Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa
File:                     3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa (raw, json)
Hash identifier:          OCmpUgxiDymlfRs4Do0/bNwFUFFlrBT7gGQyA3N02j0=
Subject key identifier:   E3:1E:56:27:77:14:DC:49:92:89:DF:9A:E2:85:07:04:7C:3B:F3:2B
Certificate issuer:       /CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
Certificate serial:       2261933D2E9BF605F929E7885EFB661952E3DB6F
Authority key identifier: D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa
Signing time:             Thu 26 Jun 2025 00:57:03 +0000
ROA not before:           Thu 26 Jun 2025 00:52:03 +0000
ROA not after:            Thu 25 Jun 2026 00:57:03 +0000
asID:                     267560
IP address blocks:        181.191.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 08:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:61:93:3d:2e:9b:f6:05:f9:29:e7:88:5e:fb:66:19:52:e3:db:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6E514A5A677DB731A91891D5052D588E5FAFBD8
        Validity
            Not Before: Jun 26 00:52:03 2025 GMT
            Not After : Jun 25 00:57:03 2026 GMT
        Subject: CN=E31E56277714DC499289DF9AE28507047C3BF32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9b:4a:5a:47:7b:14:e5:1e:ae:0a:7c:b3:47:
                    49:70:55:73:62:25:0b:6f:89:1f:8a:3a:95:52:be:
                    cd:b8:a1:2d:68:15:6d:64:d0:41:9a:40:cd:77:86:
                    7d:7a:e0:9d:75:60:5d:98:37:62:1b:0f:10:a9:eb:
                    39:92:6b:6d:78:31:34:8d:0c:01:e1:90:c6:5a:e4:
                    b2:77:8c:b7:c7:2d:6e:69:c7:c7:bb:c0:00:ec:c3:
                    0e:b6:33:6c:c4:68:45:92:8b:82:0c:2e:97:6d:2a:
                    2a:2f:ce:55:c1:07:25:92:98:28:5e:52:50:58:e6:
                    87:44:b0:5a:26:b3:40:14:eb:56:be:dc:6c:24:54:
                    78:13:5c:d3:57:b4:38:4d:b4:ca:00:6b:8f:ec:7c:
                    ef:23:a6:31:7d:06:ab:e5:0e:5b:fc:41:53:55:ec:
                    6e:81:98:15:ea:76:55:0b:ab:69:4c:7b:97:df:35:
                    86:9c:bb:bc:e7:7e:9b:3b:4d:5c:2b:d5:98:39:cd:
                    88:6b:e6:12:c8:ec:bc:96:4b:b5:11:17:06:4a:72:
                    5e:09:bd:85:1e:39:07:9b:1e:d9:d0:45:40:c2:e1:
                    38:4d:7a:53:a7:7e:29:fc:66:1c:06:5e:a5:ef:e6:
                    b5:74:77:7f:a4:d5:13:fc:92:e5:26:ce:fa:bb:35:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1E:56:27:77:14:DC:49:92:89:DF:9A:E2:85:07:04:7C:3B:F3:2B
            X509v3 Authority Key Identifier:
                keyid:D6:E5:14:A5:A6:77:DB:73:1A:91:89:1D:50:52:D5:88:E5:FA:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/D6E514A5A677DB731A91891D5052D588E5FAFBD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6E514A5A677DB731A91891D5052D588E5FAFBD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:4d:60:76:98:71:ed:50:70:9b:82:a4:69:56:2a:2b:95:2a:
         7c:69:0f:f3:0a:30:24:4b:2c:95:cb:c6:c2:6b:28:98:8c:ea:
         e7:77:38:33:3d:f6:39:07:61:33:cd:b4:8e:77:08:53:15:dc:
         a1:11:92:0b:ab:b2:af:48:7e:bd:b3:0b:de:5f:01:d4:a9:72:
         f3:8a:ac:04:62:5d:e5:27:fd:0f:38:b9:65:5b:3e:e5:8f:8c:
         9f:3b:18:21:1b:0b:dd:be:a2:de:ad:c2:ad:69:42:c7:a3:c9:
         a5:36:f6:72:bc:8b:15:8b:28:f8:40:6f:81:5a:a7:78:6c:8d:
         d9:52:ef:0d:46:c9:7c:97:70:34:b0:80:7f:0f:fe:1e:7c:c7:
         93:79:38:9f:69:1f:c5:0a:e8:9c:0d:a5:e6:1c:51:83:43:48:
         8c:e0:59:2b:03:64:f5:aa:dd:18:c8:8c:23:bc:5d:d5:c4:43:
         55:25:65:e1:ec:fb:8d:21:0d:10:a5:c2:29:e7:44:1b:f2:1a:
         4b:a0:87:c2:2b:2a:3a:55:df:4c:0a:0c:5c:67:88:26:4d:bb:
         0b:35:ec:b3:73:04:b8:5e:46:3d:6a:0b:0f:9f:6b:9c:3c:c7:
         bf:c0:95:6e:c8:f5:dd:3e:c1:02:90:c4:8d:06:fe:36:10:c2:
         f1:5a:45:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:52:25 2025 by rpki-client