Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136342e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          jpWTmDcrawF5IC0sSg6Zw/NFLFUrS/5jDOd+r80uh2U=
Subject key identifier:   2B:1D:FE:91:7B:24:08:6B:C1:F1:48:0B:9E:97:89:44:05:04:1B:44
Certificate issuer:       /CN=D5971D89CD1208B4E9C29B793E9B467F9E26074E
Certificate serial:       6AC20C4BB379DEA18A514AFB893F1F4A77113441
Authority key identifier: D5:97:1D:89:CD:12:08:B4:E9:C2:9B:79:3E:9B:46:7F:9E:26:07:4E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5971D89CD1208B4E9C29B793E9B467F9E26074E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 29 Apr 2025 15:16:14 +0000
ROA not before:           Tue 29 Apr 2025 15:11:14 +0000
ROA not after:            Tue 28 Apr 2026 15:16:14 +0000
asID:                     266196
IP address blocks:        191.6.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/D5971D89CD1208B4E9C29B793E9B467F9E26074E.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/D5971D89CD1208B4E9C29B793E9B467F9E26074E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5971D89CD1208B4E9C29B793E9B467F9E26074E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 18:41:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c2:0c:4b:b3:79:de:a1:8a:51:4a:fb:89:3f:1f:4a:77:11:34:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5971D89CD1208B4E9C29B793E9B467F9E26074E
        Validity
            Not Before: Apr 29 15:11:14 2025 GMT
            Not After : Apr 28 15:16:14 2026 GMT
        Subject: CN=2B1DFE917B24086BC1F1480B9E97894405041B44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2b:96:ac:d1:ee:f6:25:28:74:e1:c3:53:1b:
                    1e:8f:0d:f2:41:1e:9d:92:21:3a:da:7e:7b:4f:92:
                    d7:14:12:cf:f8:27:f9:26:87:db:f6:c3:5d:7b:8f:
                    de:9b:b7:5c:07:e1:08:af:bb:d5:43:41:c0:ee:62:
                    c4:8e:d6:e9:4d:69:05:59:34:d0:e0:fd:2c:b6:e8:
                    a3:5c:18:3e:ef:22:2b:b2:a1:62:b9:63:c9:6d:ee:
                    47:fa:d3:68:42:7d:12:22:89:32:91:30:b0:fd:d6:
                    89:dc:da:36:b8:c4:45:1d:0e:5e:24:00:bf:90:c7:
                    e8:da:c6:02:d6:94:da:8e:29:6f:14:ee:21:f9:55:
                    60:91:0c:f2:71:01:0e:5c:d6:52:64:a7:5c:24:3e:
                    7a:5f:9b:b4:b1:eb:5d:a7:ff:5c:bf:3d:f3:83:b2:
                    11:91:10:a5:7b:d0:ce:24:90:54:df:b2:5d:19:97:
                    2a:a3:05:db:a1:ed:54:ac:1d:12:95:5b:df:8c:13:
                    6f:1e:03:6d:d7:b3:99:fd:55:48:d1:0c:fb:5c:3e:
                    32:a1:6e:ba:bd:4a:0c:f2:34:8e:45:08:19:4d:18:
                    db:8c:91:19:53:35:9d:dc:53:4c:62:80:b8:46:a1:
                    be:d0:6c:f3:66:bb:db:c5:0a:e8:f1:55:80:e0:46:
                    20:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1D:FE:91:7B:24:08:6B:C1:F1:48:0B:9E:97:89:44:05:04:1B:44
            X509v3 Authority Key Identifier:
