Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230302e3232302e3139322e302f31392d3332203d3e203232333831.roa
File:                     3230302e3232302e3139322e302f31392d3332203d3e203232333831.roa (raw, json)
Hash identifier:          mF0+cTOilv5+BY/FmaVfMRxgdlawIpn9fFAVNVEUsuM=
Subject key identifier:   CB:BD:8A:15:96:50:48:6E:AB:E5:E6:30:CE:F4:53:96:7A:1A:77:08
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       1C5FB54292D61FDA1CB7566E187DD8597DE50DA0
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230302e3232302e3139322e302f31392d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:33 +0000
ROA not before:           Thu 28 Aug 2025 14:42:33 +0000
ROA not after:            Thu 27 Aug 2026 14:47:33 +0000
asID:                     22381
IP address blocks:        200.220.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 16 Sep 2025 16:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5f:b5:42:92:d6:1f:da:1c:b7:56:6e:18:7d:d8:59:7d:e5:0d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:33 2025 GMT
            Not After : Aug 27 14:47:33 2026 GMT
        Subject: CN=CBBD8A159650486EABE5E630CEF453967A1A7708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c5:91:a3:63:e1:f0:29:b3:1b:cd:33:cd:61:
                    b0:5c:99:04:bd:30:c9:f8:f8:c7:c6:62:34:72:9f:
                    ad:86:4d:24:5b:1b:f0:93:fd:34:b0:30:d2:77:a8:
                    e0:68:03:13:9c:56:35:da:5d:f3:62:df:bd:9c:aa:
                    fe:2c:82:d2:e8:49:1b:63:d2:ba:77:ed:1f:36:c0:
                    ca:b7:03:06:df:bd:5a:aa:72:b4:a7:2f:8c:fa:b6:
                    31:5e:78:ff:ba:07:13:71:98:9f:09:76:87:6e:5c:
                    18:09:4e:f9:d1:e1:ac:75:12:0a:43:cd:e8:88:8b:
                    5e:d9:37:e2:1c:5c:25:d0:09:fd:9e:5d:76:14:b4:
                    b1:02:db:f3:db:fc:09:78:b9:3a:54:79:fa:9d:7c:
                    c9:98:23:7c:81:72:56:d0:45:ff:fd:87:38:b1:73:
                    50:67:28:8d:96:50:83:75:5b:ac:7f:5f:38:48:8a:
                    6c:f4:4b:e3:93:60:9e:3e:67:04:7a:8a:f4:57:62:
                    a4:15:61:00:56:19:68:cd:c2:ad:fc:d2:d9:b6:21:
                    4e:cb:30:10:4a:9a:0f:c3:89:f9:bb:ca:b5:09:ff:
                    82:70:d4:b4:de:4f:7a:69:85:87:a6:dd:d0:a1:51:
                    6b:f1:8a:27:08:7a:93:4b:91:b1:46:2d:aa:a5:52:
                    f4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BD:8A:15:96:50:48:6E:AB:E5:E6:30:CE:F4:53:96:7A:1A:77:08
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230302e3232302e3139322e302f31392d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:7c:99:0e:bb:3d:81:5c:54:28:8a:23:32:ab:16:f2:b5:2c:
         bf:99:1c:3e:18:b5:0a:c8:9c:3a:0a:ab:47:70:d0:74:dc:ba:
         99:85:10:1f:5e:8a:53:10:96:2f:23:ce:63:ff:ea:67:73:d4:
         2f:0a:32:89:db:54:c8:c3:a1:f5:8c:24:3c:8d:63:8e:4d:56:
         3a:a7:ce:7a:fd:3a:0c:5f:e9:9d:0f:6a:aa:7f:d5:6d:d6:43:
         f3:07:5d:73:05:e8:87:ce:ed:1a:b2:c4:e7:9c:90:56:25:b0:
         06:e1:7f:c9:a2:15:0c:f0:ed:63:6c:37:a4:a4:c6:81:e8:e8:
         1a:e5:80:c6:23:53:4a:45:2b:99:f7:86:0e:d5:23:70:6b:3c:
         1d:be:3c:26:eb:c7:4b:69:c4:7a:ae:96:31:cc:b9:a1:fe:99:
         30:98:fc:42:f7:d4:b9:81:ac:ef:dc:ee:f4:38:d7:70:57:33:
         1a:46:16:79:5f:2c:a4:68:65:fc:00:df:8a:ff:d4:a3:2d:71:
         96:41:73:3e:4b:d5:45:36:ff:73:9d:df:c2:56:7b:99:b3:a0:
         a2:20:71:a2:f9:bd:49:de:d8:eb:77:f6:f5:ee:0f:83:c2:3c:
         d4:d9:ce:89:b8:00:f7:78:11:3d:3a:72:1e:c1:10:fe:53:74:
         98:b2:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:18:18 2025 by rpki-client