Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa
File:                     3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa (raw, json)
Hash identifier:          1dMgxj1z2sID4hW6ilylIC0/tR1LfRuFpELVtpiDT2U=
Subject key identifier:   53:02:EC:BA:D3:ED:F7:18:E2:E9:7F:41:83:D9:CB:F9:C7:28:48:2F
Certificate issuer:       /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial:       2C77296012B9E5B62846CCBBED96FC0EB9F8C48E
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa
Signing time:             Wed 02 Jul 2025 12:18:06 +0000
ROA not before:           Wed 02 Jul 2025 12:13:06 +0000
ROA not after:            Wed 01 Jul 2026 12:18:06 +0000
asID:                     61721
IP address blocks:        192.111.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 07:02:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:77:29:60:12:b9:e5:b6:28:46:cc:bb:ed:96:fc:0e:b9:f8:c4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
        Validity
            Not Before: Jul  2 12:13:06 2025 GMT
            Not After : Jul  1 12:18:06 2026 GMT
        Subject: CN=5302ECBAD3EDF718E2E97F4183D9CBF9C728482F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:9b:4e:bf:4e:e5:12:71:4f:d8:1e:a6:ae:
                    f0:94:58:2d:bf:1c:61:50:a6:4f:31:da:c1:bf:6a:
                    df:ee:ef:48:c8:ff:09:20:2f:2c:c2:fb:6d:74:8b:
                    96:65:f2:d5:fa:ee:c0:34:e8:b6:b5:96:a6:44:de:
                    a4:4d:05:99:3a:c3:45:4f:42:c7:af:1c:94:cb:2e:
                    31:77:4b:6a:dc:5a:55:bf:59:46:4a:e2:ad:c6:8a:
                    da:a8:e8:1c:ad:13:47:21:6d:a7:c6:aa:d4:8e:c6:
                    4d:96:0a:37:a2:37:88:d9:21:6c:6a:28:85:68:1f:
                    00:81:89:a3:50:bc:8b:87:45:f1:2c:9a:04:2e:86:
                    5e:7a:e5:03:59:bd:54:ca:8b:60:72:e4:e1:9d:68:
                    e9:80:c0:37:9c:b4:5b:1d:0a:2e:54:a2:8c:53:26:
                    c9:91:1a:d7:21:eb:f3:18:0c:37:9c:a7:13:35:97:
                    a2:69:ab:87:c8:42:fc:a1:54:a4:45:85:be:c8:e0:
                    de:82:e4:b3:ce:76:b7:93:ff:97:5c:71:b5:a2:a4:
                    62:14:3c:15:a6:28:4f:f9:e6:ec:08:c7:0f:32:c7:
                    ef:02:37:ae:6f:46:e1:2c:a8:06:fa:07:55:af:39:
                    96:27:77:74:6c:dc:b9:0a:b0:64:64:ec:fd:68:93:
                    4b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:02:EC:BA:D3:ED:F7:18:E2:E9:7F:41:83:D9:CB:F9:C7:28:48:2F
            X509v3 Authority Key Identifier:
                keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/3139322e3131312e3233302e302f32342d3234203d3e203631373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:8e:d7:29:94:99:5e:cf:25:06:9b:32:fa:21:d2:8a:6d:a8:
         74:84:02:12:56:17:e7:3e:26:80:b2:44:42:73:1c:76:92:9c:
         a1:b7:4e:c4:d6:fc:26:54:9c:db:5d:a4:a7:ef:e4:e4:35:91:
         0f:1a:0e:f4:04:48:ce:b1:75:a7:14:da:82:fb:9f:bb:60:c7:
         c0:e2:43:f3:ce:2b:ec:ff:e4:97:8b:fa:b9:7b:da:07:35:07:
         08:60:84:f5:95:05:fc:ff:b6:cb:46:a0:ee:51:38:69:3c:bd:
         42:29:10:99:c4:e2:2f:9d:eb:cf:63:b8:9d:6e:84:d0:8b:dc:
         81:32:88:91:8b:6d:4d:dc:8c:47:41:43:05:a7:f7:94:ad:f2:
         eb:a7:e4:93:aa:b4:5f:f2:55:dc:bf:b0:38:3a:62:03:6c:d7:
         ad:63:ef:cb:df:97:a0:76:64:65:c6:a7:b1:2d:76:bb:c3:46:
         21:dd:04:40:5d:84:d2:b1:6a:11:1f:93:dc:c3:e8:f8:59:0b:
         8e:ba:e7:3c:a1:e6:02:4e:00:9a:de:87:da:87:48:8b:4f:26:
         8c:07:05:af:4c:d0:d0:dc:3d:5c:95:b5:c2:d8:34:9a:e9:3c:
         87:e9:8c:5f:5f:9f:b8:dd:3d:30:da:f0:91:f4:f0:5c:a9:f6:
         ef:76:c6:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 17:31:36 2025 by rpki-client