Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e32332e3139322e302f31392d3332203d3e20323632353839.roa
File:                     3230312e32332e3139322e302f31392d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          rH/Rv1Sj+9j6mApe+mRBAATYvdqkGajpfPdubX2Scp0=
Subject key identifier:   75:52:24:6F:48:C7:9D:67:2F:CB:A5:A7:13:56:E5:5B:A5:D8:A7:1D
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       4014B26E0BBC411DDA8D19ED22E13021DACB6D
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e32332e3139322e302f31392d3332203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:37 +0000
ROA not before:           Thu 28 Aug 2025 14:42:37 +0000
ROA not after:            Thu 27 Aug 2026 14:47:37 +0000
asID:                     262589
IP address blocks:        201.23.192.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:14:b2:6e:0b:bc:41:1d:da:8d:19:ed:22:e1:30:21:da:cb:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:37 2025 GMT
            Not After : Aug 27 14:47:37 2026 GMT
        Subject: CN=7552246F48C79D672FCBA5A71356E55BA5D8A71D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4b:cd:12:34:c7:20:ed:3c:bf:1d:75:7e:2b:
                    f3:cf:c0:01:ac:b9:ec:21:af:00:7a:65:44:d4:38:
                    19:39:06:21:3c:ca:9b:bc:85:f4:11:f2:46:df:a0:
                    67:db:c1:7b:63:2a:eb:25:ad:ab:61:b2:8e:99:30:
                    68:66:6a:56:8c:e9:58:85:fe:7c:44:21:e9:29:d4:
                    7f:84:95:fd:32:ac:64:36:bb:dd:12:4e:d9:8a:b7:
                    02:43:3f:6c:70:27:7f:71:6b:07:10:1d:0a:11:5c:
                    d0:f1:f4:2f:a3:c7:dc:d0:67:4e:58:5b:f8:e6:35:
                    30:24:14:23:fe:cb:0c:bb:4e:c6:51:19:57:c9:90:
                    ee:dd:99:4d:b6:49:7f:4d:2b:bf:08:e1:8c:e2:a9:
                    9a:20:e0:53:dd:23:e9:f9:82:09:dc:52:30:8c:89:
                    9b:e5:e1:03:46:60:26:c8:ec:3e:bb:61:b4:1f:6e:
                    f7:5a:12:3b:fc:50:db:35:86:fe:f1:ea:0b:67:15:
                    38:a0:65:21:93:9d:45:05:15:45:da:17:58:75:8d:
                    26:43:68:34:fc:a6:17:7c:63:6d:e5:75:d6:78:aa:
                    fb:95:07:9b:cd:0e:bc:62:22:36:91:76:58:61:3f:
                    c5:d6:65:e4:ea:84:3a:03:a9:9f:ee:f7:21:29:18:
                    9a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:52:24:6F:48:C7:9D:67:2F:CB:A5:A7:13:56:E5:5B:A5:D8:A7:1D
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e32332e3139322e302f31392d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         92:f3:aa:15:bf:04:42:9f:18:a7:0b:8d:fe:f3:db:c6:92:34:
         14:b6:c6:f6:6a:f2:22:0e:4f:bf:94:42:01:05:a0:a4:67:34:
         1b:13:20:bd:2c:14:69:cd:56:55:b5:72:5e:56:c0:e2:b4:e0:
