Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa
File:                     3139312e362e3136372e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier:          nDNOLePpePyW/MPVU9fzHp+YFF5vXNvKhX+WjvUNKr4=
Subject key identifier:   21:B4:78:61:35:CF:CF:69:88:0E:2C:F7:C5:DF:DD:E4:A2:46:DF:83
Certificate issuer:       /CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
Certificate serial:       42DA6FA98661EF7F161FC65A1EF8B54529ADCDAF
Authority key identifier: 16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa
Signing time:             Tue 26 Aug 2025 19:23:20 +0000
ROA not before:           Tue 26 Aug 2025 19:18:20 +0000
ROA not after:            Tue 25 Aug 2026 19:23:20 +0000
asID:                     266196
IP address blocks:        191.6.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:da:6f:a9:86:61:ef:7f:16:1f:c6:5a:1e:f8:b5:45:29:ad:cd:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1619150682CDACD2E5DF559462D63AB555DA4E7A
        Validity
            Not Before: Aug 26 19:18:20 2025 GMT
            Not After : Aug 25 19:23:20 2026 GMT
        Subject: CN=21B4786135CFCF69880E2CF7C5DFDDE4A246DF83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1d:c8:e6:f3:4b:0d:d3:2b:6c:9a:9a:7b:c9:
                    58:83:09:d0:ce:84:c6:2e:ed:45:5e:5a:90:ff:55:
                    42:9a:d3:2c:1d:cd:67:83:42:39:14:75:09:b7:af:
                    93:d9:fc:d2:3e:75:7b:17:b5:b9:b1:4d:e4:00:cb:
                    26:2f:b3:76:4f:b2:4a:48:45:73:53:07:f2:ff:2a:
                    d3:92:55:f0:f5:bd:04:59:f6:c4:1d:5a:89:f9:58:
                    1c:ac:d0:6c:ec:ba:55:5a:d5:cf:7a:97:96:cc:1b:
                    4a:f1:b8:75:f8:b2:db:f6:37:40:78:13:0f:8d:57:
                    ea:f9:2d:68:ae:17:86:4c:cd:96:b3:2a:34:86:75:
                    27:00:2b:35:e0:88:88:ad:f4:13:e0:e9:b8:ce:e8:
                    98:83:91:da:16:3f:91:af:df:7d:a9:30:e2:6e:8e:
                    4c:f5:74:ab:d4:ea:ea:0d:77:be:9f:04:e9:d1:bc:
                    78:7d:c1:07:ad:3e:e7:4e:a3:b4:ab:b8:99:61:c9:
                    3c:50:4f:dd:ec:73:8b:6b:b7:af:e6:71:ca:23:1d:
                    dc:a1:07:3e:62:5f:3d:49:81:53:9d:42:70:ba:a1:
                    cf:2a:0b:b6:58:28:0b:af:60:13:6d:35:17:28:43:
                    9b:c3:57:27:7f:e3:55:c3:8c:fc:31:f4:c4:a9:da:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B4:78:61:35:CF:CF:69:88:0E:2C:F7:C5:DF:DD:E4:A2:46:DF:83
            X509v3 Authority Key Identifier:
                keyid:16:19:15:06:82:CD:AC:D2:E5:DF:55:94:62:D6:3A:B5:55:DA:4E:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/1619150682CDACD2E5DF559462D63AB555DA4E7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1619150682CDACD2E5DF559462D63AB555DA4E7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/3139312e362e3136372e302f32342d3234203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.6.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e4:74:ef:a2:0a:99:81:cc:78:62:8c:19:c0:68:d1:eb:29:83:
