Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32322d3232203d3e20323637353630.roa
File:                     3138312e3139312e3231362e302f32322d3232203d3e20323637353630.roa (raw, json)
Hash identifier:          tJnMyZkP2KPxLpj/YABZ+Ni93ne/vGIkiyBsMEHuF24=
Subject key identifier:   12:95:71:C4:21:50:C2:7B:36:2B:13:7A:04:A4:95:C3:4E:93:A7:86
Certificate issuer:       /CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
Certificate serial:       5CE714C961704D6B7A6AB5BA972F34F2C9602A42
Authority key identifier: D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32322d3232203d3e20323637353630.roa
Signing time:             Thu 26 Jun 2025 00:57:03 +0000
ROA not before:           Thu 26 Jun 2025 00:52:03 +0000
ROA not after:            Thu 25 Jun 2026 00:57:03 +0000
asID:                     267560
IP address blocks:        181.191.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 08:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e7:14:c9:61:70:4d:6b:7a:6a:b5:ba:97:2f:34:f2:c9:60:2a:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
        Validity
            Not Before: Jun 26 00:52:03 2025 GMT
            Not After : Jun 25 00:57:03 2026 GMT
        Subject: CN=129571C42150C27B362B137A04A495C34E93A786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:76:55:9f:11:79:cd:50:ff:7d:29:88:f4:
                    8d:3d:ac:50:50:ee:6e:9f:dc:ba:0d:c5:4a:d8:c0:
                    e3:b2:86:0d:4a:a6:1d:2d:2c:bd:9f:e1:18:cb:cf:
                    d8:69:44:fb:f4:9f:37:ac:b1:ed:3c:bf:f0:14:53:
                    4c:1c:89:44:ff:33:2f:80:83:0f:6f:e4:af:6a:92:
                    a4:16:6c:6f:3f:b4:7c:78:0e:b9:78:97:4b:6e:12:
                    f2:35:ab:87:21:21:b9:78:43:08:ec:9a:5a:be:7f:
                    6e:b7:17:ae:35:3b:d8:68:4d:de:8d:69:c2:f3:ef:
                    14:61:92:44:ab:bd:db:05:5e:cf:40:2f:b9:b9:7e:
                    f1:47:fe:dd:0b:7b:b4:ff:31:f4:4b:70:f8:b6:9a:
                    bc:ff:86:59:8e:0d:bf:d8:47:77:73:41:6f:7b:0e:
                    c1:78:cd:57:7c:ce:bf:2a:6d:de:ca:be:77:fa:4e:
                    15:a8:2e:74:21:61:3a:ac:f5:c2:08:3c:a8:02:22:
                    b6:cb:28:b2:12:14:80:cf:64:b9:5a:80:9e:85:23:
                    22:7e:22:80:38:56:28:28:5c:74:97:f8:20:1f:f1:
                    2a:38:e4:60:57:7e:98:bd:bf:9b:5f:6a:b2:9e:65:
                    d9:2d:fa:fa:7b:96:6d:a7:45:82:fa:00:79:b5:0f:
                    99:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:95:71:C4:21:50:C2:7B:36:2B:13:7A:04:A4:95:C3:4E:93:A7:86
            X509v3 Authority Key Identifier:
                keyid:D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32322d3232203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:d4:cf:a2:5f:71:a4:9d:f0:18:32:bb:1f:15:41:a4:4b:29:
         c7:42:46:b5:71:65:fe:d3:4c:6e:9f:58:69:29:1f:21:64:59:
         5f:b6:c5:6f:b2:5c:82:f4:6a:c8:81:93:31:26:15:73:62:70:
         6e:5f:df:3b:26:a3:dd:ef:49:29:2a:6c:2a:ed:f6:5b:4c:00:
         97:05:0e:ed:00:fe:81:58:ae:f8:58:f3:46:70:ec:3a:34:20:
         1f:d6:43:76:8b:51:14:e8:ea:92:fd:36:cf:7e:a3:fd:04:30:
         74:94:51:b4:8f:53:b6:6c:c8:5a:30:9a:8a:01:92:bd:68:99:
         59:c3:1a:8a:b3:13:e7:51:19:6e:81:42:96:76:22:6e:74:ce:
         d1:68:5a:a1:ee:07:2d:10:0d:65:83:b8:14:f2:39:1f:49:15:
         62:47:a9:10:b0:f7:e5:46:d9:d5:21:4f:57:03:5a:06:52:c1:
         51:c9:78:b7:01:61:63:87:7c:58:71:27:6f:a2:58:22:3e:8a:
         24:be:34:f9:46:98:2a:d6:c9:db:8a:2d:f4:ed:55:6c:8e:46:
         63:fb:d4:82:d3:e8:11:07:11:29:cf:9d:46:09:97:84:14:65:
         c2:b5:3c:c4:0f:43:7a:5d:1d:d5:b6:db:89:55:21:3e:e4:df:
         df:a8:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:50:29 2025 by rpki-client