Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38342e302f32342d3234203d3e203533303133.roa
File:                     3137372e36372e38342e302f32342d3234203d3e203533303133.roa (raw, json)
Hash identifier:          2jJwKJCabLPw6mYp6TaifuEVF6+uwoSE+IsTcvwbjtk=
Subject key identifier:   D2:23:ED:F8:0B:51:C0:BC:2B:54:76:FE:40:A0:38:5A:9C:49:27:53
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       654854C9B2ED66BF420FCFDF95D30975119D7928
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38342e302f32342d3234203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:04:18 +0000
ROA not before:           Wed 18 Jun 2025 15:59:18 +0000
ROA not after:            Wed 17 Jun 2026 16:04:18 +0000
asID:                     53013
IP address blocks:        177.67.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:48:54:c9:b2:ed:66:bf:42:0f:cf:df:95:d3:09:75:11:9d:79:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 15:59:18 2025 GMT
            Not After : Jun 17 16:04:18 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3a:31:fb:9e:a4:2e:d9:2e:e8:17:b2:ce:52:
                    43:44:39:55:55:95:30:fd:46:de:be:7a:85:42:70:
                    40:3f:27:3b:f1:3a:6f:73:02:c9:d2:27:90:c4:fc:
                    93:da:7c:02:d9:01:9a:35:05:2e:0d:1e:8e:af:2b:
                    db:b6:46:a6:03:3f:7a:c0:66:98:b4:b0:dc:28:d8:
                    83:a1:21:6c:0f:71:1d:ef:7a:55:c4:8c:45:f8:d8:
                    9b:b2:ba:4e:40:fd:1b:d4:c6:af:7c:94:7a:d1:3d:
                    f4:31:1c:3a:75:a6:c9:39:20:81:32:d4:51:eb:b1:
                    b9:5e:56:ea:be:05:46:b9:f3:1e:d1:14:d7:f1:99:
                    50:7f:74:11:bd:7b:7f:01:70:ea:28:c0:e5:eb:b0:
                    db:1f:a8:86:6a:89:85:db:1e:fb:f9:94:56:e0:9a:
                    e3:c6:5e:4f:a2:90:c3:43:15:aa:05:f1:c3:90:46:
                    ce:f5:6c:fd:59:77:67:4c:22:bd:0e:cb:c1:87:b7:
                    aa:52:04:45:7c:c5:8a:af:ed:10:87:02:a0:9c:52:
                    f4:db:9e:c6:43:02:d3:43:65:d8:95:60:c3:d7:42:
                    0b:ad:8c:f4:63:2a:62:b3:db:0a:a9:84:25:97:66:
                    49:b0:0b:fe:8f:21:8f:c3:84:c1:3f:20:46:5c:ec:
                    4c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:23:ED:F8:0B:51:C0:BC:2B:54:76:FE:40:A0:38:5A:9C:49:27:53
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38342e302f32342d3234203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c1:ba:ca:32:db:a1:29:f1:fe:1d:1e:ab:1b:33:21:f2:66:
         13:fe:a7:48:87:2d:72:e3:1c:96:ac:e6:8a:bf:6b:6c:43:1e:
         63:1b:9c:23:a3:6a:8e:d6:4b:ac:53:88:75:3c:76:d7:4f:e9:
         87:fb:76:bc:a5:1a:41:cd:e0:df:61:9e:41:0d:04:9e:3a:26:
         47:d5:38:2c:4f:06:ce:88:5e:53:c1:83:11:15:d9:82:4c:7a:
         b2:b1:7b:73:42:81:c7:0c:4f:8c:94:63:70:05:43:1d:50:54:
         3a:f9:b5:15:4b:fe:52:8a:ed:d6:ba:33:33:20:5d:09:c6:9f:
         f6:1b:e9:dd:f1:7f:b9:18:ba:c7:81:40:69:28:83:4b:56:f0:
         a8:79:7d:4d:d3:f8:7a:d8:fa:91:09:a7:a4:f4:ad:8e:2c:ec:
         6b:89:df:4c:a4:04:fb:1f:cf:80:2f:5d:1f:08:58:ca:39:4b:
         d0:f4:72:29:10:da:1c:fb:06:08:2d:f1:6e:29:b0:9d:7b:71:
         2e:3a:cd:1f:1c:dd:35:bf:f7:4d:ee:77:9a:65:55:e0:8f:c6:
         70:ed:e1:f7:7d:7b:e2:88:32:3d:da:83:24:da:c1:13:91:cf:
         60:3d:5e:98:a5:95:0b:05:f7:82:0b:f3:c5:dc:03:f5:68:d8:
         27:98:bb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 11:36:45 2025 by rpki-client