Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e33332e3137362e302f32302d3332203d3e203232333831.roa
File:                     3230312e33332e3137362e302f32302d3332203d3e203232333831.roa (raw, json)
Hash identifier:          d0yot0ZWLEb7T3yOFDWlNjlMUn1lXS6l1q06iXIt+Lk=
Subject key identifier:   83:36:9A:99:73:1E:72:CF:DA:02:1F:B3:1D:2D:DD:87:1C:64:71:E8
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       399DE693C22CFBBC9B844E0C495E77D590759EA2
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e33332e3137362e302f32302d3332203d3e203232333831.roa
Signing time:             Thu 28 Aug 2025 14:47:34 +0000
ROA not before:           Thu 28 Aug 2025 14:42:34 +0000
ROA not after:            Thu 27 Aug 2026 14:47:34 +0000
asID:                     22381
IP address blocks:        201.33.176.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9d:e6:93:c2:2c:fb:bc:9b:84:4e:0c:49:5e:77:d5:90:75:9e:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:34 2025 GMT
            Not After : Aug 27 14:47:34 2026 GMT
        Subject: CN=83369A99731E72CFDA021FB31D2DDD871C6471E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:e3:4e:ac:aa:8b:07:f1:73:f1:fd:05:eb:
                    34:b1:34:9e:33:2b:8f:b6:37:a4:a8:d8:94:73:8c:
                    3a:59:ea:56:a1:c6:b5:b7:a7:ed:98:1c:99:26:65:
                    fc:07:41:42:cc:cf:66:ac:b5:17:d0:03:11:1a:c3:
                    8d:0e:81:ea:1f:f6:1e:f6:38:d6:ea:06:b7:aa:6a:
                    0d:45:93:07:6d:4e:3b:97:0a:7d:48:96:ce:e5:e6:
                    04:fc:7d:69:ab:eb:1a:99:f0:80:8f:c1:67:2e:94:
                    76:26:c0:7d:2a:ba:e2:47:fc:ba:f6:7a:c6:01:51:
                    88:e3:90:34:e2:c6:95:85:16:54:00:f3:63:9e:2d:
                    1c:5b:17:f7:10:b3:ee:11:56:ca:43:b1:2a:10:c1:
                    1b:4f:bf:ba:a6:80:69:39:44:93:74:fb:6d:35:64:
                    47:8c:58:19:3f:2f:f7:83:c4:27:a0:72:c1:b7:19:
                    33:24:ba:50:a2:3c:08:a7:b8:47:8f:e4:65:73:8f:
                    fb:97:41:01:29:e7:26:63:15:26:89:c8:72:f4:c7:
                    8b:f1:b0:0f:44:58:3d:7e:c3:2c:da:6f:db:b7:e8:
                    f6:b8:d2:40:0b:54:ac:04:ba:77:fb:17:a0:ed:b1:
                    ac:6e:0c:a8:b3:fd:b0:41:0c:f6:6e:86:a0:22:76:
                    30:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:36:9A:99:73:1E:72:CF:DA:02:1F:B3:1D:2D:DD:87:1C:64:71:E8
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e33332e3137362e302f32302d3332203d3e203232333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:55:7e:52:41:bc:97:e1:40:78:f4:7c:ab:7b:11:40:77:72:
         99:4f:d6:b5:f2:66:f7:55:43:9b:f8:62:67:18:d0:a2:bc:ed:
         d2:e6:f8:51:93:32:26:75:d9:f4:16:43:37:85:0f:b0:3c:26:
         8e:c3:69:47:3d:cb:93:66:3f:45:8f:c4:c5:28:a7:cf:01:50:
         8c:0c:25:a6:28:ff:d4:c7:42:12:75:4a:27:1d:53:f3:b3:b7:
         25:8e:7f:cc:8b:d0:48:87:b7:a9:db:91:c3:e8:b4:90:06:03:
         9e:1f:e8:d0:32:73:88:9b:b9:a4:4a:32:98:05:1f:67:23:3d:
         33:c1:4e:58:0b:cc:39:eb:ee:fa:e7:a1:d7:a1:4c:da:7c:85:
         be:86:37:ab:36:ab:a8:60:6d:31:6c:68:99:e5:0c:cf:68:8b:
         44:f9:1b:5e:07:ed:7d:6c:99:16:60:a6:81:19:72:92:01:62:
         47:af:ee:fe:9a:96:d6:08:bb:98:93:b1:cf:68:ba:10:44:82:
         23:9e:cf:1d:ac:75:23:ec:76:75:35:2c:ea:13:8b:b1:f0:34:
         34:2d:36:c7:ac:e5:04:bb:dd:26:11:e7:85:f6:99:58:da:93:
         70:2f:f3:37:15:ce:61:8f:30:7a:aa:b9:3d:47:53:8b:0f:41:
         b0:8c:cb:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 16:11:00 2025 by rpki-client