Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          C5zLNpG3XI7KCmILnBgGdeX25H5txFa4Tqc9lVmjlP8=
Subject key identifier:   7F:BC:CB:45:36:FD:7F:6B:11:D2:B8:15:F7:DF:57:4B:2E:55:09:76
Certificate issuer:       /CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
Certificate serial:       1B5DE4408EC7EC60FD2EA171DCC8F3096E577622
Authority key identifier: D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa
Signing time:             Thu 26 Jun 2025 00:57:02 +0000
ROA not before:           Thu 26 Jun 2025 00:52:02 +0000
ROA not after:            Thu 25 Jun 2026 00:57:02 +0000
asID:                     267560
IP address blocks:        181.191.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 08:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:5d:e4:40:8e:c7:ec:60:fd:2e:a1:71:dc:c8:f3:09:6e:57:76:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
        Validity
            Not Before: Jun 26 00:52:02 2025 GMT
            Not After : Jun 25 00:57:02 2026 GMT
        Subject: CN=7FBCCB4536FD7F6B11D2B815F7DF574B2E550976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:41:6c:12:72:b5:93:1d:4a:4e:b6:e1:f2:0c:
                    30:d0:70:c3:4a:ee:93:a1:b5:4f:eb:61:39:5d:6f:
                    da:d9:17:b9:57:95:aa:5a:1e:21:1a:02:b5:03:8e:
                    30:8f:57:ca:e4:a0:40:e7:66:97:98:dd:75:cf:da:
                    ca:ba:9e:69:0e:b4:f3:bc:3d:10:dc:8c:21:88:fe:
                    fb:d6:91:7b:a4:02:a8:77:f0:fd:33:c1:6c:1b:f1:
                    81:6b:73:cb:de:d8:12:fe:be:b4:15:c1:b6:08:95:
                    d6:d4:52:2a:10:fb:f8:9c:52:cb:ac:8a:b6:01:26:
                    e4:ce:97:62:af:2c:90:90:6b:ff:f8:ca:fe:bf:c1:
                    14:dd:37:5b:23:43:ac:bf:44:a5:92:78:56:b4:6d:
                    54:36:f5:4a:f0:fc:ec:c2:95:76:26:6d:a2:13:57:
                    96:a6:5f:87:25:81:0e:77:4f:0e:b9:c6:78:a4:58:
                    2b:b1:90:08:82:88:df:d1:e5:2b:31:16:f9:12:60:
                    c7:47:7c:2a:07:b9:d6:ad:4d:cb:ba:e2:c1:42:1f:
                    86:31:73:b9:4f:cd:36:4a:1f:30:05:41:ee:62:82:
                    85:6b:0e:1e:14:0b:8b:e0:be:90:09:b7:3a:f9:f3:
                    8d:6c:a3:ca:6f:23:12:a7:0a:81:53:c2:95:bc:f1:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BC:CB:45:36:FD:7F:6B:11:D2:B8:15:F7:DF:57:4B:2E:55:09:76
            X509v3 Authority Key Identifier:
                keyid:D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231372e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:25:9f:f9:7f:25:0c:f0:60:82:34:62:b6:34:e6:92:a9:
         cc:a8:49:70:4c:0f:c5:88:3b:47:cf:08:ee:32:20:ff:b5:54:
         0b:17:5b:af:e1:68:81:ff:66:7d:c4:97:27:dc:07:bb:12:ef:
         ed:88:39:98:c5:90:1a:30:63:7b:40:5c:f7:9f:e4:ce:7e:5e:
         2c:e7:e7:cb:0d:e1:6c:1c:a2:46:70:3a:22:43:67:f7:f1:da:
         11:e2:2a:ec:ad:c4:f6:b0:5f:21:61:c7:80:cb:4a:be:25:89:
         fb:2b:5c:40:c7:f1:1b:f5:aa:30:a5:e1:7a:72:a4:2e:40:1d:
         d0:4b:43:79:4a:f9:36:af:2c:da:dd:c5:69:03:1b:3b:cf:3d:
         dd:91:0a:d1:93:db:36:07:ad:a3:09:a3:7d:ab:9b:b5:04:31:
         56:69:08:e5:68:61:0a:3a:a4:f1:23:3f:39:90:98:6a:2c:80:
         dc:82:4e:af:a8:6d:80:e6:6a:a4:66:e4:87:6b:25:c1:86:59:
         88:84:6b:fc:85:b5:93:10:bc:81:be:0b:e7:c6:ae:f5:8e:2d:
         49:d2:b2:06:d2:1d:66:38:e1:ea:52:8f:3c:c6:6a:41:aa:35:
         78:22:b1:8d:d3:5b:1d:75:a4:8f:1d:41:52:25:ec:f8:18:c2:
         a6:22:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:53:54 2025 by rpki-client