Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38362e302f32342d3234203d3e203533303133.roa
File:                     3137372e36372e38362e302f32342d3234203d3e203533303133.roa (raw, json)
Hash identifier:          3wxqwVppgNQhj+L0AE1n8yIK4gh+lhHlzCyFjDuGT68=
Subject key identifier:   B6:97:20:9E:2A:9A:5F:91:18:12:31:A4:5A:E3:EA:6C:7D:86:E3:04
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       5A4EC794BCA710F71147EAFFDF7F4640F46D0BD7
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38362e302f32342d3234203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:04:00 +0000
ROA not before:           Wed 18 Jun 2025 15:59:00 +0000
ROA not after:            Wed 17 Jun 2026 16:04:00 +0000
asID:                     53013
IP address blocks:        177.67.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4e:c7:94:bc:a7:10:f7:11:47:ea:ff:df:7f:46:40:f4:6d:0b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 15:59:00 2025 GMT
            Not After : Jun 17 16:04:00 2026 GMT
        Subject: CN=3082010A0282010100D30AFE9AD52975F95CE82E11DB7F4F6356AD930BE1DCD37C072189C4253F50766FFAC0CAA3DE174E99AAA431D11349B9C5ECFF1A7B9551963F68277CFFCDDE6F4293AB30F63B23427F3D83B6B558652F343F49C0A2FCEB55D944AFB22840C70531C31CFDA5666C27BEAC125BC61CE4E07F4930A8B51A837D0084DD55BCBCA7BB419DB74B57F996798540743E268FE637C1AD1EB1E8041FDB497D18002401A8DA6C6F79EDFBBCAC64127C7E98ECCDA839267DC35705EADB346EC37B1E13E603FE4B535280CF26DFA596C0F222DC9C752132DAEDAF8DE6083AE2BAD6A4DD48F6B5B327FB2019A6FD8BC326ECE96D7969A4ED831637BAFA25DD888AB28BDF3F33150203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0a:fe:9a:d5:29:75:f9:5c:e8:2e:11:db:7f:
                    4f:63:56:ad:93:0b:e1:dc:d3:7c:07:21:89:c4:25:
                    3f:50:76:6f:fa:c0:ca:a3:de:17:4e:99:aa:a4:31:
                    d1:13:49:b9:c5:ec:ff:1a:7b:95:51:96:3f:68:27:
                    7c:ff:cd:de:6f:42:93:ab:30:f6:3b:23:42:7f:3d:
                    83:b6:b5:58:65:2f:34:3f:49:c0:a2:fc:eb:55:d9:
                    44:af:b2:28:40:c7:05:31:c3:1c:fd:a5:66:6c:27:
                    be:ac:12:5b:c6:1c:e4:e0:7f:49:30:a8:b5:1a:83:
                    7d:00:84:dd:55:bc:bc:a7:bb:41:9d:b7:4b:57:f9:
                    96:79:85:40:74:3e:26:8f:e6:37:c1:ad:1e:b1:e8:
                    04:1f:db:49:7d:18:00:24:01:a8:da:6c:6f:79:ed:
                    fb:bc:ac:64:12:7c:7e:98:ec:cd:a8:39:26:7d:c3:
                    57:05:ea:db:34:6e:c3:7b:1e:13:e6:03:fe:4b:53:
                    52:80:cf:26:df:a5:96:c0:f2:22:dc:9c:75:21:32:
                    da:ed:af:8d:e6:08:3a:e2:ba:d6:a4:dd:48:f6:b5:
                    b3:27:fb:20:19:a6:fd:8b:c3:26:ec:e9:6d:79:69:
                    a4:ed:83:16:37:ba:fa:25:dd:88:8a:b2:8b:df:3f:
                    33:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:97:20:9E:2A:9A:5F:91:18:12:31:A4:5A:E3:EA:6C:7D:86:E3:04
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38362e302f32342d3234203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:b3:e2:65:d4:1f:df:87:ce:95:2f:ad:71:58:f1:6f:a9:c6:
         61:15:b1:8e:12:4f:b0:ca:2e:00:78:11:e4:da:93:67:e2:6a:
         4d:03:27:ea:43:5e:8b:de:64:c4:dd:4a:f4:99:b5:01:9d:b0:
         d3:e6:e2:9d:e5:9c:6d:f3:b4:e8:96:2c:2b:b8:53:8d:fa:15:
         d9:ac:18:fc:14:c7:7c:69:41:d7:89:04:5f:0b:85:61:60:a2:
         f8:5d:d4:d3:d9:1f:95:ff:66:ec:d9:fd:90:c5:d4:86:d6:d0:
         e6:51:e6:c1:b0:8e:6a:29:aa:ca:e9:81:85:71:9e:0b:a2:96:
         43:76:83:6d:4a:eb:4c:ac:d2:cc:1e:0c:49:eb:a6:06:c2:5a:
         2b:e0:ed:b0:96:2b:d5:3d:66:32:98:d3:73:07:36:09:f0:90:
         2d:c9:76:22:b0:28:aa:d2:07:19:0b:93:84:b9:ba:b3:20:88:
         39:7d:b7:47:5f:ae:0d:93:5b:dc:f4:1f:50:a7:85:ae:6d:3e:
         db:f0:d8:f9:76:28:f5:18:30:e4:7b:bd:02:3a:a1:5c:06:d4:
         49:b8:1a:9c:fb:4b:e5:ae:bd:d1:ad:33:f6:1a:9e:d9:fe:83:
         63:e6:10:29:87:93:74:76:70:e3:92:ac:0a:1c:9b:64:f6:6f:
         be:cd:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:10:26 2025 by rpki-client