Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e39312e39362e302f31392d3332203d3e203232333831.roa
File:                     3138392e39312e39362e302f31392d3332203d3e203232333831.roa (raw, json)
Hash identifier:          hvo/js1dbZbDzsnpyx5VTbqFS7OtfP/69/4q82W0Yr8=
Subject key identifier:   8E:FD:FC:75:17:51:80:FD:93:F4:6B:20:C0:29:48:F7:6B:1C:D9:93
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       589570334734E16819A79E39B75E04FEF1708AC4
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e39312e39362e302f31392d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:40 +0000
ROA not before:           Thu 28 Aug 2025 14:42:40 +0000
ROA not after:            Thu 27 Aug 2026 14:47:40 +0000
asID:                     22381
IP address blocks:        189.91.96.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:95:70:33:47:34:e1:68:19:a7:9e:39:b7:5e:04:fe:f1:70:8a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:40 2025 GMT
            Not After : Aug 27 14:47:40 2026 GMT
        Subject: CN=8EFDFC75175180FD93F46B20C02948F76B1CD993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:fc:d1:7b:37:a7:8f:30:92:ac:a2:cc:26:9b:
                    e7:16:d7:f7:53:e7:a9:8d:78:7c:9e:03:ac:39:00:
                    1c:b0:9e:70:4f:5b:e2:52:c1:2f:9a:8b:15:1f:1a:
                    de:65:89:b6:5b:a5:5b:3e:09:73:4d:c7:66:36:bd:
                    9a:23:85:46:1f:d4:e8:b7:87:17:f8:ca:88:c9:5b:
                    de:2b:28:82:f4:f6:05:1e:bb:33:b6:55:76:50:48:
                    97:e6:4d:d7:fd:2f:03:99:d1:e3:5e:07:5d:6e:e6:
                    bf:d8:94:f2:ff:76:54:00:7c:c6:9a:15:21:fd:a8:
                    d7:18:bb:eb:5c:fb:0d:3d:c5:0c:d3:33:53:1e:68:
                    0c:fc:a6:d1:b1:21:db:09:5c:a2:25:d2:73:71:b6:
                    f1:38:02:be:34:f9:9c:e5:74:46:bd:ab:18:5d:87:
                    a7:d6:d5:f1:b9:26:72:1d:87:b7:cc:59:d2:cf:cf:
                    d5:2a:88:32:77:0b:0b:3e:b9:15:89:19:90:2d:49:
                    bf:ec:82:e6:17:9a:b6:b2:c4:0a:53:aa:d8:6e:2d:
                    41:3c:88:d5:8e:7c:5c:ed:b3:ea:2c:60:8c:a1:d4:
                    b0:53:d0:14:1d:3f:6f:a5:83:97:cb:68:d7:c7:5d:
                    16:14:c0:fd:9f:95:7a:1c:66:64:d0:bb:94:d7:ad:
                    90:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FD:FC:75:17:51:80:FD:93:F4:6B:20:C0:29:48:F7:6B:1C:D9:93
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3138392e39312e39362e302f31392d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.91.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:59:54:ca:91:c8:fb:c9:e3:8c:ab:3c:a0:ae:c8:ad:b2:
         4a:26:e8:bb:ec:c8:1e:8e:b5:4e:bd:81:6c:57:f3:9e:0f:dc:
         65:05:43:48:6c:f8:dd:da:e5:3b:82:ca:50:df:08:91:ef:28:
         36:45:84:62:68:de:51:cd:7e:a4:0d:fb:88:c7:44:90:a6:8d:
         cb:96:79:aa:23:8e:6a:25:22:55:18:7c:9f:27:4d:ab:b9:9b:
         09:10:fa:f9:18:d2:0f:3d:93:dd:81:1c:96:b9:d9:cf:a2:5e:
         9d:64:77:af:a3:67:52:8c:50:87:e7:60:ac:42:d3:e0:10:67:
         ce:b3:8e:5a:fa:48:67:1b:a6:e6:c5:90:05:81:06:4d:f2:8e:
         eb:40:ae:0f:d2:77:9a:4b:e5:bd:9d:2b:55:74:67:b2:15:92:
         82:4b:6e:cc:94:1d:ec:da:5a:43:a5:a3:04:81:5d:9d:90:29:
         05:6e:47:35:08:39:a3:4b:28:81:6e:17:e7:52:f2:89:27:25:
         a1:a7:81:63:11:92:13:d8:dd:72:f5:cc:d1:2b:de:b2:dc:f1:
         a8:30:4d:29:7b:0d:12:14:05:ab:7e:03:13:97:43:25:b3:14:
         f2:55:34:94:8f:0c:b4:99:10:b3:58:ac:78:69:1b:ac:8f:43:
         24:91:77:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:18:15 2025 by rpki-client