Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a363a3a2f34382d3438203d3e203533303133.roa
File:                     323830343a3537343a363a3a2f34382d3438203d3e203533303133.roa (raw, json)
Hash identifier:          j2L8azJhyEyxbElJsQKVSc4AsdHslYyJ/oyyfzxKGGI=
Subject key identifier:   41:19:01:B8:0F:7F:72:1B:B0:F3:A7:3D:01:FC:06:18:EC:D6:C5:94
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       095637F12ED2A07FA1BCD8BDE1D02A4C80F66664
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a363a3a2f34382d3438203d3e203533303133.roa
Signing time:             Fri 20 Jun 2025 18:59:42 +0000
ROA not before:           Fri 20 Jun 2025 18:54:42 +0000
ROA not after:            Fri 19 Jun 2026 18:59:42 +0000
asID:                     53013
IP address blocks:        2804:574:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 03:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:56:37:f1:2e:d2:a0:7f:a1:bc:d8:bd:e1:d0:2a:4c:80:f6:66:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 20 18:54:42 2025 GMT
            Not After : Jun 19 18:59:42 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:64:80:99:f3:21:fe:68:77:7d:32:a3:b5:
                    fd:cd:76:59:2e:25:98:39:0c:8b:07:a7:40:3b:2b:
                    a6:38:13:5c:74:0f:1e:7f:ba:02:5f:8f:19:ed:46:
                    f8:10:ea:0d:25:3a:90:bf:d2:3c:18:a9:6d:14:e6:
                    35:c8:36:aa:8d:be:1f:c7:22:27:4a:d4:7e:6d:ad:
                    13:77:9b:cf:f7:e8:cf:a3:a7:03:28:7a:0f:71:00:
                    99:e4:28:64:ad:8c:53:06:ae:de:53:ba:56:dc:4e:
                    70:b7:71:44:1e:99:a0:fc:8f:3a:10:49:f7:01:4f:
                    1e:b4:19:2c:fb:0b:41:07:59:1c:f2:0a:ce:93:3e:
                    3e:34:10:3b:0e:a1:17:f9:75:12:97:1b:f7:bd:01:
                    e4:01:2c:9c:35:b4:b1:30:4a:e2:57:8d:47:e6:89:
                    9c:c6:05:27:81:e9:95:19:2a:df:98:07:5d:b3:e9:
                    b6:62:00:bd:47:01:7d:97:d2:38:94:f1:e8:9c:fc:
                    ec:e4:fe:60:3f:01:7d:0e:57:59:a1:63:5c:3b:40:
                    0d:5e:ef:ab:ad:63:3b:a8:9c:92:da:82:9c:79:5b:
                    37:ab:af:e0:6d:63:71:99:5a:93:74:7e:78:28:3d:
                    0d:f5:47:ce:66:5b:d2:d8:f7:ce:16:7e:fd:7f:62:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:19:01:B8:0F:7F:72:1B:B0:F3:A7:3D:01:FC:06:18:EC:D6:C5:94
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a363a3a2f34382d3438203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:48:5d:7d:d0:be:41:02:c9:a0:9e:4c:d8:3e:0e:e8:81:
         9f:83:3b:91:b1:69:a9:30:e6:8a:84:ec:ce:db:58:d5:70:c2:
         ba:bb:0c:07:ed:dc:1d:db:1e:22:a4:4f:36:a8:1c:9a:96:98:
         29:6b:18:55:c3:b9:34:ba:f0:20:8f:f9:3b:b1:ef:78:0b:92:
         f1:b1:97:29:24:ae:32:a5:71:cf:d7:9f:53:81:63:bc:76:99:
         4b:6d:8a:6f:f7:b8:72:db:9f:e7:16:2e:4f:88:2e:41:79:dd:
         3f:8a:66:e8:b5:ab:93:09:02:ee:18:b8:44:f7:a1:56:3e:c3:
