Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38352e302f32342d3234203d3e203533303133.roa
File:                     3137372e36372e38352e302f32342d3234203d3e203533303133.roa (raw, json)
Hash identifier:          L1IpiEXlDBXpVECNnf6fxqiLzrSt8Q+hkgzaTTziPJI=
Subject key identifier:   E2:18:46:FC:E2:8C:E2:59:B1:02:6A:49:2A:03:79:02:6B:6C:06:B7
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       01E9C74873FE85AA355C730FA49E03BF087FE73C
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38352e302f32342d3234203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:04:11 +0000
ROA not before:           Wed 18 Jun 2025 15:59:11 +0000
ROA not after:            Wed 17 Jun 2026 16:04:11 +0000
asID:                     53013
IP address blocks:        177.67.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e9:c7:48:73:fe:85:aa:35:5c:73:0f:a4:9e:03:bf:08:7f:e7:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 15:59:11 2025 GMT
            Not After : Jun 17 16:04:11 2026 GMT
        Subject: CN=3082010A0282010100D36A16C492BD34344C3DBDC8E7B6BC743CFBA30B4DA0871B73FE82177366923ABBE831DE0A8568BB4A765E4CA351CFEC05C5261DFB3B29FAEB650E27F095B0DC8035ACE77440DCF2F5877E0775B662F6EE4A7A4A04D7BA7D681A9A066315DACC5FB025F9A819BACCFA5ED511CDFE68AD4D625AA61741C0760996B9DAE5BE5322E5D8667584DE4F67E23078F457EB16ED3446CEB9C92B12312997BDF749A5CB9B5821F37EC1563292A0084DFD4A1A2B7D60CF8454EEADB3AAC51528D608DBC119C20D27B1DC71035C7F8B9C538C2FC7B300B611438788A78F06EAEF752CD9381EC8316CDE2A11B3760A7FC7EE286DE8C359636CA0AD2ADA6D221D5418E60A754D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:16:c4:92:bd:34:34:4c:3d:bd:c8:e7:b6:
                    bc:74:3c:fb:a3:0b:4d:a0:87:1b:73:fe:82:17:73:
                    66:92:3a:bb:e8:31:de:0a:85:68:bb:4a:76:5e:4c:
                    a3:51:cf:ec:05:c5:26:1d:fb:3b:29:fa:eb:65:0e:
                    27:f0:95:b0:dc:80:35:ac:e7:74:40:dc:f2:f5:87:
                    7e:07:75:b6:62:f6:ee:4a:7a:4a:04:d7:ba:7d:68:
                    1a:9a:06:63:15:da:cc:5f:b0:25:f9:a8:19:ba:cc:
                    fa:5e:d5:11:cd:fe:68:ad:4d:62:5a:a6:17:41:c0:
                    76:09:96:b9:da:e5:be:53:22:e5:d8:66:75:84:de:
                    4f:67:e2:30:78:f4:57:eb:16:ed:34:46:ce:b9:c9:
                    2b:12:31:29:97:bd:f7:49:a5:cb:9b:58:21:f3:7e:
                    c1:56:32:92:a0:08:4d:fd:4a:1a:2b:7d:60:cf:84:
                    54:ee:ad:b3:aa:c5:15:28:d6:08:db:c1:19:c2:0d:
                    27:b1:dc:71:03:5c:7f:8b:9c:53:8c:2f:c7:b3:00:
                    b6:11:43:87:88:a7:8f:06:ea:ef:75:2c:d9:38:1e:
                    c8:31:6c:de:2a:11:b3:76:0a:7f:c7:ee:28:6d:e8:
                    c3:59:63:6c:a0:ad:2a:da:6d:22:1d:54:18:e6:0a:
                    75:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:18:46:FC:E2:8C:E2:59:B1:02:6A:49:2A:03:79:02:6B:6C:06:B7
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38352e302f32342d3234203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:84:8c:08:ff:98:9b:57:56:a3:6a:e2:cd:fc:67:0e:54:
         5e:8c:72:0d:80:3a:ff:e3:96:8c:fb:1a:ca:ff:19:bc:a6:b5:
         71:18:68:0e:13:d1:b5:78:9c:b9:d8:76:38:38:4d:d8:99:40:
         6d:c9:01:2c:7f:8b:50:ab:30:40:02:95:47:e4:85:ac:d1:23:
