73:EA:09:2D:51:ED:5D:24:A8
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       36FFC1B7B5C3D0A94B67BB3D069C2F2C0FC29BB3
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:36 +0000
ROA not before:           Thu 28 Aug 2025 14:42:36 +0000
ROA not after:            Thu 27 Aug 2026 14:47:36 +0000
asID:                     262589
IP address blocks:        187.108.128.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ff:c1:b7:b5:c3:d0:a9:4b:67:bb:3d:06:9c:2f:2c:0f:c2:9b:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:36 2025 GMT
            Not After : Aug 27 14:47:36 2026 GMT
        Subject: CN=E6EFE6696900B68F6CA5E773EA092D51ED5D24A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:11:d8:b8:b0:9c:d3:c5:16:5a:22:01:c8:66:
                    ca:57:98:66:3e:f6:c1:25:f8:cb:a6:eb:9d:29:ce:
                    f5:99:c8:9a:ee:51:81:e0:94:ff:16:0a:40:bb:4b:
                    f2:16:bf:1f:7a:cc:d9:99:de:9e:2c:14:db:3a:08:
                    33:e7:62:74:6e:0d:50:63:ca:72:1e:a2:1e:ae:c8:
                    d4:46:4c:ca:14:5b:c5:62:6a:de:26:f6:e1:79:de:
                    b1:a1:88:30:a6:96:17:fa:7f:0d:f5:17:9e:c6:71:
                    3a:30:a7:2b:11:f4:0d:12:28:01:52:4e:f6:45:d4:
                    ca:13:55:19:0b:a3:b4:2c:c1:02:13:fa:70:2a:69:
                    ad:7d:ac:cf:07:9a:be:34:92:4e:c3:e5:66:be:c9:
                    fd:b5:08:91:63:7f:54:2f:8d:3e:5a:7f:0b:85:15:
                    d5:f9:9a:77:35:5c:ff:19:94:a7:22:d2:fd:a6:9c:
                    b9:34:dc:53:e6:f0:83:d9:38:52:23:9a:8a:38:bb:
                    42:37:ca:20:71:74:b7:41:e8:2b:de:64:d8:9a:5f:
                    21:25:ba:c2:14:27:11:94:9e:71:2a:e7:a2:3e:04:
                    b6:9a:cb:71:d5:d2:81:f7:93:16:cb:45:3b:87:97:
                    50:4b:d8:d8:7c:d2:85:de:47:9f:8a:ae:05:f8:1a:
                    54:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:EF:E6:69:69:00:B6:8F:6C:A5:E7:73:EA:09:2D:51:ED:5D:24:A8
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138372e3130382e3132382e302f31382d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.108.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:b9:b9:00:c9:00:a3:96:14:92:1c:67:cc:7f:1d:09:b3:29:
         e6:a7:fd:97:b3:81:e7:fa:03:49:e5:aa:14:a0:23:ed:48:f7:
         98:f5:e4:d8:42:e5:4e:fa:b2:42:08:a6:21:dd:39:45:ef:54:
         42:9e:00:ef:46:d5:80:a7:2a:e0:cc:61:e9:60:5f:c5:21:90:
         48:5f:a0:d7:00:fd:68:a5:88:2c:d0:b6:18:d6:d7:55:7e:0d:
         76:74:a8:f9:ab:68:1a:de:6c:b0:aa:99:ed:ca:ee:2e:7d:f4:
         4a:5a:ba:09:4a:9c:f3:18:54:da:b4:4a:10:fa:a1:a5:ac:c0:
         87:3b:f2:d7:b5:8f:02:d8:a8:e5:fd:39:70:c1:cc:06:d9:27:
         96:00:2b:ca:9e:3d:92:3a:fd:6b:55:9a:f3:71:9f:55:82:2d:
         a3:1d:b7:f7:3f:e2:b9:67:02:9f:1d:36:63:7b:0b:1d:1b:21:
         94:80:41:7b:cb:f6:37:b2:b5:96:f4:59:a8:7e:34:58:e1:d6:
         f8:b7:76:b1:99:b3:5b:55:97:15:16:a3:4d:c5:0d:0a:50:d5:
         99:9a:fc:ee:9c:ca:dc:d4:55:ce:1b:81:5e:5d:28:6d:58:ce:
         e3:f8:84:05:18:96:34:4d:c6:62:54:e3:f4:7f:02:7d:1e:6b:
         c0:4d:73:44
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUNv/Bt7XD0KlLZ7s9BpwvLA/Cm7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDRjU2OUQ4MkYzMjMzNTNCRjAxOUZDQzhEQTIzMTQ2
RDY2NkVGNTAeFw0yNTA4MjgxNDQyMzZaFw0yNjA4MjcxNDQ3MzZaMDMxMTAvBgNV
BAMTKEU2RUZFNjY5NjkwMEI2OEY2Q0E1RTc3M0VBMDkyRDUxRUQ1RDI0QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxEdi4sJzTxRZaIgHIZspXmGY+
9sEl+Mum650pzvWZyJruUYHglP8WCkC7S/IWvx96zNmZ3p4sFNs6CDPnYnRuDVBj
ynIeoh6uyNRGTMoUW8Viat4m9uF53rGhiDCmlhf6fw31F57GcTowpysR9A0SKAFS
TvZF1MoTVRkLo7QswQIT+nAqaa19rM8Hmr40kk7D5Wa+yf21CJFjf1QvjT5afwuF
FdX5mnc1XP8ZlKci0v2mnLk03FPm8IPZOFIjmoo4u0I3yiBxdLdB6CveZNiaXyEl
usIUJxGUnnEq56I+BLaay3HV0oH3kxbLRTuHl1BL2Nh80oXeR5+KrgX4GlRjAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU5u/maWkAto9spedz6gktUe1dJKgwHwYDVR0j
BBgwFoAUs89WnYLzIzU78Bn8yNojFG1mbvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV
bXcvMi9CM0NGNTY5RDgyRjMyMzM1M0JGMDE5RkNDOERBMjMxNDZENjY2RUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQ0Y1NjlEODJGMzIzMzUz
QkYwMTlGQ0M4REEyMzE0NkQ2NjZFRjUuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyTnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzIv
MzEzODM3MmUzMTMwMzgyZTMxMzIzODJlMzAyZjMxMzgyZDMzMzIyMDNkM2UyMDMy
MzYzMjM1MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBrtsgDANBgkqhkiG9w0BAQsFAAOCAQEAHbm5
AMkAo5YUkhxnzH8dCbMp5qf9l7OB5/oDSeWqFKAj7Uj3mPXk2ELlTvqyQgimId05
Re9UQp4A70bVgKcq4Mxh6WBfxSGQSF+g1wD9aKWILNC2GNbXVX4NdnSo+atoGt5s
sKqZ7cruLn30Slq6CUqc8xhU2rRKEPqhpazAhzvy17WPAtio5f05cMHMBtknlgAr
yp49kjr9a1Wa83GfVYItox239z/iuWcCnx02Y3sLHRshlIBBe8v2N7K1lvRZqH40
WOHW+Ld2sZmzW1WXFRajTcUNClDVmZr87pzK3NRVzhuBXl0obVjO4/iEBRiWNE3G
YlTj9H8CfR5rwE1zRA==
-----END CERTIFICATE-----
Generated at Mon Sep 15 12:40:35 2025 by rpki-client