Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa
File:                     3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa (raw, json)
Hash identifier:          dg+v4iRAgtvxhudzJqO1QGuvRTxA+AQkVvB14fm2fIU=
Subject key identifier:   71:65:07:CB:4B:61:4D:70:D6:40:AF:79:4B:4B:0E:3E:4C:36:6A:4D
Certificate issuer:       /CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
Certificate serial:       30B5CC36E1F76F08C18E0C83FE8822CFDB55D6A0
Authority key identifier: 57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa
Signing time:             Thu 05 Jun 2025 19:41:22 +0000
ROA not before:           Thu 05 Jun 2025 19:36:22 +0000
ROA not after:            Thu 04 Jun 2026 19:41:22 +0000
asID:                     267560
IP address blocks:        181.191.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl
                          rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 11:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:cc:36:e1:f7:6f:08:c1:8e:0c:83:fe:88:22:cf:db:55:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5757B4F80D8B38607E29B24387063FFFF6B2B426
        Validity
            Not Before: Jun  5 19:36:22 2025 GMT
            Not After : Jun  4 19:41:22 2026 GMT
        Subject: CN=716507CB4B614D70D640AF794B4B0E3E4C366A4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:86:ce:ae:de:83:dd:cf:7b:ff:48:48:ee:c7:
                    94:2b:9b:aa:7a:46:8d:fe:61:1b:d3:29:a4:bd:f0:
                    ee:e4:d6:46:85:33:11:d6:ac:b0:b1:e9:0f:9e:6d:
                    f8:f6:fe:b5:59:d5:b1:ad:d6:99:24:b0:9c:56:eb:
                    a3:85:82:96:3c:14:29:ee:14:ae:8e:2f:e6:42:59:
                    03:02:09:9c:f6:db:66:db:78:1f:30:f8:a6:ab:0d:
                    58:de:4b:a8:f0:0e:eb:c4:c0:0a:cf:d3:1a:58:f2:
                    2b:f6:79:d9:3e:51:2c:d2:14:ee:52:76:9f:23:cd:
                    ea:10:70:29:29:77:da:e3:c1:39:a8:b4:98:1d:67:
                    c6:f3:a0:ad:ed:1f:9c:66:1a:f2:99:f1:3a:31:eb:
                    4b:95:c5:67:ab:5d:ed:fc:14:3a:03:75:e1:be:9b:
                    b1:80:0f:33:4f:0f:cc:1f:60:c8:17:be:96:22:50:
                    70:04:95:64:f0:b7:b7:48:e1:ac:7c:d8:e0:fc:a1:
                    c1:a7:74:b0:7e:57:aa:b9:d3:d6:5f:b5:61:e1:5f:
                    e2:24:40:5f:f9:ca:5c:bd:94:07:40:c8:81:c7:4f:
                    38:49:70:9a:17:bd:0d:47:a9:0d:c6:45:9a:63:e0:
                    8d:88:d0:c1:34:1d:42:f0:f5:f7:01:46:ec:35:7d:
                    ec:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:65:07:CB:4B:61:4D:70:D6:40:AF:79:4B:4B:0E:3E:4C:36:6A:4D
            X509v3 Authority Key Identifier:
                keyid:57:57:B4:F8:0D:8B:38:60:7E:29:B2:43:87:06:3F:FF:F6:B2:B4:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/5757B4F80D8B38607E29B24387063FFFF6B2B426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5757B4F80D8B38607E29B24387063FFFF6B2B426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/3138312e3139312e3231382e302f32332d3233203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:b6:2a:cd:f2:9f:4c:72:18:96:ed:73:23:34:46:d2:2f:d5:
         10:f6:23:63:10:19:2b:ae:70:10:0e:6c:2b:42:be:4f:62:d3:
         5d:66:69:99:ec:71:cb:c2:15:11:32:1c:7f:c3:cf:c1:47:78:
         08:38:99:07:b2:fd:d1:27:14:e8:e1:63:74:8e:ac:6d:c3:3c:
         9a:b9:bc:12:92:a4:f7:18:e8:17:e0:c7:86:7f:e5:28:79:7b:
         27:3a:92:ea:8e:f9:1b:4d:5a:47:01:ac:2d:f2:f9:1a:15:55:
         13:7b:1d:7f:48:7f:24:e3:6a:4f:a1:04:77:23:7a:62:2b:7a:
         b8:5a:cd:88:d8:b5:fc:e5:9e:29:14:8b:a6:a9:a4:a0:4a:f2:
         dd:42:af:a4:e9:cd:cf:2c:c2:22:37:d3:aa:2d:75:68:e0:05:
         9a:fc:fb:e0:77:2d:3f:94:92:bc:23:89:6a:a6:fa:27:b6:a2:
         e2:77:87:d3:d6:0d:90:43:1e:86:d3:db:35:55:c7:58:42:14:
         7a:25:58:96:c6:34:6f:ad:14:81:a7:eb:e1:97:35:bc:a0:5a:
         ac:d2:2f:60:19:c1:0c:5b:ae:54:bb:59:39:1e:9e:d9:4d:e4:
         dc:37:82:ec:9e:27:52:04:33:43:0c:4e:2f:6a:71:10:b0:b1:
         99:ff:28:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:07:27 2025 by rpki-client