Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3235203d3e20323633333734.roa
File:                     3139312e33372e3232342e302f32312d3235203d3e20323633333734.roa (raw, json)
Hash identifier:          MW+jMLEuufHi1/6mMTGA1v5xS5zh0uzlQ7x4DXe5hMk=
Subject key identifier:   9B:90:DA:0C:B9:3D:20:28:80:F3:85:6C:6E:B0:59:FB:72:92:B9:5D
Certificate issuer:       /CN=EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25
Certificate serial:       733ECF0EBDD0FE1F8A3FF1F23A6996928A372C63
Authority key identifier: EC:11:D6:56:6E:30:F6:E4:7B:0B:1C:3C:93:1A:CA:63:26:C1:EE:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3235203d3e20323633333734.roa
Signing time:             Thu 25 Sep 2025 20:49:58 +0000
ROA not before:           Thu 25 Sep 2025 20:44:58 +0000
ROA not after:            Thu 24 Sep 2026 20:49:58 +0000
asID:                     263374
IP address blocks:        191.37.224.0/21 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl
                          rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 17:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:cf:0e:bd:d0:fe:1f:8a:3f:f1:f2:3a:69:96:92:8a:37:2c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25
        Validity
            Not Before: Sep 25 20:44:58 2025 GMT
            Not After : Sep 24 20:49:58 2026 GMT
        Subject: CN=9B90DA0CB93D202880F3856C6EB059FB7292B95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f9:92:cf:62:38:ef:aa:89:e3:7f:03:ec:46:
                    ef:b1:34:84:43:31:0c:88:27:4b:a2:4a:6c:f3:4f:
                    57:69:59:e2:92:16:92:f6:a7:ee:0b:f7:e3:0e:fc:
                    0a:59:81:93:ba:c4:86:73:ec:22:9e:8e:18:47:d0:
                    bc:5f:d3:f0:e2:06:30:4d:5a:39:01:b7:5b:35:4c:
                    86:76:96:42:79:01:45:bf:51:74:62:47:09:c0:af:
                    fa:5f:30:18:43:5c:b1:b8:2d:78:87:62:8e:f0:f2:
                    5c:f3:f0:36:8f:32:be:c0:05:21:ac:6c:f5:f8:91:
                    5f:f4:9a:a7:0d:9e:b7:29:6c:b9:cc:5e:12:ad:51:
                    7c:74:ac:66:0d:0b:e6:8f:b0:66:34:22:3f:f4:58:
                    c8:5e:a2:23:c8:79:42:da:39:f9:22:82:8a:a5:19:
                    a8:86:f2:91:ba:1e:c7:91:76:25:7b:fb:f5:c6:fe:
                    89:4a:02:05:2b:a9:a3:0b:e3:7f:9b:8e:e6:69:4f:
                    aa:b8:98:d2:6e:8d:1a:96:d9:36:45:98:f2:79:2e:
                    79:7a:ab:91:89:ad:30:27:91:4d:3c:24:94:a6:99:
                    7a:4b:fa:1d:fe:bf:1f:19:01:16:eb:7c:36:f1:32:
                    d0:fd:9d:1a:7b:94:05:f6:d5:1d:ec:b0:bf:fa:87:
                    72:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:DA:0C:B9:3D:20:28:80:F3:85:6C:6E:B0:59:FB:72:92:B9:5D
            X509v3 Authority Key Identifier:
                keyid:EC:11:D6:56:6E:30:F6:E4:7B:0B:1C:3C:93:1A:CA:63:26:C1:EE:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EC11D6566E30F6E47B0B1C3C931ACA6326C1EE25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATePCB2SVHpMveRtRxP2QRkw3Wvu1sX4woG5BvzELKS/0/3139312e33372e3232342e302f32312d3235203d3e20323633333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6f:c8:70:68:89:73:3b:d8:8f:eb:74:43:7a:b3:48:91:83:16:
         21:89:76:9a:1b:03:c8:5f:4d:ab:85:4a:11:d6:4c:27:9f:9f:
         fd:a4:0a:bb:df:50:5a:aa:fc:18:6b:8d:64:40:2d:2e:90:d1:
         8c:33:70:79:2f:66:6e:00:8f:f4:ee:be:7a:94:46:cc:3a:1b:
         82:d5:a4:fd:40:20:3d:ae:bd:c3:ea:57:d6:26:b1:a5:e7:1c:
         48:19:1b:e3:ce:92:eb:79:eb:7f:e5:7c:f2:9e:6e:75:17:a5:
         13:69:a7:4a:0c:ca:0f:c6:dd:4e:ea:ab:ff:bb:9d:d9:b0:be:
         f0:5d:fb:d5:12:2a:1a:99:e7:fe:74:47:b8:c6:2c:7d:d5:09:
         9c:ac:9c:92:21:c8:02:6e:39:8d:ad:e3:d6:02:b4:88:5d:40:
         9b:06:3d:14:90:24:b1:6b:6c:09:46:b7:b1:3d:c4:9d:d1:07:
         57:64:81:01:fb:80:0e:99:a3:c8:6a:e4:bc:6f:34:62:19:0f:
         5a:06:e8:41:3c:ef:bb:a5:b4:8b:ca:f8:e6:2b:1d:df:4d:d6:
         b2:ef:94:a0:87:9f:3f:e1:79:43:fb:54:4f:b7:d3:3e:58:d5:
         68:78:ac:90:7d:7c:d1:41:dd:90:32:a1:97:52:51:b4:da:9e:
         86:6d:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:54:35 2025 by rpki-client