Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136342e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          xBRfshiUsR/JhkuD0R7Luyh8tcqX8WyzNOOtJAb1fss=
Subject key identifier:   88:45:64:A6:00:33:49:30:05:45:09:F7:67:F0:67:67:F4:E2:F6:52
Certificate issuer:       /CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
Certificate serial:       421D46B7F6EF23D18AB4E66B0A7D44478620F0C4
Authority key identifier: 16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 26 Aug 2025 19:23:09 +0000
ROA not before:           Tue 26 Aug 2025 19:18:09 +0000
ROA not after:            Tue 25 Aug 2026 19:23:09 +0000
asID:                     266196
IP address blocks:        191.6.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:1d:46:b7:f6:ef:23:d1:8a:b4:e6:6b:0a:7d:44:47:86:20:f0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
        Validity
            Not Before: Aug 26 19:18:09 2025 GMT
            Not After : Aug 25 19:23:09 2026 GMT
        Subject: CN=884564A600334930054509F767F06767F4E2F652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:6c:70:ce:c7:4f:7d:ed:ff:b6:00:1a:22:
                    19:7c:ab:cd:c9:62:89:0a:84:08:ac:09:f1:d3:4c:
                    e0:39:97:88:e2:72:bc:46:74:ed:27:24:39:18:f2:
                    5b:20:34:0f:13:e4:dc:48:b8:fc:1b:17:57:08:40:
                    7c:ee:f4:04:6b:83:af:af:e1:c1:9d:b3:45:c4:20:
                    3c:9d:9f:c4:c2:3e:37:82:8e:d3:e5:d5:7c:0d:58:
                    18:3c:3c:f7:a9:51:19:3b:8f:9f:91:52:07:c5:d2:
                    36:41:de:69:63:72:8b:d8:04:97:c5:86:d6:73:84:
                    8a:a3:aa:4b:f0:47:23:15:eb:94:e6:4c:4e:49:7c:
                    ef:6b:88:6b:a1:3c:0e:2c:59:27:7d:0e:c3:82:3e:
                    74:37:f0:aa:ff:55:c3:17:34:46:8e:92:1c:4b:4b:
                    0d:49:6a:8d:d0:0b:dd:a4:4a:0c:2d:c1:a9:ef:4e:
                    9b:1f:00:6e:85:b0:68:b4:bb:18:14:e1:3f:b8:35:
                    12:2c:47:3f:23:6f:a6:3c:0e:cd:a8:dc:14:51:a7:
                    07:31:92:79:3a:8c:47:09:53:a9:d5:4e:fa:8b:b6:
                    b9:bd:ec:a0:54:67:77:dc:70:02:b7:2d:15:59:8b:
                    52:77:f7:47:c9:90:9c:94:e1:12:9a:ab:cf:02:22:
                    85:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:45:64:A6:00:33:49:30:05:45:09:F7:67:F0:67:67:F4:E2:F6:52
            X509v3 Authority Key Identifier:
                keyid:16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136342e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0f:c4:2a:44:a5:19:ec:d6:cb:84:39:f2:7d:92:53:74:31:
         da:bb:ab:dd:2a:70:28:fa:0a:7b:20:b3:65:b4:c4:a6:76:7e:
         a1:fa:41:79:96:a8:15:bf:8e:7c:a4:73:fb:4d:61:bc:93:2a:
         e9:be:04:52:b4:c0:f4:52:6c:88:10:42:e2:2c:b2:e3:ca:1f:
         a0:5d:d0:3e:4d:1f:1e:a2:56:f0:1c:30:14:7a:28:e8:a3:da:
         de:89:e6:12:47:60:17:21:5c:da:90:1c:31:8c:d5:51:9c:86:
         ca:a2:51:2d:1e:bc:c4:26:2a:9c:9b:97:46:66:52:4e:00:fb:
         ed:5b:66:e0:46:99:f8:f5:0a:b0:a5:39:2b:b1:8e:ad:8c:8b:
         c9:75:0a:0b:ea:01:e2:9d:1b:4d:12:74:31:29:fd:77:04:7f:
         bf:c1:b5:9b:fe:64:8e:aa:10:12:4f:15:5b:26:27:97:48:89:
         e6:22:24:bf:5e:93:d1:23:da:8d:45:9b:2f:b2:76:7d:30:8f:
         36:74:85:af:32:48:0c:e1:54:23:5e:58:b2:ed:2f:71:ad:f5:
         ae:cc:2d:82:73:d0:70:75:d9:18:4e:32:1b:a2:cb:61:68:ea:
         31:ce:b6:c4:43:18:e6:0d:35:34:44:92:28:13:e5:51:71:af:
         d8:b4:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:27:05 2025 by rpki-client