Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38372e302f32342d3234203d3e203533303133.roa
File:                     3137372e36372e38372e302f32342d3234203d3e203533303133.roa (raw, json)
Hash identifier:          dDxGdGC7ZsMDXx+1NKf0n6LXrNZ7mhqNQxNZrUB/F9U=
Subject key identifier:   42:0E:61:B5:42:1C:F7:D4:A1:D8:CA:A1:38:37:C7:61:02:EE:F1:F5
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       5938A7A73E0841CBD9BA811A8BAA2948E4283842
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38372e302f32342d3234203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:03:52 +0000
ROA not before:           Wed 18 Jun 2025 15:58:52 +0000
ROA not after:            Wed 17 Jun 2026 16:03:52 +0000
asID:                     53013
IP address blocks:        177.67.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:38:a7:a7:3e:08:41:cb:d9:ba:81:1a:8b:aa:29:48:e4:28:38:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 15:58:52 2025 GMT
            Not After : Jun 17 16:03:52 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:3e:82:d8:48:1e:4c:72:0f:1c:cc:6b:79:
                    a5:78:0c:e6:cb:73:e6:ca:a4:c2:b6:37:7e:62:b6:
                    ba:ff:15:27:b4:03:92:66:95:f1:1a:65:91:af:eb:
                    d4:a7:35:9e:38:85:eb:51:03:e6:22:aa:52:b6:fb:
                    cd:d8:3d:12:55:96:e4:48:cf:c4:a0:f4:13:74:db:
                    1e:b8:3f:3b:85:b7:51:49:c4:7f:c9:02:31:fd:30:
                    9e:e2:65:2c:d6:8a:a4:6d:2a:d6:90:ad:db:22:23:
                    3c:8c:0e:fb:d5:dc:2e:db:31:6d:9a:c2:30:48:38:
                    70:21:69:ad:96:96:ca:b8:dd:3b:4b:6d:be:47:b5:
                    18:b5:1d:7f:a1:e8:ac:3d:e3:af:7a:8d:66:15:1c:
                    86:dc:e5:61:e1:e2:32:f5:c7:c2:33:4c:95:ff:9b:
                    76:7e:c7:6a:5d:60:74:27:14:d6:4e:56:f0:ce:4a:
                    43:35:62:f8:9d:dc:52:51:22:bb:d2:22:bd:d6:8b:
                    e0:fa:9d:b6:b9:ce:2e:4f:78:d4:a5:3f:0e:a1:d9:
                    57:4a:7e:14:ed:d2:f1:c7:52:c7:81:a2:1d:10:03:
                    87:bb:7b:b4:fd:f1:55:1e:54:62:e1:9c:75:67:a5:
                    ff:0b:f1:fa:54:5d:c9:5b:4d:b2:67:14:0c:98:4a:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0E:61:B5:42:1C:F7:D4:A1:D8:CA:A1:38:37:C7:61:02:EE:F1:F5
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/3137372e36372e38372e302f32342d3234203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.67.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:01:4d:0c:87:21:af:cb:31:d3:d4:44:9c:36:e7:66:a2:
         0a:4a:e3:81:64:bf:32:89:b0:4e:1a:2e:23:40:5c:44:2b:44:
         82:70:10:a8:b6:b7:76:c9:7e:99:81:c9:5c:f4:05:2d:3d:33:
         ad:18:c8:ae:9a:05:3f:db:36:69:b5:e3:b1:9a:98:9e:95:92:
         42:d1:e1:8b:a1:36:c2:63:51:d4:de:4b:25:bf:53:f3:ed:30:
         a7:41:6f:8d:62:ef:f8:83:dd:03:33:d5:fe:97:91:e4:6e:82:
         e5:cd:0f:30:bb:2c:e5:e5:ac:50:cc:71:ff:38:73:36:68:e8:
         26:62:ca:8c:65:f7:21:38:42:87:7d:e2:97:7f:1f:21:5c:cc:
         8d:73:0a:20:d9:7e:fd:e6:33:9d:1e:2d:a3:9e:a5:20:81:e6:
         6a:7f:b0:d4:40:1d:6b:5e:66:3d:1a:8d:0d:6a:63:21:c0:15:
         8f:3f:4a:9c:0a:7a:db:de:c2:0a:85:09:ee:b8:7a:fa:e2:7b:
         d9:3f:a5:90:90:b3:cc:b9:02:0f:0c:3d:40:1b:bd:b1:88:f2:
         3e:62:cd:5e:22:bc:34:c2:3b:a4:1d:fa:93:c3:c0:f7:4a:bf:
         90:3d:57:c5:f3:3d:65:7a:ce:20:07:e4:ee:63:dc:8e:78:ca:
         45:57:28:e1
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUWTinpz4IQcvZuoEai6opSOQoOEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk4QTc2QTA2RDRCMjZBMkU4OEZDNkYwMUZFN0VBRURG
RjVDNzNCMjAeFw0yNTA2MTgxNTU4NTJaFw0yNjA2MTcxNjAzNTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDEzNzNFODJEODQ4MUU0Qzcy
MEYxQ0NDNkI3OUE1NzgwQ0U2Q0I3M0U2Q0FBNEMyQjYzNzdFNjJCNkJBRkYxNTI3
QjQwMzkyNjY5NUYxMUE2NTkxQUZFQkQ0QTczNTlFMzg4NUVCNTEwM0U2MjJBQTUy
QjZGQkNERDgzRDEyNTU5NkU0NDhDRkM0QTBGNDEzNzREQjFFQjgzRjNCODVCNzUx
NDlDNDdGQzkwMjMxRkQzMDlFRTI2NTJDRDY4QUE0NkQyQUQ2OTBBRERCMjIyMzND
OEMwRUZCRDVEQzJFREIzMTZEOUFDMjMwNDgzODcwMjE2OUFEOTY5NkNBQjhERDNC
NEI2REJFNDdCNTE4QjUxRDdGQTFFOEFDM0RFM0FGN0E4RDY2MTUxQzg2RENFNTYx
RTFFMjMyRjVDN0MyMzM0Qzk1RkY5Qjc2N0VDNzZBNUQ2MDc0MjcxNEQ2NEU1NkYw
Q0U0QTQzMzU2MkY4OUREQzUyNTEyMkJCRDIyMkJERDY4QkUwRkE5REI2QjlDRTJF
NEY3OEQ0QTUzRjBFQTFEOTU3NEE3RTE0RUREMkYxQzc1MkM3ODFBMjFEMTAwMzg3
QkI3QkI0RkRGMTU1MUU1NDYyRTE5Qzc1NjdBNUZGMEJGMUZBNTQ1REM5NUI0REIy
NjcxNDBDOTg0QTk0MkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Tc+gthIHkxyDxzMa3mleAzmy3PmyqTCtjd+Yra6/xUntAOSZpXx
GmWRr+vUpzWeOIXrUQPmIqpStvvN2D0SVZbkSM/EoPQTdNseuD87hbdRScR/yQIx
/TCe4mUs1oqkbSrWkK3bIiM8jA771dwu2zFtmsIwSDhwIWmtlpbKuN07S22+R7UY
tR1/oeisPeOveo1mFRyG3OVh4eIy9cfCM0yV/5t2fsdqXWB0JxTWTlbwzkpDNWL4
ndxSUSK70iK91ovg+p22uc4uT3jUpT8OodlXSn4U7dLxx1LHgaIdEAOHu3u0/fFV
HlRi4Zx1Z6X/C/H6VF3JW02yZxQMmEqULwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FEIOYbVCHPfUodjKoTg3x2EC7vH1MB8GA1UdIwQYMBaAFMmKdqBtSyai6I/G8B/n
6u3/XHOyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dWY0NnYnk2RTJuYXBN
ZFY4N25UckhyUnJqUGpaWkFCMlROY1hyQmJtcThuLzAvQzk4QTc2QTA2RDRCMjZB
MkU4OEZDNkYwMUZFN0VBRURGRjVDNzNCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DOThBNzZBMDZENEIyNkEyRTg4RkM2RjAxRkU3RUFFREZGNUM3
M0IyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVmNDZ2J5NkUybmFwTWRWODdu
VHJIclJyalBqWlpBQjJUTmNYckJibXE4bi8wLzMxMzczNzJlMzYzNzJlMzgzNzJl
MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzMzMDMxMzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACxQ1cw
DQYJKoZIhvcNAQELBQADggEBAAzJAU0MhyGvyzHT1EScNudmogpK44FkvzKJsE4a
LiNAXEQrRIJwEKi2t3bJfpmByVz0BS09M60YyK6aBT/bNmm147GamJ6VkkLR4Yuh
NsJjUdTeSyW/U/PtMKdBb41i7/iD3QMz1f6XkeRuguXNDzC7LOXlrFDMcf84czZo
6CZiyoxl9yE4Qod94pd/HyFczI1zCiDZfv3mM50eLaOepSCB5mp/sNRAHWteZj0a
jQ1qYyHAFY8/SpwKetvewgqFCe64evrie9k/pZCQs8y5Ag8MPUAbvbGI8j5izV4i
vDTCO6Qd+pPDwPdKv5A9V8XzPWV6ziAH5O5j3I54ykVXKOE=
-----END CERTIFICATE-----
Generated at Sun Jun 22 21:56:43 2025 by rpki-client