Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32332d3233203d3e20323637353630.roa
File:                     3138312e3139312e3231362e302f32332d3233203d3e20323637353630.roa (raw, json)
Hash identifier:          RsLP5KdoVjuqphNf8IJyfrjZyby9vtKH2w6J+Da90vk=
Subject key identifier:   AD:6E:1A:CF:CC:FB:1D:D1:D4:09:95:5A:EE:F5:CB:13:15:3F:00:0D
Certificate issuer:       /CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
Certificate serial:       5BB6D6336F31C9B5168A4C5E945F8EDBD1460650
Authority key identifier: 57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32332d3233203d3e20323637353630.roa
Signing time:             Thu 05 Jun 2025 19:41:19 +0000
ROA not before:           Thu 05 Jun 2025 19:36:19 +0000
ROA not after:            Thu 04 Jun 2026 19:41:19 +0000
asID:                     267560
IP address blocks:        181.191.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 05:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b6:d6:33:6f:31:c9:b5:16:8a:4c:5e:94:5f:8e:db:d1:46:06:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
        Validity
            Not Before: Jun  5 19:36:19 2025 GMT
            Not After : Jun  4 19:41:19 2026 GMT
        Subject: CN=AD6E1ACFCCFB1DD1D409955AEEF5CB13153F000D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:7d:66:71:c4:60:e9:4e:8e:82:95:56:1a:
                    2e:be:18:91:9f:2d:c6:21:02:80:2e:4c:95:3b:de:
                    d0:7b:f9:a0:44:9c:3c:c5:17:27:60:36:38:68:7d:
                    de:f8:58:03:71:06:80:bb:4f:8e:07:c4:cc:46:a4:
                    cf:49:3a:47:d5:ed:84:05:3a:65:5e:f1:9e:ab:6b:
                    89:4e:e5:e9:bc:ad:c0:87:9c:f3:50:bb:34:68:72:
                    4f:5a:34:08:ac:e5:69:1f:05:2f:1a:58:55:f6:96:
                    68:97:4b:1d:17:87:3e:fd:c7:68:dd:72:e9:c1:9e:
                    54:77:b7:b6:1f:6e:d0:49:99:7f:7b:01:a3:b3:68:
                    e4:05:06:9c:c0:8c:6b:38:af:a6:70:52:c0:92:09:
                    a6:49:ed:98:a3:2a:bc:d4:a6:df:be:9a:9d:bd:73:
                    03:24:30:c1:d5:4a:31:5d:e4:5f:1f:7d:a7:be:d2:
                    4c:db:ac:9c:5b:3c:fa:99:f0:20:24:6c:82:fa:5e:
                    69:be:5a:49:d4:87:20:bc:c4:cf:b4:ac:14:db:e0:
                    74:b6:b9:67:1b:e9:04:8b:64:c8:97:53:11:10:11:
                    16:65:d4:31:e8:62:3d:ce:54:d0:18:37:d8:63:f2:
                    f6:85:2d:d8:e5:2d:f9:ff:8f:ed:ab:24:31:91:3a:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6E:1A:CF:CC:FB:1D:D1:D4:09:95:5A:EE:F5:CB:13:15:3F:00:0D
            X509v3 Authority Key Identifier:
                keyid:57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32332d3233203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:8a:9a:1b:31:bc:73:32:31:33:8e:01:2c:80:57:f9:67:
         d1:70:e8:52:ee:60:b8:db:4b:80:cf:ad:a2:8d:3d:6d:c4:37:
         55:6a:19:6c:f6:ec:53:d6:c3:00:cc:63:66:04:6a:9a:aa:a0:
         b3:f8:6c:07:d3:a9:25:70:d0:5c:ff:e7:da:35:12:28:f4:28:
         7f:15:0d:65:b7:7b:a0:83:44:d4:df:93:e8:00:d1:81:90:79:
         b7:9f:58:83:f5:5d:8a:34:68:47:b4:93:47:a6:d8:bb:a8:6e:
         17:66:e1:e3:84:b4:a1:21:6d:78:77:2e:31:64:50:82:64:32:
         c8:99:c3:2d:09:b9:21:b3:e7:32:fc:92:c7:05:ff:fe:8b:01:
         e3:02:4a:a2:72:c6:49:be:68:ef:28:49:fc:3b:e9:33:5f:c5:
         7d:39:d0:52:05:2d:7f:f4:5c:83:41:04:59:ad:cc:9c:04:f2:
         b1:bb:b2:d7:1c:fe:4e:82:82:e1:47:d6:96:92:c6:95:b3:ad:
         47:6d:c1:c3:0e:1c:bd:9b:6d:f0:55:80:99:b1:cf:a8:40:a2:
         59:5a:12:1f:e6:46:d7:c9:38:19:86:64:14:92:a9:79:0e:bd:
         cd:22:97:54:26:16:76:f8:6b:56:62:9c:d8:83:c7:25:7a:80:
         f8:3e:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:43:12 2025 by rpki-client