Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e3132372e36342e302f31382d3332203d3e20323632353839.roa
File:                     3138392e3132372e36342e302f31382d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          67QfvcgToaEPe1w5wMIBCXMpjo0+Vux7wQtRHxsFy0U=
Subject key identifier:   AB:87:70:80:B6:AD:13:67:20:33:E3:2A:6A:0C:83:7A:48:E4:0C:C6
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       0557DC1D6F8C5392D2606E2272882CB1C93CB434
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e3132372e36342e302f31382d3332203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:42 +0000
ROA not before:           Thu 28 Aug 2025 14:42:42 +0000
ROA not after:            Thu 27 Aug 2026 14:47:42 +0000
asID:                     262589
IP address blocks:        189.127.64.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:57:dc:1d:6f:8c:53:92:d2:60:6e:22:72:88:2c:b1:c9:3c:b4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:42 2025 GMT
            Not After : Aug 27 14:47:42 2026 GMT
        Subject: CN=AB877080B6AD13672033E32A6A0C837A48E40CC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:d7:91:df:86:0a:0f:c7:e2:1d:79:a1:0f:
                    20:98:81:7f:90:05:4f:60:72:8a:e7:e7:0b:93:6f:
                    0b:42:4a:1e:c9:54:1a:de:a8:f4:99:fc:f3:b1:2e:
                    83:70:62:fe:9c:f8:72:ed:55:68:97:93:1c:92:72:
                    8f:44:a8:f4:c8:53:8e:05:25:34:ca:4d:5b:56:a7:
                    e2:97:9a:02:50:ce:8f:8c:76:28:d9:0f:7d:63:54:
                    97:59:8b:d8:aa:01:7f:a7:27:a4:dd:16:8f:0d:f1:
                    e0:b7:46:67:64:11:22:1f:18:84:48:46:8e:f9:17:
                    77:e3:50:85:57:67:bd:25:8a:75:54:ca:8d:1c:cd:
                    de:7e:b2:e1:79:a4:da:60:35:87:5c:c6:59:95:01:
                    a2:63:76:61:55:51:cd:b0:ea:4b:54:2c:ba:64:f6:
                    b5:f0:88:25:f3:6a:ed:9a:40:9f:60:56:ff:57:89:
                    91:62:40:ea:b7:14:d0:95:f4:93:70:86:f4:dc:9b:
                    cf:da:64:15:88:d2:ef:6b:b5:5a:ce:43:b8:26:61:
                    e6:48:05:dd:7a:8a:35:42:a1:92:12:cd:37:ca:73:
                    1a:79:58:36:fd:94:64:3a:52:c1:a0:3f:59:54:b6:
                    b7:b7:5b:40:ea:1e:35:05:a5:51:a5:fd:6c:78:96:
                    d9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:87:70:80:B6:AD:13:67:20:33:E3:2A:6A:0C:83:7A:48:E4:0C:C6
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e3132372e36342e302f31382d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:2c:47:24:f2:1c:34:7d:cd:96:df:51:16:d6:b2:8a:19:75:
         61:f5:ee:8b:2d:1d:ef:4c:52:7e:cf:ca:a0:05:d0:2e:66:0a:
         3c:e2:5c:e7:07:0d:76:3d:12:e5:a8:b3:6c:49:4e:61:04:84:
         70:a8:e4:7d:5b:b7:9c:d2:65:b5:6a:c1:2e:17:bd:69:0f:89:
         61:47:de:21:e4:25:8d:95:d6:e6:c1:42:35:36:04:b4:cb:2d:
         8e:78:50:d8:c1:18:45:2e:67:f6:66:b3:04:ef:02:08:44:dd:
         00:54:95:f1:59:e6:b5:6b:61:65:23:76:3a:24:78:a6:14:70:
         0f:76:1a:7b:ca:eb:e5:14:f3:ca:59:02:44:9d:4c:0c:1e:27:
         11:ae:b0:e2:79:40:52:95:72:e8:a0:82:27:62:a6:c1:fd:f4:
         d5:a0:4e:7a:83:8e:fa:05:74:51:f0:51:96:53:39:4e:59:af:
         2e:37:a0:bb:9f:3a:42:88:7c:82:9a:22:f2:68:87:fa:6c:2f:
         05:1e:d0:72:81:10:7a:09:de:e9:a7:3b:fc:c8:47:a1:91:e1:
         3d:90:dd:3b:97:d5:a3:f6:94:01:b3:4e:c7:6c:4e:37:40:43:
         e1:f0:95:e8:aa:93:b3:21:90:9a:46:f3:17:8a:94:57:72:f0:
         a4:9c:46:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:38:51 2025 by rpki-client