Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3138312e3139312e3139322e302f32322d3332203d3e20323637303033.roa
File:                     3138312e3139312e3139322e302f32322d3332203d3e20323637303033.roa (raw, json)
Hash identifier:          HqWe8buUMSqbp3alWOkDGtGwT+ExAYh8P2CIBWIytIM=
Subject key identifier:   11:B7:66:3D:D7:24:C6:DF:77:63:A5:10:A2:77:42:65:D3:2A:3B:70
Certificate issuer:       /CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
Certificate serial:       57B0C8A0E236567735B34DF2791293E080BD3562
Authority key identifier: E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3138312e3139312e3139322e302f32322d3332203d3e20323637303033.roa
Signing time:             Fri 03 Oct 2025 18:19:28 +0000
ROA not before:           Fri 03 Oct 2025 18:14:28 +0000
ROA not after:            Fri 02 Oct 2026 18:19:28 +0000
asID:                     267003
IP address blocks:        181.191.192.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl
                          rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 Oct 2025 00:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b0:c8:a0:e2:36:56:77:35:b3:4d:f2:79:12:93:e0:80:bd:35:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B
        Validity
            Not Before: Oct  3 18:14:28 2025 GMT
            Not After : Oct  2 18:19:28 2026 GMT
        Subject: CN=11B7663DD724C6DF7763A510A2774265D32A3B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:cb:b3:a3:0f:ee:5f:13:d2:f8:7f:d7:cb:
                    1a:36:da:9b:ed:68:d7:a4:d5:ca:19:81:4b:5f:3e:
                    0b:6d:4f:cf:82:5f:e3:c2:8c:92:6e:ae:6b:14:33:
                    db:59:05:bb:e2:12:0f:ee:f0:5f:13:ba:ea:45:1d:
                    6d:30:32:7c:de:58:26:5b:3c:57:ed:3e:d5:0d:ff:
                    c4:c0:fe:26:13:a1:5f:7a:60:c0:ae:cd:c8:10:0c:
                    62:bf:03:a1:c7:76:08:9f:b1:a1:88:7a:a3:bd:2d:
                    b4:90:a1:19:0d:fb:5a:3f:24:01:45:13:db:aa:c3:
                    15:28:23:f7:06:76:3a:3f:c1:6b:76:88:d9:58:56:
                    3b:24:54:41:7d:a5:93:ca:7d:e6:67:61:05:12:fe:
                    cd:7f:4a:04:dd:5a:79:d5:6e:11:04:27:c7:b3:00:
                    10:df:4a:20:2f:a2:ff:3a:d2:cf:5b:42:87:6c:b6:
                    7b:4f:ee:52:95:de:bb:0b:c8:b1:96:79:86:8e:78:
                    e8:e3:ab:82:42:9d:65:ef:47:78:71:33:84:28:56:
                    cd:35:78:d5:60:f5:9c:8b:ec:b4:97:ba:d8:14:d1:
                    e6:4c:71:98:89:58:88:4b:50:53:48:49:64:c1:5c:
                    cf:77:97:5d:31:95:e1:92:b2:21:4c:a3:1e:bf:31:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:B7:66:3D:D7:24:C6:DF:77:63:A5:10:A2:77:42:65:D3:2A:3B:70
            X509v3 Authority Key Identifier:
                keyid:E9:AE:A4:04:AF:DA:C7:D5:A9:A1:75:5F:3A:27:FF:5C:AE:12:DA:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9AEA404AFDAC7D5A9A1755F3A27FF5CAE12DA7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CSBtEWm2kEbEsEiyZXfTF2bc14iTzCzmM8STih1jJvTv/0/3138312e3139312e3139322e302f32322d3332203d3e20323637303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:92:55:4c:4d:61:4f:f7:44:ee:10:47:e6:9f:2e:2e:d6:
         01:23:f0:4e:2e:45:cd:52:21:be:d6:d4:5b:b0:a3:27:63:1d:
         da:88:6b:03:2b:19:05:24:68:03:76:8a:6b:94:11:b1:88:40:
         27:05:c6:66:27:7d:91:f7:0e:d8:90:dc:23:0c:ce:29:d9:46:
         60:8e:63:21:5d:52:3e:64:c3:67:7d:92:1b:83:e0:ef:10:37:
         e4:3a:03:d0:bd:35:5b:72:3e:7d:f7:7e:9a:0a:aa:64:00:82:
         af:3b:79:08:72:bc:48:de:a0:5f:b2:7c:30:16:80:f4:aa:89:
         8c:31:e9:cf:92:f6:c0:f4:ed:67:b1:6d:42:2d:6b:a4:35:d7:
         2b:e2:c8:cb:91:e1:ed:73:c0:f0:c6:5d:38:83:b0:19:69:36:
         33:3c:87:31:14:4f:72:ed:45:2c:05:80:43:a3:db:99:85:e7:
         19:23:ca:48:df:bd:7b:f9:01:a7:05:8d:17:67:66:8a:4c:27:
         d3:32:4d:6e:23:8d:8a:be:e6:72:1c:97:63:46:2c:fa:61:c1:
         34:40:5f:6d:f9:c8:c2:18:52:01:14:40:5a:6f:b3:31:be:63:
         e2:08:3d:da:74:0f:a8:3c:03:0b:c2:ea:d2:67:b8:49:a5:bf:
         9d:8e:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:28:53 2025 by rpki-client