Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa
File:                     3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          qsAFs6lGZrIc9kv4elZT+lYBzgexnMgVdZ/+xUimGCs=
Subject key identifier:   2B:A3:F5:32:5D:7C:13:CD:50:4B:CC:BA:97:F9:AB:74:85:E3:3E:20
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       2196108E39760CF6D968772958DAD9B0FA23843B
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:43 +0000
ROA not before:           Thu 28 Aug 2025 14:42:43 +0000
ROA not after:            Thu 27 Aug 2026 14:47:43 +0000
asID:                     262589
IP address blocks:        200.220.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:96:10:8e:39:76:0c:f6:d9:68:77:29:58:da:d9:b0:fa:23:84:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:43 2025 GMT
            Not After : Aug 27 14:47:43 2026 GMT
        Subject: CN=2BA3F5325D7C13CD504BCCBA97F9AB7485E33E20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:87:17:6d:15:a7:e8:e2:44:48:9c:37:95:f2:
                    56:b8:3f:71:2a:4e:33:29:2d:ba:de:00:81:03:83:
                    1c:67:72:fa:07:6a:e3:ce:1b:f2:c5:94:89:6c:74:
                    d7:cc:53:2f:ac:50:ec:1d:bf:c6:4d:40:e2:02:22:
                    3c:ca:56:25:9e:7e:b1:a7:03:48:5d:bb:92:9a:d7:
                    89:9e:03:23:bc:cd:c9:8c:d0:a1:5f:2c:a3:f0:7e:
                    85:20:a5:67:2e:c1:91:05:dd:28:58:ce:5e:4a:d6:
                    ca:57:3e:5f:02:37:e5:08:ca:1e:5c:2f:2f:75:f6:
                    b1:01:bd:a8:ba:62:3f:72:02:88:76:c3:e6:12:c4:
                    84:ee:0c:54:87:7c:74:3e:cf:f4:9c:da:98:61:d5:
                    ed:5d:41:43:a4:1f:8f:9a:4a:ea:e3:71:b6:b7:8f:
                    17:90:81:3f:81:63:3f:30:53:ad:57:eb:b4:fe:aa:
                    3f:0f:0a:5e:f4:75:ec:00:b9:3d:d1:18:fa:53:b2:
                    d1:a3:08:fc:c7:c9:94:49:0f:7f:c2:06:09:d2:34:
                    2a:d2:f5:dc:6c:b8:3d:17:0a:c8:53:34:7e:d3:f6:
                    29:2d:76:4f:4b:47:f3:13:26:80:ce:3a:cf:64:de:
                    70:d2:7d:40:e9:c8:90:16:c4:a3:6a:a6:f1:a0:53:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A3:F5:32:5D:7C:13:CD:50:4B:CC:BA:97:F9:AB:74:85:E3:3E:20
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230302e3232302e3139322e302f31392d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.220.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:6c:ef:b2:ed:94:34:25:51:59:24:cf:a1:38:af:1c:35:01:
         8a:b9:81:52:ef:68:6c:ec:8f:bb:6d:81:8e:77:ec:24:55:05:
         58:b4:75:3f:f3:8f:17:42:2d:fa:f8:29:7b:4e:62:95:7e:e6:
         bb:b7:0e:04:e2:e9:05:7f:d0:dd:5c:a2:1c:90:1c:21:29:1f:
         08:34:e8:73:4d:a2:5c:c5:02:d1:d0:24:b8:b3:9c:07:8e:18:
         77:ea:d6:80:1f:0f:1c:7f:91:e5:cf:f5:ef:a2:03:35:c8:88:
         62:11:de:f9:de:30:51:9f:2a:3d:8e:38:53:f4:66:4f:ad:31:
         9a:a6:0e:f6:14:2c:88:c3:b2:aa:de:36:67:e1:11:47:fb:e1:
         0b:46:60:76:19:95:63:81:2f:88:3a:cc:fe:5d:2f:d3:ff:46:
         e3:56:7e:33:ec:48:33:c1:88:64:39:f7:59:a4:77:1c:e2:89:
         a6:8f:4e:88:66:f0:1d:8b:05:23:a1:b5:a3:7a:c1:c9:71:c7:
         e7:e8:2f:5a:48:eb:f4:f9:72:23:74:23:8e:52:21:9c:d4:66:
         ee:4d:72:a0:cf:ef:0b:b2:45:ab:62:01:69:f6:e4:b9:98:be:
         29:c7:7b:a9:52:7d:df:c0:48:82:bd:70:ad:6f:84:5b:2e:fc:
         52:5a:65:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:39:50 2025 by rpki-client