         58:a0:c3:7c:f3:5f:0b:01:c0:9a:d9:26:8b:05:54:89:53:01:
         f5:6c:de:97:a8:fa:e9:0a:5b:7a:16:44:aa:2c:b7:6b:36:48:
         06:8b:e8:9b:00:42:15:21:20:56:e1:da:0f:21:56:87:f5:cf:
         10:b1:bc:4e:4d:9c:cf:4e:8c:6d:bd:b8:b3:60:30:29:8f:87:
         5d:e3:e5:c6:5a:fc:43:68:c2:aa:2c:fe:c9:31:8c:a4:64:65:
         cb:5b:cd:ec:91:5d:66:48:9c:f2:a3:6b:2a:8e:57:31:e0:ce:
         73:fa:ad:fe:fc:f6:e2:9e:0d:b3:2a:42:24:73:2c:87:93:db:
         30:4f:b6:53:68:e1:4b:94:cc:36:3a:1a:ff:9e:f9:fb:07:41:
         1e:53:6b:db:8a:cd:2b:10:35:9a:c3:ae:ed:c7:13:51:ac:93:
         f6:fb:9b:ca:ee:5e:91:53:78:65:7d:f5:66:2e:5f:95:cb:ce:
         b5:dc:2f:e0:68:c0:d2:ea:43:ac:18:c5:d3:81:eb:2e:54:88:
         22:0c:e9:94
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgITQBSybgu8QR3ajRntIuEwIdrLbTANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyhCM0NGNTY5RDgyRjMyMzM1M0JGMDE5RkNDOERBMjMxNDZE
NjY2RUY1MB4XDTI1MDgyODE0NDIzN1oXDTI2MDgyNzE0NDczN1owMzExMC8GA1UE
AxMoNzU1MjI0NkY0OEM3OUQ2NzJGQ0JBNUE3MTM1NkU1NUJBNUQ4QTcxRDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK1LzRI0xyDtPL8ddX4r88/AAay5
7CGvAHplRNQ4GTkGITzKm7yF9BHyRt+gZ9vBe2Mq6yWtq2GyjpkwaGZqVozpWIX+
fEQh6SnUf4SV/TKsZDa73RJO2Yq3AkM/bHAnf3FrBxAdChFc0PH0L6PH3NBnTlhb
+OY1MCQUI/7LDLtOxlEZV8mQ7t2ZTbZJf00rvwjhjOKpmiDgU90j6fmCCdxSMIyJ
m+XhA0ZgJsjsPrthtB9u91oSO/xQ2zWG/vHqC2cVOKBlIZOdRQUVRdoXWHWNJkNo
NPymF3xjbeV11niq+5UHm80OvGIiNpF2WGE/xdZl5OqEOgOpn+73ISkYmj0CAwEA
AaOCAlEwggJNMB0GA1UdDgQWBBR1UiRvSMedZy/LpacTVuVbpdinHTAfBgNVHSME
GDAWgBSzz1adgvMjNTvwGfzI2iMUbWZu9TAOBgNVHQ8BAf8EBAMCB4AwgZQGA1Ud
HwSBjDCBiTCBhqCBg6CBgIZ+cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FMk51c1IyaWp3NkczWU5pTUVGMzMzTVJrb0RURGJXZ2d4N1lLZlZyZlVt
dy8yL0IzQ0Y1NjlEODJGMzIzMzUzQkYwMTlGQ0M4REEyMzE0NkQ2NjZFRjUuY3Js
MHgGCCsGAQUFBwEBBGwwajBoBggrBgEFBQcwAoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvQjNDRjU2OUQ4MkYzMjMzNTNC
RjAxOUZDQzhEQTIzMTQ2RDY2NkVGNS5jZXIwga4GCCsGAQUFBwELBIGhMIGeMIGb
BggrBgEFBQcwC4aBjnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8v
RTJOdXNSMmlqdzZHM1lOaU1FRjMzM01Sa29EVERiV2dneDdZS2ZWcmZVbXcvMi8z
MjMwMzEyZTMyMzMyZTMxMzkzMjJlMzAyZjMxMzkyZDMzMzIyMDNkM2UyMDMyMzYz
MjM1MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEBckXwDANBgkqhkiG9w0BAQsFAAOCAQEAkvOqFb8E
Qp8YpwuN/vPbxpI0FLbG9mryIg5Pv5RCAQWgpGc0GxMgvSwUac1WVbVyXlbA4rTg
WKDDfPNfCwHAmtkmiwVUiVMB9Wzel6j66QpbehZEqiy3azZIBovomwBCFSEgVuHa
DyFWh/XPELG8Tk2cz06Mbb24s2AwKY+HXePlxlr8Q2jCqiz+yTGMpGRly1vN7JFd
Zkic8qNrKo5XMeDOc/qt/vz24p4NsypCJHMsh5PbME+2U2jhS5TMNjoa/575+wdB
HlNr24rNKxA1msOu7ccTUayT9vubyu5ekVN4ZX31Zi5flcvOtdwv4GjA0upDrBjF
04HrLlSIIgzplA==
-----END CERTIFICATE-----
Generated at Mon Sep 15 12:38:57 2025 by rpki-client