         71:00:5e:72:f5:72:4e:16:d6:34:0b:84:40:03:9b:0e:ce:e8:
         33:0b:7f:34:71:3c:eb:d9:18:42:e1:23:73:c3:5a:5a:a1:14:
         e0:d3:28:1a:49:ee:e1:fa:50:04:f3:ee:c6:bf:62:ba:b1:a2:
         7d:50:b9:c5:e2:44:6c:7e:bc:b2:ef:b2:09:31:2f:cf:a7:f6:
         0d:4a:c6:53:1f:82:82:0f:17:8a:75:ca:28:cc:5a:25:a3:45:
         c5:ab:2f:42:60:ca:24:c4:89:4f:da:93:51:8c:3f:6d:2a:86:
         8e:b9:c8:ca:fe:e5:d4:aa:c1:66:20:cf:25:50:38:46:62:a2:
         2a:bf:7a:bf
-----BEGIN CERTIFICATE-----
MIIHRDCCBiygAwIBAgIUCVY38S7SoH+hvNi94dAqTID2ZmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk4QTc2QTA2RDRCMjZBMkU4OEZDNkYwMUZFN0VBRURG
RjVDNzNCMjAeFw0yNTA2MjAxODU0NDJaFw0yNjA2MTkxODU5NDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUUzRDY0ODA5OUYzMjFGRTY4
Nzc3RDMyQTNCNUZEQ0Q3NjU5MkUyNTk4MzkwQzhCMDdBNzQwM0IyQkE2MzgxMzVD
NzQwRjFFN0ZCQTAyNUY4RjE5RUQ0NkY4MTBFQTBEMjUzQTkwQkZEMjNDMThBOTZE
MTRFNjM1QzgzNkFBOERCRTFGQzcyMjI3NEFENDdFNkRBRDEzNzc5QkNGRjdFOENG
QTNBNzAzMjg3QTBGNzEwMDk5RTQyODY0QUQ4QzUzMDZBRURFNTNCQTU2REM0RTcw
Qjc3MTQ0MUU5OUEwRkM4RjNBMTA0OUY3MDE0RjFFQjQxOTJDRkIwQjQxMDc1OTFD
RjIwQUNFOTMzRTNFMzQxMDNCMEVBMTE3Rjk3NTEyOTcxQkY3QkQwMUU0MDEyQzlD
MzVCNEIxMzA0QUUyNTc4RDQ3RTY4OTlDQzYwNTI3ODFFOTk1MTkyQURGOTgwNzVE
QjNFOUI2NjIwMEJENDcwMTdEOTdEMjM4OTRGMUU4OUNGQ0VDRTRGRTYwM0YwMTdE
MEU1NzU5QTE2MzVDM0I0MDBENUVFRkFCQUQ2MzNCQTg5QzkyREE4MjlDNzk1QjM3
QUJBRkUwNkQ2MzcxOTk1QTkzNzQ3RTc4MjgzRDBERjU0N0NFNjY1QkQyRDhGN0NF
MTY3RUZEN0Y2MjU2REIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA7j1kgJnzIf5od30yo7X9zXZZLiWYOQyLB6dAOyumOBNcdA8ef7oC
X48Z7Ub4EOoNJTqQv9I8GKltFOY1yDaqjb4fxyInStR+ba0Td5vP9+jPo6cDKHoP
cQCZ5ChkrYxTBq7eU7pW3E5wt3FEHpmg/I86EEn3AU8etBks+wtBB1kc8grOkz4+
NBA7DqEX+XUSlxv3vQHkASycNbSxMEriV41H5omcxgUngemVGSrfmAdds+m2YgC9
RwF9l9I4lPHonPzs5P5gPwF9DldZoWNcO0ANXu+rrWM7qJyS2oKceVs3q6/gbWNx
mVqTdH54KD0N9UfOZlvS2PfOFn79f2JW2wIDAQABo4ICUjCCAk4wHQYDVR0OBBYE
FEEZAbgPf3IbsPOnPQH8Bhjs1sWUMB8GA1UdIwQYMBaAFMmKdqBtSyai6I/G8B/n
6u3/XHOyMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dWY0NnYnk2RTJuYXBN
ZFY4N25UckhyUnJqUGpaWkFCMlROY1hyQmJtcThuLzAvQzk4QTc2QTA2RDRCMjZB
MkU4OEZDNkYwMUZFN0VBRURGRjVDNzNCMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS9DOThBNzZBMDZENEIyNkEyRTg4RkM2RjAxRkU3RUFFREZGNUM3
M0IyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVmNDZ2J5NkUybmFwTWRWODdu
VHJIclJyalBqWlpBQjJUTmNYckJibXE4bi8wLzMyMzgzMDM0M2EzNTM3MzQzYTM2
M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzMzMwMzEzMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgE
BXQABjANBgkqhkiG9w0BAQsFAAOCAQEAI8ZIXX3QvkECyaCeTNg+DuiBn4M7kbFp
qTDmioTszttY1XDCursMB+3cHdseIqRPNqgcmpaYKWsYVcO5NLrwII/5O7HveAuS
8bGXKSSuMqVxz9efU4FjvHaZS22Kb/e4ctuf5xYuT4guQXndP4pm6LWrkwkC7hi4
RPehVj7DcQBecvVyThbWNAuEQAObDs7oMwt/NHE869kYQuEjc8NaWqEU4NMoGknu
4fpQBPPuxr9iurGifVC5xeJEbH68su+yCTEvz6f2DUrGUx+Cgg8XinXKKMxaJaNF
xasvQmDKJMSJT9qTUYw/bSqGjrnIyv7l1KrBZiDPJVA4RmKiKr96vw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:49:47 2025 by rpki-client