Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e32332e3139322e302f31392d3332203d3e203232333831.roa
File:                     3230312e32332e3139322e302f31392d3332203d3e203232333831.roa (raw, json)
Hash identifier:          fR5q80zt67dYXsnr8iNCjx654hSsYeel58MmCyUCrDw=
Subject key identifier:   CF:21:59:87:55:A2:32:14:A4:B9:A0:76:C7:39:0A:99:D0:62:2E:FE
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       7EBC7E6F6CEF81499891F8A3303DBC21EA716BC1
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e32332e3139322e302f31392d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:40 +0000
ROA not before:           Thu 28 Aug 2025 14:42:40 +0000
ROA not after:            Thu 27 Aug 2026 14:47:40 +0000
asID:                     22381
IP address blocks:        201.23.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:bc:7e:6f:6c:ef:81:49:98:91:f8:a3:30:3d:bc:21:ea:71:6b:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:40 2025 GMT
            Not After : Aug 27 14:47:40 2026 GMT
        Subject: CN=CF21598755A23214A4B9A076C7390A99D0622EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:f5:ae:49:ca:89:58:b3:79:c2:29:30:55:
                    e2:11:f0:0d:38:e8:28:81:74:9a:a7:6f:bb:61:2a:
                    c5:0d:dd:5e:42:04:80:51:70:91:2b:ba:1f:c7:72:
                    e7:89:d3:78:31:df:70:89:8d:9f:0c:9b:3b:17:c4:
                    5a:fe:83:8b:0b:e1:e0:d6:cd:df:20:47:4a:e0:01:
                    ea:79:0d:db:b3:b7:99:3a:b4:8c:d2:a0:ac:97:ef:
                    91:d0:9e:28:45:47:89:52:28:72:b0:70:51:11:4b:
                    dc:57:6e:60:d5:4a:54:1a:0b:d0:4f:18:f3:b8:60:
                    32:c3:0b:af:b5:3b:55:9d:5c:c8:66:66:48:7e:24:
                    05:bb:25:94:c0:58:70:21:0a:f6:74:f5:a3:b3:fd:
                    44:cb:1d:cf:32:ee:e7:4b:97:16:e9:73:8c:39:71:
                    48:49:d7:fe:4a:77:49:62:0a:fc:74:1d:fe:66:ad:
                    41:cb:33:c6:54:42:21:d6:92:3f:65:45:f5:ac:72:
                    ab:e9:a4:3b:1c:87:4e:9b:b1:cd:18:3e:d2:9d:d0:
                    5f:d0:2f:1d:ec:80:76:3f:75:2c:33:37:56:2d:a6:
                    d6:69:02:0c:8b:18:0e:b2:83:f0:2a:a9:e1:3f:42:
                    72:a6:86:bc:a8:f8:83:59:79:f7:30:15:b7:e3:5e:
                    4c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:21:59:87:55:A2:32:14:A4:B9:A0:76:C7:39:0A:99:D0:62:2E:FE
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e32332e3139322e302f31392d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         dd:c5:3c:97:60:4c:de:30:ad:1d:43:cf:a0:f1:fd:4f:1b:49:
         2e:f7:73:83:05:b2:ba:e7:55:fb:0a:12:3e:7f:ad:a4:fa:b7:
         fd:f6:e7:61:d4:6c:d4:c2:a7:08:24:24:57:22:67:c7:2c:8d:
         e6:fd:67:a5:e5:8c:12:34:5f:b9:a8:48:b5:41:29:86:f9:96:
         69:ef:44:66:c2:86:71:21:b3:6c:1c:f0:bf:d6:53:aa:d3:05:
         7a:c1:b5:4a:b2:64:f9:f0:00:a3:3e:ad:0f:52:0c:0e:10:20:
         4a:fb:93:d3:8a:f1:34:cb:30:15:e5:96:5e:e9:82:37:03:ef:
         ef:cc:7f:31:fb:26:6f:61:b4:c9:68:7b:d1:0d:a5:e8:47:2e:
         a8:53:20:6d:b3:ce:d6:c2:79:a1:26:a9:50:31:d8:9c:0c:65:
         3b:fe:d6:0e:7e:00:16:dd:5d:99:78:72:96:7e:c5:fb:86:39:
         d4:89:46:c7:49:a3:84:62:ee:02:9b:01:fc:d9:54:dd:d0:14:
         f9:a6:31:b3:3d:5c:6c:3c:27:54:12:70:b3:0f:db:9f:6a:6d:
         f6:2a:f7:5c:93:36:4d:86:3a:ad:98:00:36:48:9a:a3:ec:dc:
         a6:80:e5:eb:b4:e4:4f:da:78:49:08:73:92:e9:d1:49:b8:8a:
         0b:40:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:09:49 2025 by rpki-client