Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a653030303a3a2f33352d3335203d3e203533303133.roa
File:                     323830343a3537343a653030303a3a2f33352d3335203d3e203533303133.roa (raw, json)
Hash identifier:          uDsbJa5JLLK0VKZapkSAOEdetUTd2Bv7K0nyqWn4EUQ=
Subject key identifier:   85:9B:A9:6E:14:43:26:FF:D9:18:21:F2:F7:E5:BD:A2:F1:57:2B:FA
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       62CD299ED75AD4E07BDE93D3796D6900FB68C592
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a653030303a3a2f33352d3335203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:05:41 +0000
ROA not before:           Wed 18 Jun 2025 16:00:41 +0000
ROA not after:            Wed 17 Jun 2026 16:05:41 +0000
asID:                     53013
IP address blocks:        2804:574:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cd:29:9e:d7:5a:d4:e0:7b:de:93:d3:79:6d:69:00:fb:68:c5:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 16:00:41 2025 GMT
            Not After : Jun 17 16:05:41 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:ac:23:3e:88:5a:ad:8d:0b:b6:fd:c0:33:
                    e2:c7:0d:0c:d8:db:2b:b9:8d:72:25:20:15:da:b0:
                    78:76:27:77:aa:94:90:12:98:c8:86:db:45:de:f3:
                    29:6b:e7:69:d6:a9:cc:b4:40:b5:a5:b5:6e:4e:ac:
                    f9:be:bf:8b:9c:88:75:4a:24:ae:b8:3a:00:49:9f:
                    c3:95:78:18:3c:fe:49:aa:5e:f9:d2:7f:c0:7f:2c:
                    db:6f:12:f0:db:91:c0:33:4f:ce:91:fa:fb:67:59:
                    dc:11:df:10:55:14:2d:03:99:17:18:32:88:55:43:
                    c9:ba:3f:32:f1:9f:f6:1e:d7:26:ea:68:98:0d:1b:
                    07:14:26:7c:7c:3c:44:48:50:65:e5:96:24:91:07:
                    70:64:5f:b6:40:be:4c:52:8b:4d:a9:4f:6d:20:bb:
                    3c:71:6e:81:fc:6b:1d:b1:5a:b3:e0:cc:44:d4:cc:
                    1b:d8:5f:54:b7:57:43:f5:f5:ff:17:89:e6:99:7e:
                    3b:54:58:ea:cf:dc:60:2c:4b:86:6f:62:c1:41:1a:
                    e7:fa:94:dd:24:8b:d7:bb:60:0e:0c:f6:7b:79:10:
                    55:6b:bf:01:7d:f8:ae:40:bf:1e:3e:de:0f:4e:65:
                    42:a0:7a:25:26:90:83:39:73:ce:fb:26:37:c1:e1:
                    ee:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:9B:A9:6E:14:43:26:FF:D9:18:21:F2:F7:E5:BD:A2:F1:57:2B:FA
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a653030303a3a2f33352d3335203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8e:c1:7c:45:8f:c0:a4:ee:59:b6:97:f6:f7:95:5e:e4:c8:98:
         6a:d8:a9:ff:f4:d8:1f:f7:65:d9:17:b8:29:c7:b8:22:a6:bc:
         6b:6d:9f:b9:e5:78:0f:e0:43:72:d7:72:28:75:52:4b:71:72:
         cd:fb:0f:7c:bc:83:62:5c:2f:88:3f:c0:2b:9d:af:83:76:28:
         6e:e3:31:09:a4:e6:fd:87:88:33:a3:ad:02:07:e1:70:5d:43:
         f5:82:71:ba:fa:f3:e3:78:f8:95:e4:92:cd:5b:c2:47:10:3b:
         4f:bc:5a:63:57:b6:7e:6d:c1:4c:6d:24:03:fe:bf:b1:a6:b4:
         3e:3c:1c:c5:12:60:45:ae:3f:0d:39:0a:aa:cd:c4:3e:96:3b:
         42:ad:92:38:64:54:0e:a3:2e:20:3b:d7:6d:72:57:4d:3d:9f:
         69:f3:c4:67:a0:ea:9d:0d:d6:5e:9e:5f:09:a1:99:54:07:80:
         2b:13:3c:30:0b:6b:ac:a7:b9:68:52:c6:06:32:7d:c5:71:06:
         e1:50:4e:ed:23:b5:f7:4c:1c:0e:d6:17:a0:65:84:55:8a:c4:
         49:12:20:24:4e:ac:e2:13:12:43:8c:9c:3f:b0:2f:f0:b0:09:
         5b:c3:c7:49:38:9f:15:bf:ee:6e:08:59:c8:bf:27:b7:e9:f2:
         98:8c:bb:4a
-----BEGIN CERTIFICATE-----
MIIHSTCCBjGgAwIBAgIUYs0pntda1OB73pPTeW1pAPtoxZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk4QTc2QTA2RDRCMjZBMkU4OEZDNkYwMUZFN0VBRURG
RjVDNzNCMjAeFw0yNTA2MTgxNjAwNDFaFw0yNjA2MTcxNjA1NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTlCMUFDMjMzRTg4NUFBRDhE
MEJCNkZEQzAzM0UyQzcwRDBDRDhEQjJCQjk4RDcyMjUyMDE1REFCMDc4NzYyNzc3
QUE5NDkwMTI5OEM4ODZEQjQ1REVGMzI5NkJFNzY5RDZBOUNDQjQ0MEI1QTVCNTZF
NEVBQ0Y5QkVCRjhCOUM4ODc1NEEyNEFFQjgzQTAwNDk5RkMzOTU3ODE4M0NGRTQ5
QUE1RUY5RDI3RkMwN0YyQ0RCNkYxMkYwREI5MUMwMzM0RkNFOTFGQUZCNjc1OURD
MTFERjEwNTUxNDJEMDM5OTE3MTgzMjg4NTU0M0M5QkEzRjMyRjE5RkY2MUVENzI2
RUE2ODk4MEQxQjA3MTQyNjdDN0MzQzQ0NDg1MDY1RTU5NjI0OTEwNzcwNjQ1RkI2
NDBCRTRDNTI4QjREQTk0RjZEMjBCQjNDNzE2RTgxRkM2QjFEQjE1QUIzRTBDQzQ0
RDRDQzFCRDg1RjU0Qjc1NzQzRjVGNUZGMTc4OUU2OTk3RTNCNTQ1OEVBQ0ZEQzYw
MkM0Qjg2NkY2MkMxNDExQUU3RkE5NEREMjQ4QkQ3QkI2MDBFMENGNjdCNzkxMDU1
NkJCRjAxN0RGOEFFNDBCRjFFM0VERTBGNEU2NTQyQTA3QTI1MjY5MDgzMzk3M0NF
RkIyNjM3QzFFMUVFMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqbGsIz6IWq2NC7b9wDPixw0M2NsruY1yJSAV2rB4did3qpSQEpjI
httF3vMpa+dp1qnMtEC1pbVuTqz5vr+LnIh1SiSuuDoASZ/DlXgYPP5Jql750n/A
fyzbbxLw25HAM0/Okfr7Z1ncEd8QVRQtA5kXGDKIVUPJuj8y8Z/2Htcm6miYDRsH
FCZ8fDxESFBl5ZYkkQdwZF+2QL5MUotNqU9tILs8cW6B/GsdsVqz4MxE1Mwb2F9U
t1dD9fX/F4nmmX47VFjqz9xgLEuGb2LBQRrn+pTdJIvXu2AODPZ7eRBVa78Bffiu
QL8ePt4PTmVCoHolJpCDOXPO+yY3weHuHwIDAQABo4ICVzCCAlMwHQYDVR0OBBYE
FIWbqW4UQyb/2Rgh8vflvaLxVyv6MB8GA1UdIwQYMBaAFMmKdqBtSyai6I/G8B/n
6u3/XHOyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dWY0NnYnk2RTJuYXBN
ZFY4N25UckhyUnJqUGpaWkFCMlROY1hyQmJtcThuLzAvQzk4QTc2QTA2RDRCMjZB
MkU4OEZDNkYwMUZFN0VBRURGRjVDNzNCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DOThBNzZBMDZENEIyNkEyRTg4RkM2RjAxRkU3RUFFREZGNUM3
M0IyLmNlcjCBsgYIKwYBBQUHAQsEgaUwgaIwgZ8GCCsGAQUFBzALhoGScnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVmNDZ2J5NkUybmFwTWRWODdu
VHJIclJyalBqWlpBQjJUTmNYckJibXE4bi8wLzMyMzgzMDM0M2EzNTM3MzQzYTY1
MzAzMDMwM2EzYTJmMzMzNTJkMzMzNTIwM2QzZTIwMzUzMzMwMzEzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIw
CAMGBSgEBXTgMA0GCSqGSIb3DQEBCwUAA4IBAQCOwXxFj8Ck7lm2l/b3lV7kyJhq
2Kn/9Ngf92XZF7gpx7giprxrbZ+55XgP4ENy13IodVJLcXLN+w98vINiXC+IP8Ar
na+Ddihu4zEJpOb9h4gzo60CB+FwXUP1gnG6+vPjePiV5JLNW8JHEDtPvFpjV7Z+
bcFMbSQD/r+xprQ+PBzFEmBFrj8NOQqqzcQ+ljtCrZI4ZFQOoy4gO9dtcldNPZ9p
88RnoOqdDdZenl8JoZlUB4ArEzwwC2usp7loUsYGMn3FcQbhUE7tI7X3TBwO1heg
ZYRVisRJEiAkTqziExJDjJw/sC/wsAlbw8dJOJ8Vv+5uCFnIvye36fKYjLtK
-----END CERTIFICATE-----
Generated at Mon Jun 23 03:28:11 2025 by rpki-client