Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          CrIg5LVhW3zX5E3+ljUrqNV0zLKkEHXXNWrk2OWt39g=
Subject key identifier:   EA:CE:31:4C:3C:41:EC:A9:C0:72:25:4D:01:34:10:2F:FB:48:07:80
Certificate issuer:       /CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
Certificate serial:       67B953F207E3CA77B55EED0697146094E4A4DC83
Authority key identifier: D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa
Signing time:             Thu 26 Jun 2025 00:57:02 +0000
ROA not before:           Thu 26 Jun 2025 00:52:02 +0000
ROA not after:            Thu 25 Jun 2026 00:57:02 +0000
asID:                     267560
IP address blocks:        181.191.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 08:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b9:53:f2:07:e3:ca:77:b5:5e:ed:06:97:14:60:94:e4:a4:dc:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
        Validity
            Not Before: Jun 26 00:52:02 2025 GMT
            Not After : Jun 25 00:57:02 2026 GMT
        Subject: CN=EACE314C3C41ECA9C072254D0134102FFB480780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:8c:7b:ad:60:a9:52:e6:b0:1b:4c:45:b0:
                    e5:49:ce:9b:fd:6b:68:0f:c4:60:2b:70:a3:55:36:
                    32:e8:c4:9b:f6:9d:80:cd:5d:a9:ad:6b:e3:9f:78:
                    c1:d4:c7:84:a8:7e:88:b8:a8:3d:6c:81:86:5a:ab:
                    f1:c3:10:6b:02:c2:18:d7:23:e0:0a:f5:a5:a4:f5:
                    a1:4b:41:7d:4e:61:b5:1d:74:56:74:cb:dd:8c:18:
                    23:14:61:34:98:ac:8d:e9:78:65:8b:35:7c:19:9e:
                    d0:d1:b4:6a:29:88:ae:04:58:06:f5:4e:42:45:b3:
                    f8:65:da:6f:50:a1:02:99:d5:b6:62:a0:09:f5:60:
                    7c:5d:ab:39:59:e7:2d:57:86:18:c1:b4:4c:ab:f0:
                    1f:5e:96:2d:e4:20:f0:59:f8:e7:b2:94:42:3a:6d:
                    04:16:c0:c8:18:24:29:e9:cc:52:57:13:0a:9f:e1:
                    aa:db:c1:65:c7:d8:5d:a5:5d:7a:3a:e1:d3:8b:6e:
                    e7:44:8d:bc:8a:78:1e:26:da:18:b0:7e:90:db:a4:
                    40:fd:7a:79:f8:30:05:d7:7b:f7:f7:6c:4a:6b:27:
                    11:a3:7e:ab:cd:a5:a2:2a:f7:0f:39:0c:20:64:31:
                    7a:a1:c1:7d:2a:2f:67:6f:fd:7e:ab:b7:8f:eb:0c:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:31:4C:3C:41:EC:A9:C0:72:25:4D:01:34:10:2F:FB:48:07:80
            X509v3 Authority Key Identifier:
                keyid:D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c8:51:60:72:92:78:88:b7:e3:9b:0e:08:21:35:0c:35:b9:
         fa:d6:82:64:2b:f1:30:26:a1:75:97:73:63:1c:bc:74:10:06:
         85:cc:a3:78:9a:5e:36:96:88:7c:b5:2e:c7:4d:f3:e9:19:ad:
         76:7d:0e:f8:3b:3a:9e:32:0b:49:4d:d7:3c:1f:c7:2c:74:7e:
         d8:67:b9:01:65:a9:ec:f6:4c:3a:66:59:56:8e:a7:1f:a2:87:
         ac:c8:75:c1:4b:ac:e1:32:da:98:dd:fb:2d:e8:75:e0:31:9c:
         07:ad:c7:79:2c:cd:b3:c3:3e:6b:dd:7b:7b:94:21:fa:f0:25:
         a3:3e:94:37:6b:9a:75:cb:1e:43:ef:a8:0f:02:b5:42:e0:f2:
         c0:a6:ed:2d:fd:ec:3a:bd:50:84:41:d1:80:85:e6:f7:d9:83:
         19:3c:c0:ee:28:a7:6b:eb:ec:b0:d7:10:70:59:1d:bd:b4:34:
         29:20:28:18:5d:45:8c:4d:3e:91:b8:6f:91:9a:ce:bf:11:60:
         0f:19:55:d8:5d:a8:53:dd:55:ef:c1:2f:25:9d:aa:5e:f3:0f:
         26:46:20:a4:73:ff:cf:33:17:d0:da:09:90:48:9c:c3:a1:5d:
         19:b5:62:28:87:76:a9:b6:8f:5d:85:3f:9f:52:16:3c:13:24:
         bd:ba:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:54:34 2025 by rpki-client