         44:d2:76:98:3b:ff:aa:14:f7:d3:16:71:af:79:a4:09:df:ee:
         bd:41:2d:47:68:10:06:7f:1d:c8:7f:20:ae:67:b4:1b:35:4f:
         56:89:2b:5e:74:5c:ae:02:f1:b8:05:12:cd:e2:04:7f:86:49:
         ee:6d:cd:d4:5f:d0:52:04:e7:77:4b:0d:71:0e:8d:27:3e:27:
         23:8d:9e:b9:d6:b7:eb:7f:66:2b:63:fa:40:29:43:c3:fb:7a:
         b6:84:73:e0:b8:82:97:43:b3:dd:7c:ac:44:3e:9c:37:ca:84:
         be:72:68:56:72:9b:87:65:d2:ee:e6:df:70:b7:ab:13:9e:2f:
         15:19:bd:bd:0f:03:10:1b:33:dc:40:08:b5:4e:fd:be:07:18:
         84:81:2e:a1:7e:e3:f6:34:f7:f9:a0:c3:32:a4:fa:3d:3e:95:
         bb:f3:aa:58:a5:4b:e4:6c:66:3e:ce:45:05:85:95:d3:e4:89:
         b9:22:ee:c0
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUAenHSHP+hao1XHMPpJ4Dvwh/5zwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk4QTc2QTA2RDRCMjZBMkU4OEZDNkYwMUZFN0VBRURG
RjVDNzNCMjAeFw0yNTA2MTgxNTU5MTFaFw0yNjA2MTcxNjA0MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDM2QTE2QzQ5MkJEMzQzNDRD
M0RCREM4RTdCNkJDNzQzQ0ZCQTMwQjREQTA4NzFCNzNGRTgyMTc3MzY2OTIzQUJC
RTgzMURFMEE4NTY4QkI0QTc2NUU0Q0EzNTFDRkVDMDVDNTI2MURGQjNCMjlGQUVC
NjUwRTI3RjA5NUIwREM4MDM1QUNFNzc0NDBEQ0YyRjU4NzdFMDc3NUI2NjJGNkVF
NEE3QTRBMDREN0JBN0Q2ODFBOUEwNjYzMTVEQUNDNUZCMDI1RjlBODE5QkFDQ0ZB
NUVENTExQ0RGRTY4QUQ0RDYyNUFBNjE3NDFDMDc2MDk5NkI5REFFNUJFNTMyMkU1
RDg2Njc1ODRERTRGNjdFMjMwNzhGNDU3RUIxNkVEMzQ0NkNFQjlDOTJCMTIzMTI5
OTdCREY3NDlBNUNCOUI1ODIxRjM3RUMxNTYzMjkyQTAwODRERkQ0QTFBMkI3RDYw
Q0Y4NDU0RUVBREIzQUFDNTE1MjhENjA4REJDMTE5QzIwRDI3QjFEQzcxMDM1QzdG
OEI5QzUzOEMyRkM3QjMwMEI2MTE0Mzg3ODhBNzhGMDZFQUVGNzUyQ0Q5MzgxRUM4
MzE2Q0RFMkExMUIzNzYwQTdGQzdFRTI4NkRFOEMzNTk2MzZDQTBBRDJBREE2RDIy
MUQ1NDE4RTYwQTc1NEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA02oWxJK9NDRMPb3I57a8dDz7owtNoIcbc/6CF3Nmkjq76DHeCoVo
u0p2XkyjUc/sBcUmHfs7KfrrZQ4n8JWw3IA1rOd0QNzy9Yd+B3W2YvbuSnpKBNe6
fWgamgZjFdrMX7Al+agZusz6XtURzf5orU1iWqYXQcB2CZa52uW+UyLl2GZ1hN5P
Z+IwePRX6xbtNEbOuckrEjEpl733SaXLm1gh837BVjKSoAhN/UoaK31gz4RU7q2z
qsUVKNYI28EZwg0nsdxxA1x/i5xTjC/HswC2EUOHiKePBurvdSzZOB7IMWzeKhGz
dgp/x+4obejDWWNsoK0q2m0iHVQY5gp1TQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FOIYRvzijOJZsQJqSSoDeQJrbAa3MB8GA1UdIwQYMBaAFMmKdqBtSyai6I/G8B/n
6u3/XHOyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dWY0NnYnk2RTJuYXBN
ZFY4N25UckhyUnJqUGpaWkFCMlROY1hyQmJtcThuLzAvQzk4QTc2QTA2RDRCMjZB
MkU4OEZDNkYwMUZFN0VBRURGRjVDNzNCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DOThBNzZBMDZENEIyNkEyRTg4RkM2RjAxRkU3RUFFREZGNUM3
M0IyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVmNDZ2J5NkUybmFwTWRWODdu
VHJIclJyalBqWlpBQjJUTmNYckJibXE4bi8wLzMxMzczNzJlMzYzNzJlMzgzNTJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzMzMDMxMzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACxQ1Uw
DQYJKoZIhvcNAQELBQADggEBAFhshIwI/5ibV1ajauLN/GcOVF6Mcg2AOv/jloz7
Gsr/GbymtXEYaA4T0bV4nLnYdjg4TdiZQG3JASx/i1CrMEAClUfkhazRI0TSdpg7
/6oU99MWca95pAnf7r1BLUdoEAZ/Hch/IK5ntBs1T1aJK150XK4C8bgFEs3iBH+G
Se5tzdRf0FIE53dLDXEOjSc+JyONnrnWt+t/Zitj+kApQ8P7eraEc+C4gpdDs918
rEQ+nDfKhL5yaFZym4dl0u7m33C3qxOeLxUZvb0PAxAbM9xACLVO/b4HGISBLqF+
4/Y09/mgwzKk+j0+lbvzqlilS+RsZj7ORQWFldPkibki7sA=
-----END CERTIFICATE-----
Generated at Sun Jun 22 21:55:52 2025 by rpki-client