Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa
File:                     3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa (raw, json)
Hash identifier:          gEg/dE8F+AG5Xk/IkkB7z1HgesxNkA6Bway1tXAEOd8=
Subject key identifier:   56:BC:58:10:F6:16:AE:79:D7:77:4B:7A:87:BE:48:36:01:2F:F4:E2
Certificate issuer:       /CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
Certificate serial:       13EAA34D8537E4A6222EF2C6E73873D270E9003A
Authority key identifier: B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa
Signing time:             Thu 28 Aug 2025 14:47:40 +0000
ROA not before:           Thu 28 Aug 2025 14:42:40 +0000
ROA not after:            Thu 27 Aug 2026 14:47:40 +0000
asID:                     262589
IP address blocks:        201.87.208.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl
                          rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Sep 2025 23:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ea:a3:4d:85:37:e4:a6:22:2e:f2:c6:e7:38:73:d2:70:e9:00:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3CF569D82F323353BF019FCC8DA23146D666EF5
        Validity
            Not Before: Aug 28 14:42:40 2025 GMT
            Not After : Aug 27 14:47:40 2026 GMT
        Subject: CN=56BC5810F616AE79D7774B7A87BE4836012FF4E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:78:e6:17:84:47:8e:d7:2c:88:d2:c9:9a:b8:
                    d4:58:19:f3:72:0c:c0:d0:f5:f4:e0:75:02:c6:ce:
                    38:73:59:7f:f8:18:db:60:ba:7c:ea:3c:ad:9a:1e:
                    e8:70:f7:c2:27:d6:cb:20:d7:a5:ab:b9:15:78:3c:
                    b3:ae:a3:8a:66:f1:5c:36:6b:b0:9f:07:b5:85:91:
                    cf:e8:8b:71:55:58:72:8a:ff:a0:27:1a:b2:f9:3b:
                    91:3c:ad:6e:ac:1d:b5:2d:b0:97:f1:8a:d4:83:18:
                    a5:e8:6e:dd:4a:4b:ed:1f:15:ba:21:bb:0f:bc:db:
                    40:45:2e:6d:da:d1:08:97:f6:15:d6:b8:17:ae:39:
                    e5:7a:2f:5b:5c:2e:d9:2b:03:59:23:62:f1:69:93:
                    9e:63:1d:a9:2a:d8:bf:00:b9:2d:97:f5:47:9b:b0:
                    54:e3:0a:13:8f:35:5a:f8:c5:39:13:5e:92:b2:c0:
                    7e:8c:96:89:36:56:86:9d:f2:21:f8:ad:76:75:0d:
                    77:f9:bc:9c:d5:24:66:d8:d8:2a:2f:32:33:52:8e:
                    fd:56:60:a3:f5:e1:38:0b:5c:97:c8:81:b6:f4:4a:
                    1a:06:e1:3a:40:4d:fb:0a:3d:95:2c:73:2d:a3:47:
                    3a:ab:54:e7:95:fa:fc:aa:89:5f:51:c5:32:58:4a:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BC:58:10:F6:16:AE:79:D7:77:4B:7A:87:BE:48:36:01:2F:F4:E2
            X509v3 Authority Key Identifier:
                keyid:B3:CF:56:9D:82:F3:23:35:3B:F0:19:FC:C8:DA:23:14:6D:66:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/B3CF569D82F323353BF019FCC8DA23146D666EF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3CF569D82F323353BF019FCC8DA23146D666EF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E2NusR2ijw6G3YNiMEF333MRkoDTDbWggx7YKfVrfUmw/2/3230312e38372e3230382e302f32302d3332203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.87.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cf:18:70:08:c0:ac:f5:5c:03:b8:0b:78:35:30:dd:d8:ef:08:
         8a:2a:b5:28:a4:d0:d5:75:e1:18:a6:a2:04:33:d6:6a:6a:5c:
         80:68:98:8d:73:d4:c2:bc:4c:00:f5:3b:db:ae:fe:14:22:54:
         8a:c9:cf:50:59:14:1b:c6:d1:fe:5a:a4:29:5a:64:ad:7f:cb:
         ee:e4:21:ba:e4:18:ba:6a:1d:87:5d:59:be:ee:34:61:23:7a:
         4d:36:24:df:c3:12:fb:b7:5d:83:f7:43:ac:99:e5:2d:f2:20:
         42:7c:70:77:f6:60:97:e4:15:fb:a4:77:e3:dc:e3:bd:b3:f7:
         27:69:0a:eb:1b:ed:40:4e:70:39:05:bd:98:04:64:b4:d2:51:
         b8:ee:2c:ea:2a:86:92:9e:49:e9:4b:dd:a4:8b:ea:e1:f0:f9:
         06:a4:c7:eb:47:4c:a7:57:e2:e6:4c:1c:4c:cc:aa:00:f4:27:
         62:45:ad:2c:94:c2:ee:43:0c:03:53:cd:9b:2b:d6:00:cc:84:
         94:94:62:27:cd:36:6a:c2:18:4f:dc:f7:a8:21:8b:2d:21:41:
         f7:2a:7f:da:55:2a:f3:a3:64:a6:10:9b:85:92:49:5a:e2:6f:
         12:7b:84:c2:35:b5:a2:11:45:11:ca:6b:7e:d6:5d:04:57:7c:
         51:53:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 12:41:35 2025 by rpki-client