                keyid:D5:97:1D:89:CD:12:08:B4:E9:C2:9B:79:3E:9B:46:7F:9E:26:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/D5971D89CD1208B4E9C29B793E9B467F9E26074E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5971D89CD1208B4E9C29B793E9B467F9E26074E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:5d:a7:1c:8e:8f:2e:ad:d1:e1:f1:b8:4c:e0:d4:e1:dd:6f:
         9b:b0:6c:e3:73:99:05:03:4e:08:ac:ec:0d:c7:d0:55:93:9e:
         6e:83:53:46:c7:89:e2:d3:40:6b:bc:ab:8a:3b:c2:32:a4:13:
         06:55:bc:b3:ae:12:c6:0e:ec:75:c4:67:86:a3:9a:d8:49:a0:
         75:9f:21:0c:1e:5c:98:99:e9:f6:40:f3:c4:6a:8c:aa:d7:fa:
         cd:52:16:cb:0d:71:fd:45:32:31:a1:bf:5c:88:53:a1:1e:7b:
         57:06:64:e3:1c:38:f5:d3:46:9f:6c:2a:0e:f3:e9:17:6a:38:
         46:a8:cf:21:c2:f0:78:98:bf:b6:67:8d:75:0f:b2:8a:1f:91:
         44:96:42:c1:01:2b:af:5f:f6:5c:b8:a6:56:bb:81:f8:b9:1f:
         9e:a6:6e:19:d8:22:e7:82:53:0f:a3:a8:73:30:cc:6d:b0:ee:
         25:48:16:2d:3f:ad:05:b0:20:1e:29:38:a3:a9:70:ac:5d:ee:
         6e:41:5f:cf:7a:f4:08:0c:bf:2c:05:fc:54:1d:f9:2e:e3:c6:
         8a:1c:e3:7c:62:e0:39:b3:1a:47:fa:19:0b:70:69:d9:ac:bf:
         ed:80:72:13:2c:8e:f9:e8:4a:13:e8:a1:00:88:09:d3:e3:47:
         02:b6:2b:50
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUasIMS7N53qGKUUr7iT8fSncRNEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU5NzFEODlDRDEyMDhCNEU5QzI5Qjc5M0U5QjQ2N0Y5
RTI2MDc0RTAeFw0yNTA0MjkxNTExMTRaFw0yNjA0MjgxNTE2MTRaMDMxMTAvBgNV
BAMTKDJCMURGRTkxN0IyNDA4NkJDMUYxNDgwQjlFOTc4OTQ0MDUwNDFCNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUK5as0e72JSh04cNTGx6PDfJB
Hp2SITrafntPktcUEs/4J/kmh9v2w117j96bt1wH4Qivu9VDQcDuYsSO1ulNaQVZ
NNDg/Sy26KNcGD7vIiuyoWK5Y8lt7kf602hCfRIiiTKRMLD91onc2ja4xEUdDl4k
AL+Qx+jaxgLWlNqOKW8U7iH5VWCRDPJxAQ5c1lJkp1wkPnpfm7Sx612n/1y/PfOD
shGREKV70M4kkFTfsl0ZlyqjBduh7VSsHRKVW9+ME28eA23Xs5n9VUjRDPtcPjKh
brq9SgzyNI5FCBlNGNuMkRlTNZ3cU0xigLhGob7QbPNmu9vFCujxVYDgRiBJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUKx3+kXskCGvB8UgLnpeJRAUEG0QwHwYDVR0j
BBgwFoAU1Zcdic0SCLTpwpt5PptGf54mB04wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRB
ZFEvMC9ENTk3MUQ4OUNEMTIwOEI0RTlDMjlCNzkzRTlCNDY3RjlFMjYwNzRFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q1OTcxRDg5Q0QxMjA4QjRF
OUMyOUI3OTNFOUI0NjdGOUUyNjA3NEUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIVUNEV0J1NlNwQzN1WVc4VDk5Rnc0cG9kbldkTDI2OUdzWDJVMjU0QWRRLzAv
MzEzOTMxMmUzNjJlMzEzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwakMA0GCSqGSIb3DQEBCwUAA4IBAQB5Xaccjo8u
rdHh8bhM4NTh3W+bsGzjc5kFA04IrOwNx9BVk55ug1NGx4ni00BrvKuKO8IypBMG
VbyzrhLGDux1xGeGo5rYSaB1nyEMHlyYmen2QPPEaoyq1/rNUhbLDXH9RTIxob9c
iFOhHntXBmTjHDj100afbCoO8+kXajhGqM8hwvB4mL+2Z411D7KKH5FElkLBASuv
X/ZcuKZWu4H4uR+epm4Z2CLnglMPo6hzMMxtsO4lSBYtP60FsCAeKTijqXCsXe5u
QV/PevQIDL8sBfxUHfku48aKHON8YuA5sxpH+hkLcGnZrL/tgHITLI756EoT6KEA
iAnT40cCtitQ
-----END CERTIFICATE-----
Generated at Wed May 14 00:16:15 2025 by rpki-client