Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa
File:                     3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa (raw, json)
Hash identifier:          L20YprkOKZCrGyzt0Yc1ewrTiY1NofuuV9WJ8Pn8qJU=
Subject key identifier:   C1:70:74:64:FA:2A:86:5E:FD:0B:68:85:7C:B1:D8:29:CA:FB:D7:85
Certificate issuer:       /CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
Certificate serial:       068C47B9E463EC7CCA5B48114FBBE4CC675E1A57
Authority key identifier: 57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa
Signing time:             Thu 05 Jun 2025 19:41:14 +0000
ROA not before:           Thu 05 Jun 2025 19:36:14 +0000
ROA not after:            Thu 04 Jun 2026 19:41:14 +0000
asID:                     267560
IP address blocks:        181.191.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 05:26:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:8c:47:b9:e4:63:ec:7c:ca:5b:48:11:4f:bb:e4:cc:67:5e:1a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
        Validity
            Not Before: Jun  5 19:36:14 2025 GMT
            Not After : Jun  4 19:41:14 2026 GMT
        Subject: CN=C1707464FA2A865EFD0B68857CB1D829CAFBD785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9e:f8:a6:fa:42:53:d0:dc:fb:86:31:77:80:
                    09:06:9f:fa:2f:60:ac:81:8b:1f:78:bc:c3:88:4d:
                    61:5f:9d:63:82:35:d9:01:50:58:15:16:22:01:47:
                    c2:75:74:d8:d8:d0:d8:26:8f:7d:b8:07:cb:f2:8e:
                    37:0d:ba:3c:60:f1:76:e6:3f:2a:8c:8c:e3:52:f8:
                    f3:1e:b5:f8:51:83:e6:90:60:88:33:5d:19:84:d6:
                    e1:4f:8b:b3:4d:86:c8:a5:20:6d:c5:04:22:25:88:
                    b0:d7:a2:3b:41:b1:02:8c:f9:f8:4d:ed:45:40:e3:
                    af:b7:4e:c4:87:03:e5:5d:ba:ba:c1:bc:de:b4:5c:
                    2f:f4:c8:e1:66:07:65:ab:74:3e:6b:5e:a2:09:4a:
                    65:92:a1:9d:9c:c7:32:c8:41:21:73:bb:41:42:6a:
                    63:ce:9b:67:9f:51:18:f1:c2:8d:25:1e:f5:23:e6:
                    ae:17:54:de:1c:62:f3:36:6d:21:c2:a5:55:1c:6f:
                    b3:db:46:35:31:8d:90:95:5a:17:2b:55:7f:37:a5:
                    8c:17:23:a2:da:5a:66:a8:4f:79:d3:08:f7:f9:72:
                    f1:d3:26:0c:7d:61:ad:4f:2f:fb:72:5a:c8:db:90:
                    2f:4c:77:83:2a:e3:57:54:e5:16:f7:a1:0e:6a:c9:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:70:74:64:FA:2A:86:5E:FD:0B:68:85:7C:B1:D8:29:CA:FB:D7:85
            X509v3 Authority Key Identifier:
                keyid:57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231362e302f32342d3234203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:90:8e:c4:ee:54:70:b0:48:05:bb:36:42:c6:55:2d:f4:0c:
         74:50:94:40:50:39:6d:71:cb:31:75:ac:a9:75:2e:7c:35:c0:
         8b:2b:7a:bd:61:bc:49:3f:6d:f9:31:02:2b:0f:a2:f9:ab:f3:
         80:7d:a5:39:8f:b8:c9:07:8b:d2:84:0c:04:27:56:39:24:34:
         f3:f7:4c:15:81:77:6c:79:18:59:bd:73:00:f4:bc:75:7d:f9:
         50:8f:e8:2a:07:aa:6f:fb:a7:10:9d:a0:91:97:74:7d:ac:69:
         cb:d7:2c:dd:fc:17:7c:c6:8c:07:68:0b:ab:76:d7:f7:31:4f:
         e7:80:05:cb:87:58:bb:e9:70:e3:ce:6d:82:62:08:70:f7:8c:
         9e:e4:05:ee:90:fb:0e:27:86:e9:9b:96:62:1a:27:be:a6:8a:
         0e:d4:0e:6a:ce:a6:7f:91:f3:f2:16:8d:77:3b:2d:bc:5a:04:
         7f:2c:60:49:a7:c4:d0:1d:02:a5:be:59:d3:f0:ec:1a:1f:67:
         fd:7d:49:34:cb:2f:1b:06:ff:a1:4b:e4:6f:15:aa:4d:c3:c7:
         18:28:ed:7f:ae:39:b9:97:0b:d5:a9:e0:63:20:83:11:34:88:
         a8:8a:71:6e:bf:4f:85:db:d7:28:bc:ed:c2:33:23:66:ca:4f:
         20:5a:5f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:56:07 2025 by rpki-client