         b3:57:ed:1e:d3:b7:f4:17:21:46:b8:1b:83:9a:c0:b3:04:d7:
         a6:bf:7e:00:cf:96:86:4c:5b:13:81:90:d3:5f:a2:d0:0e:bd:
         b7:1b:05:f1:46:10:4b:22:7f:98:e4:ff:42:f9:41:4b:6c:3c:
         2b:fa:8e:65:35:df:11:bb:e2:d9:a0:ea:dd:ea:9f:d1:79:83:
         8b:85:33:a6:94:5f:72:88:ad:91:d7:99:c6:69:1c:40:1a:40:
         51:5f:e4:f4:bf:ff:96:89:67:9b:9c:f6:15:fe:d5:52:c8:45:
         96:27:78:9f:1e:4a:17:e7:c9:d1:64:d1:6d:1d:2a:65:2f:6a:
         77:f6:78:29:80:3a:1c:16:f6:09:ea:68:5f:a5:7c:ff:18:21:
         99:21:64:59:83:14:6b:83:60:8e:50:13:20:a2:c0:2f:3e:35:
         d7:e7:b9:a2:3d:37:5c:45:13:8c:30:90:9d:1b:b6:1f:ae:e4:
         7f:cd:5d:28:4b:b7:e3:5d:46:1f:f3:12:f6:ef:db:71:b4:00:
         2c:bc:cd:e5:99:2c:fb:79:ed:34:49:1b:be:3b:f6:96:88:2b:
         98:03:6d:33:c9:63:eb:23:70:aa:87:68:53:74:86:e5:41:5c:
         87:95:fd:e0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQtpvqYZh738WH8ZaHvi1RSmtza8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYxOTE1MDY4MkNEQUNEMkU1REY1NTk0NjJENjNBQjU1
NURBNEU3QTAeFw0yNTA4MjYxOTE4MjBaFw0yNjA4MjUxOTIzMjBaMDMxMTAvBgNV
BAMTKDIxQjQ3ODYxMzVDRkNGNjk4ODBFMkNGN0M1REZEREU0QTI0NkRGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHcjm80sN0ytsmpp7yViDCdDO
hMYu7UVeWpD/VUKa0ywdzWeDQjkUdQm3r5PZ/NI+dXsXtbmxTeQAyyYvs3ZPskpI
RXNTB/L/KtOSVfD1vQRZ9sQdWon5WBys0GzsulVa1c96l5bMG0rxuHX4stv2N0B4
Ew+NV+r5LWiuF4ZMzZazKjSGdScAKzXgiIit9BPg6bjO6JiDkdoWP5Gv332pMOJu
jkz1dKvU6uoNd76fBOnRvHh9wQetPudOo7SruJlhyTxQT93sc4trt6/mccojHdyh
Bz5iXz1JgVOdQnC6oc8qC7ZYKAuvYBNtNRcoQ5vDVyd/41XDjPwx9MSp2nRdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIbR4YTXPz2mIDiz3xd/d5KJG34MwHwYDVR0j
BBgwFoAUFhkVBoLNrNLl31WUYtY6tVXaTnowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0hVQ0RXQnU2U3BDM3VZVzhUOTlGdzRwb2RuV2RMMjY5R3NYMlUyNTRB
ZFEvMC8xNjE5MTUwNjgyQ0RBQ0QyRTVERjU1OTQ2MkQ2M0FCNTU1REE0RTdBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE2MTkxNTA2ODJDREFDRDJF
NURGNTU5NDYyRDYzQUI1NTVEQTRFN0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dIVUNEV0J1NlNwQzN1WVc4VDk5Rnc0cG9kbldkTDI2OUdzWDJVMjU0QWRRLzAv
MzEzOTMxMmUzNjJlMzEzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvwanMA0GCSqGSIb3DQEBCwUAA4IBAQDkdO+iCpmB
zHhijBnAaNHrKYOzV+0e07f0FyFGuBuDmsCzBNemv34Az5aGTFsTgZDTX6LQDr23
GwXxRhBLIn+Y5P9C+UFLbDwr+o5lNd8Ru+LZoOrd6p/ReYOLhTOmlF9yiK2R15nG
aRxAGkBRX+T0v/+WiWebnPYV/tVSyEWWJ3ifHkoX58nRZNFtHSplL2p39ngpgDoc
FvYJ6mhfpXz/GCGZIWRZgxRrg2COUBMgosAvPjXX57miPTdcRROMMJCdG7YfruR/
zV0oS7fjXUYf8xL279txtAAsvM3lmSz7ee00SRu+O/aWiCuYA20zyWPrI3Cqh2hT
dIblQVyHlf3g
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:11:26 2025 by rpki-client