Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e33362e3136302e302f31392d3332203d3e203232333831.roa
File:                     3138392e33362e3136302e302f31392d3332203d3e203232333831.roa (raw, json)
Hash identifier:          YiY/VX1NRrkKHmPTgV9K+pUeARrgP9owydIbWAZRAkk=
Subject key identifier:   4F:BF:DE:4B:3C:9F:CB:91:3B:91:EC:69:58:FE:02:1D:FC:85:C5:32
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       5B081A86F8786239B2A5AA8AB6360BF00A78A6F3
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e33362e3136302e302f31392d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:37 +0000
ROA not before:           Thu 28 Aug 2025 14:42:37 +0000
ROA not after:            Thu 27 Aug 2026 14:47:37 +0000
asID:                     22381
IP address blocks:        189.36.160.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:08:1a:86:f8:78:62:39:b2:a5:aa:8a:b6:36:0b:f0:0a:78:a6:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:37 2025 GMT
            Not After : Aug 27 14:47:37 2026 GMT
        Subject: CN=4FBFDE4B3C9FCB913B91EC6958FE021DFC85C532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:7e:7c:9e:21:7c:c3:71:41:59:1c:f5:5f:
                    f9:fe:1e:39:d0:30:d7:81:3d:b4:06:12:a3:6f:14:
                    45:db:eb:b6:d2:cd:f0:5e:88:66:40:67:51:0d:b5:
                    5c:6e:f5:84:60:3e:83:32:52:35:6a:1b:cf:67:d5:
                    bf:21:71:3e:0a:d4:be:63:ba:1f:44:d8:53:d3:9d:
                    84:4d:24:81:b1:31:96:98:71:a4:ca:1a:ac:89:76:
                    b1:eb:cd:dd:e1:24:97:9a:e8:5b:d2:27:26:ef:3c:
                    d9:b3:fb:bc:c1:bd:68:0a:63:fc:a7:89:b9:ca:5e:
                    32:1a:32:94:95:5e:75:5f:29:ca:a5:f2:10:a0:ac:
                    de:0d:d8:64:14:c0:4d:28:f8:29:89:89:77:ff:88:
                    5b:64:71:3e:6f:46:35:ee:d1:19:d9:46:79:68:61:
                    65:e5:3f:b6:cf:30:fb:3a:ea:2b:18:1d:c9:76:1a:
                    ab:5e:03:52:f5:3f:23:23:93:81:1e:4f:4e:8a:53:
                    73:24:d9:0a:fc:9f:e3:97:c0:f6:1b:1d:14:08:bb:
                    66:1a:61:6a:f9:0a:5c:a6:0d:ff:b1:95:72:91:65:
                    d5:ca:a8:41:23:36:3e:be:d6:fe:bd:f7:ad:4a:b2:
                    2a:c7:1a:88:fc:43:96:86:dd:0f:a6:67:d2:98:2e:
                    c5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BF:DE:4B:3C:9F:CB:91:3B:91:EC:69:58:FE:02:1D:FC:85:C5:32
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e33362e3136302e302f31392d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.36.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:03:9c:bf:04:90:af:3e:0b:11:78:15:59:e6:af:88:53:
