Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa
File:                     3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa (raw, json)
Hash identifier:          xQhug6unQDVazAG3ccN2/7fgBFogOEuEIe9P0VOrtgo=
Subject key identifier:   87:19:1F:E6:13:B8:24:66:0A:70:70:48:8F:F9:3D:74:9A:CC:9D:67
Certificate issuer:       /CN=2085C2E26105617BC4502F8911A5BE52CC061122
Certificate serial:       0EF748472667DEC1D713F3019D109536A1D7ED50
Authority key identifier: 20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa
Signing time:             Mon 16 Jun 2025 20:03:02 +0000
ROA not before:           Mon 16 Jun 2025 19:58:02 +0000
ROA not after:            Mon 15 Jun 2026 20:03:02 +0000
asID:                     264987
IP address blocks:        181.191.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl
                          rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 19 Jun 2025 10:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f7:48:47:26:67:de:c1:d7:13:f3:01:9d:10:95:36:a1:d7:ed:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085C2E26105617BC4502F8911A5BE52CC061122
        Validity
            Not Before: Jun 16 19:58:02 2025 GMT
            Not After : Jun 15 20:03:02 2026 GMT
        Subject: CN=87191FE613B824660A7070488FF93D749ACC9D67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:3d:f3:12:f4:19:fd:11:00:d3:df:f5:33:
                    59:17:96:24:c1:e2:dd:d8:02:3e:97:30:08:03:d4:
                    5a:6b:3a:45:9a:a1:8e:90:2a:13:3a:70:89:1d:c6:
                    a2:5d:89:43:f5:f2:93:7b:75:8d:56:81:c0:5e:ad:
                    68:5a:fd:e6:5f:0a:90:31:13:36:68:a6:0b:8c:68:
                    31:fb:e8:17:c4:75:33:97:83:91:6b:fe:ba:6a:56:
                    9a:81:52:33:d2:0a:d8:a4:42:d9:c3:0e:7c:ef:e4:
                    4a:73:8b:20:f2:36:47:e8:14:15:59:aa:a0:5a:5b:
                    4c:60:bd:28:22:b5:47:25:1c:5c:39:76:18:57:61:
                    d4:06:8e:a9:5d:d6:d6:ed:36:f7:b9:bb:c7:78:b5:
                    9c:95:03:41:c2:de:d6:10:17:38:64:53:94:c1:5a:
                    c5:01:e6:11:82:4c:5f:64:89:48:31:a0:75:c7:e8:
                    78:ea:4a:e6:e2:bc:dc:f5:bb:f3:cc:db:df:06:6b:
                    0e:ae:72:0a:c9:f3:b9:63:24:31:6e:4a:19:3b:33:
                    3b:22:6b:be:82:20:c5:1d:55:d0:97:84:3d:4b:d3:
                    13:10:77:c5:51:b7:9a:99:3d:6a:7e:93:b9:51:74:
                    3f:27:fc:7d:50:d2:24:6c:7e:1f:5c:55:99:ea:54:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:19:1F:E6:13:B8:24:66:0A:70:70:48:8F:F9:3D:74:9A:CC:9D:67
            X509v3 Authority Key Identifier:
                keyid:20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/3138312e3139312e35362e302f32322d3234203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:c7:b9:d0:b6:24:ac:af:f8:07:a2:c7:bc:e5:d1:d6:3a:
         07:15:e6:96:c9:6c:31:0a:9b:2a:66:9f:4f:a8:ea:c5:fc:98:
         79:6a:9c:06:2a:bf:da:33:db:44:af:c4:cb:95:35:e6:91:0a:
         fd:75:21:00:85:bb:4a:e1:f9:a9:60:ab:1b:3e:58:24:bb:ec:
         91:d4:81:6d:21:ba:d5:0c:03:f5:19:47:67:fc:10:c5:19:71:
         c9:68:52:05:e7:87:bc:bc:1b:db:d7:4d:9c:f4:96:30:f5:1b:
         31:6e:90:52:b1:54:09:87:34:f7:a1:e3:f1:66:42:7b:fb:37:
         1c:97:2f:88:9a:28:1e:da:17:53:b9:dc:f6:c7:d4:d9:a0:e7:
         5a:8b:56:17:73:c7:0e:f8:b7:9b:71:a6:aa:f7:6b:a6:a5:18:
         3b:50:6d:4a:29:b1:ca:3b:2c:0f:93:35:2a:04:f9:16:3e:90:
         99:09:28:3a:9a:d6:03:ad:42:d1:65:8f:c6:1d:87:a7:32:b9:
         f9:cd:62:48:69:65:83:63:8f:c1:b4:0b:c2:76:6a:93:50:66:
         77:88:2d:41:c4:81:d0:79:ce:be:74:5e:d6:d7:7c:d8:8a:fd:
         26:98:35:b3:05:d0:cd:67:ae:b9:a6:6f:1f:14:28:92:dd:f8:
         36:a7:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:18:27 2025 by rpki-client