         da:9c:b8:3f:d3:be:be:d3:ad:3c:a8:a3:89:ec:f3:3c:5f:b9:
         a4:eb:bc:b0:e8:f1:c6:13:36:90:f5:91:b6:fa:07:11:4d:4a:
         11:1e:ee:c3:dc:fd:f1:90:e8:c2:af:77:94:6a:22:48:7c:f0:
         6d:62:5c:d7:be:b5:b9:eb:55:75:82:99:84:2b:98:4f:c0:c5:
         3d:ae:82:3e:7f:a7:8a:05:93:f4:3f:18:37:50:2e:e6:2f:8c:
         02:df:a0:24:72:6e:70:cc:b7:e6:ee:0f:35:fe:d7:56:76:7e:
         1f:0c:9e:cb:db:d6:68:b7:d5:8f:2c:95:55:71:ed:f9:42:76:
         54:53:bc:a9:21:5f:57:2b:a4:ed:f7:46:b2:f9:ab:14:72:ed:
         f2:2a:a1:58:ff:ee:c5:a7:a5:81:0b:26:9a:6b:a2:69:7d:e8:
         e6:6e:a9:8f:a3:a0:da:51:d9:bf:da:f3:ce:1f:79:72:bf:22:
         fa:42:f6:44:de:5b:2a:1f:52:c7:e3:83:9b:2e:c7:22:97:a3:
         7f:6f:78:6e:a3:10:de:7a:fb:90:d2:75:cf:25:d6:aa:88:b2:
         12:bb:2a:b6:81:ec:dc:77:da:b9:af:d1:ab:2f:b4:5c:20:4c:
         84:3a:d6:12
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWwgahvh4YjmypaqKtjYL8Ap4pvMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDRjU2OUQ4MkYzMjMzNTNCRjAxOUZDQzhEQTIzMTQ2
RDY2NkVGNTAeFw0yNTA4MjgxNDQyMzdaFw0yNjA4MjcxNDQ3MzdaMDMxMTAvBgNV
BAMTKDRGQkZERTRCM0M5RkNCOTEzQjkxRUM2OTU4RkUwMjFERkM4NUM1MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuY358niF8w3FBWRz1X/n+HjnQ
MNeBPbQGEqNvFEXb67bSzfBeiGZAZ1ENtVxu9YRgPoMyUjVqG89n1b8hcT4K1L5j
uh9E2FPTnYRNJIGxMZaYcaTKGqyJdrHrzd3hJJea6FvSJybvPNmz+7zBvWgKY/yn
ibnKXjIaMpSVXnVfKcql8hCgrN4N2GQUwE0o+CmJiXf/iFtkcT5vRjXu0RnZRnlo
YWXlP7bPMPs66isYHcl2GqteA1L1PyMjk4EeT06KU3Mk2Qr8n+OXwPYbHRQIu2Ya
YWr5ClymDf+xlXKRZdXKqEEjNj6+1v69961KsirHGoj8Q5aG3Q+mZ9KYLsWxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUT7/eSzyfy5E7kexpWP4CHfyFxTIwHwYDVR0j
BBgwFoAUs89WnYLzIzU78Bn8yNojFG1mbvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZV
bXcvMi9CM0NGNTY5RDgyRjMyMzM1M0JGMDE5RkNDOERBMjMxNDZENjY2RUY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQ0Y1NjlEODJGMzIzMzUz
QkYwMTlGQ0M4REEyMzE0NkQ2NjZFRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0UyTnVzUjJpanc2RzNZTmlNRUYzMzNNUmtvRFREYldnZ3g3WUtmVnJmVW13LzIv
MzEzODM5MmUzMzM2MmUzMTM2MzAyZTMwMmYzMTM5MmQzMzMyMjAzZDNlMjAzMjMy
MzMzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQFvSSgMA0GCSqGSIb3DQEBCwUAA4IBAQCfXgOcvwSQ
rz4LEXgVWeaviFPanLg/076+0608qKOJ7PM8X7mk67yw6PHGEzaQ9ZG2+gcRTUoR
Hu7D3P3xkOjCr3eUaiJIfPBtYlzXvrW561V1gpmEK5hPwMU9roI+f6eKBZP0Pxg3
UC7mL4wC36Akcm5wzLfm7g81/tdWdn4fDJ7L29Zot9WPLJVVce35QnZUU7ypIV9X
K6Tt90ay+asUcu3yKqFY/+7Fp6WBCyaaa6JpfejmbqmPo6DaUdm/2vPOH3lyvyL6
QvZE3lsqH1LH44ObLscil6N/b3huoxDeevuQ0nXPJdaqiLISuyq2gezcd9q5r9Gr
L7RcIEyEOtYS
-----END CERTIFICATE-----
Generated at Mon Sep 15 16:09:44 2025 by rpki-client