Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa
File:                     3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa (raw, json)
Hash identifier:          AT+dIfXK6YHynY77TvNLA4KklOM4OgOvMfgFc7ApT4M=
Subject key identifier:   28:BD:94:B9:82:15:A5:2B:54:84:C5:CA:C5:00:B2:E1:18:E1:C2:3D
Certificate issuer:       /CN=98300A2AA67A942B94CBC198EA8F7537002C0480
Certificate serial:       29BA4D68D8FF7F5E995960C766BBEA3BB41F1848
Authority key identifier: 98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa
Signing time:             Wed 21 May 2025 13:48:50 +0000
ROA not before:           Wed 21 May 2025 13:43:50 +0000
ROA not after:            Wed 20 May 2026 13:48:50 +0000
asID:                     52996
IP address blocks:        186.232.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl
                          rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 05:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ba:4d:68:d8:ff:7f:5e:99:59:60:c7:66:bb:ea:3b:b4:1f:18:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98300A2AA67A942B94CBC198EA8F7537002C0480
        Validity
            Not Before: May 21 13:43:50 2025 GMT
            Not After : May 20 13:48:50 2026 GMT
        Subject: CN=3082010A0282010100AF233F3C43417030723C0C7D84BFB231B831A1680895E89CE19886D0FC5CD24E0DC0F839B5C86A84567F6E053BF6EDCCC6FF531479FE695E0FA76210C80BC5F4F80A9E575DD9B4625B14B3303D095E0FBBAE31DC835A042936338D40E7B5A3302F36D81823601ABE421535C575CDAEC875025410C0263685DE17698AF2B8044F5AD6077038532901F612407ED374A975041590FB1238512E96E24CCBFBEA7EC5CA0B0C84FBC41E86D61B920EC63AAC35C96BAC66E33AAE58753562DF511B2A558F8C477F574987851D34FC20569E4382DC05D664F5AD9586F5DA3DFB975F14752E817FEB2C7BF8D93A25DC3150197C61BC35B927AB0A4E5BC9819BF53B1FE7070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:3f:3c:43:41:70:30:72:3c:0c:7d:84:bf:
                    b2:31:b8:31:a1:68:08:95:e8:9c:e1:98:86:d0:fc:
                    5c:d2:4e:0d:c0:f8:39:b5:c8:6a:84:56:7f:6e:05:
                    3b:f6:ed:cc:c6:ff:53:14:79:fe:69:5e:0f:a7:62:
                    10:c8:0b:c5:f4:f8:0a:9e:57:5d:d9:b4:62:5b:14:
                    b3:30:3d:09:5e:0f:bb:ae:31:dc:83:5a:04:29:36:
                    33:8d:40:e7:b5:a3:30:2f:36:d8:18:23:60:1a:be:
                    42:15:35:c5:75:cd:ae:c8:75:02:54:10:c0:26:36:
                    85:de:17:69:8a:f2:b8:04:4f:5a:d6:07:70:38:53:
                    29:01:f6:12:40:7e:d3:74:a9:75:04:15:90:fb:12:
                    38:51:2e:96:e2:4c:cb:fb:ea:7e:c5:ca:0b:0c:84:
                    fb:c4:1e:86:d6:1b:92:0e:c6:3a:ac:35:c9:6b:ac:
                    66:e3:3a:ae:58:75:35:62:df:51:1b:2a:55:8f:8c:
                    47:7f:57:49:87:85:1d:34:fc:20:56:9e:43:82:dc:
                    05:d6:64:f5:ad:95:86:f5:da:3d:fb:97:5f:14:75:
                    2e:81:7f:eb:2c:7b:f8:d9:3a:25:dc:31:50:19:7c:
                    61:bc:35:b9:27:ab:0a:4e:5b:c9:81:9b:f5:3b:1f:
                    e7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BD:94:B9:82:15:A5:2B:54:84:C5:CA:C5:00:B2:E1:18:E1:C2:3D
            X509v3 Authority Key Identifier:
                keyid:98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:68:52:15:d3:6f:2d:f1:99:5e:97:b8:a8:6c:bf:b3:19:
         2e:9b:c3:fb:76:8c:99:35:98:a1:61:22:8a:61:45:27:c0:9e:
         93:ba:17:a9:4f:73:39:e7:a0:09:1d:ca:83:d1:c3:64:e0:fa:
         00:58:8b:7f:3d:1f:87:2e:05:16:a5:0c:c5:48:31:50:82:78:
         de:04:a5:db:2f:5b:ac:f4:e1:4a:a1:c8:2d:04:29:de:29:44:
         78:4a:04:3c:21:dc:ce:7c:18:50:68:6f:e0:f3:7e:a3:6a:78:
         8a:35:32:0b:f7:41:af:17:e5:23:69:3c:9b:6b:09:de:bf:eb:
         43:0d:23:9a:d7:35:42:cd:83:5b:d6:de:89:39:f5:5d:8d:a8:
         73:74:57:b6:a0:fb:16:da:99:a2:a4:85:99:ab:59:e6:88:f2:
         69:47:ce:fb:05:4d:d8:df:e2:fb:ce:24:83:76:9a:2d:b2:d9:
         23:e4:78:95:e2:82:90:39:8b:4f:da:12:bf:02:86:7c:ca:39:
         81:3b:71:0a:c1:3b:bd:0b:07:15:e1:ba:9f:27:ce:eb:c4:29:
         82:b5:93:75:5c:8d:9f:a4:e8:df:e9:58:a4:18:29:ee:26:b3:
         0a:f7:5a:a5:c7:1e:dc:d0:eb:9a:cc:5d:92:45:3f:21:70:27:
         93:27:74:bb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUKbpNaNj/f16ZWWDHZrvqO7QfGEgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzMDBBMkFBNjdBOTQyQjk0Q0JDMTk4RUE4Rjc1Mzcw
MDJDMDQ4MDAeFw0yNTA1MjExMzQzNTBaFw0yNjA1MjAxMzQ4NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUYyMzNGM0M0MzQxNzAzMDcy
M0MwQzdEODRCRkIyMzFCODMxQTE2ODA4OTVFODlDRTE5ODg2RDBGQzVDRDI0RTBE
QzBGODM5QjVDODZBODQ1NjdGNkUwNTNCRjZFRENDQzZGRjUzMTQ3OUZFNjk1RTBG
QTc2MjEwQzgwQkM1RjRGODBBOUU1NzVERDlCNDYyNUIxNEIzMzAzRDA5NUUwRkJC
QUUzMURDODM1QTA0MjkzNjMzOEQ0MEU3QjVBMzMwMkYzNkQ4MTgyMzYwMUFCRTQy
MTUzNUM1NzVDREFFQzg3NTAyNTQxMEMwMjYzNjg1REUxNzY5OEFGMkI4MDQ0RjVB
RDYwNzcwMzg1MzI5MDFGNjEyNDA3RUQzNzRBOTc1MDQxNTkwRkIxMjM4NTEyRTk2
RTI0Q0NCRkJFQTdFQzVDQTBCMEM4NEZCQzQxRTg2RDYxQjkyMEVDNjNBQUMzNUM5
NkJBQzY2RTMzQUFFNTg3NTM1NjJERjUxMUIyQTU1OEY4QzQ3N0Y1NzQ5ODc4NTFE
MzRGQzIwNTY5RTQzODJEQzA1RDY2NEY1QUQ5NTg2RjVEQTNERkI5NzVGMTQ3NTJF
ODE3RkVCMkM3QkY4RDkzQTI1REMzMTUwMTk3QzYxQkMzNUI5MjdBQjBBNEU1QkM5
ODE5QkY1M0IxRkU3MDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAryM/PENBcDByPAx9hL+yMbgxoWgIleic4ZiG0Pxc0k4NwPg5tchq
hFZ/bgU79u3Mxv9TFHn+aV4Pp2IQyAvF9PgKnldd2bRiWxSzMD0JXg+7rjHcg1oE
KTYzjUDntaMwLzbYGCNgGr5CFTXFdc2uyHUCVBDAJjaF3hdpivK4BE9a1gdwOFMp
AfYSQH7TdKl1BBWQ+xI4US6W4kzL++p+xcoLDIT7xB6G1huSDsY6rDXJa6xm4zqu
WHU1Yt9RGypVj4xHf1dJh4UdNPwgVp5DgtwF1mT1rZWG9do9+5dfFHUugX/rLHv4
2Tol3DFQGXxhvDW5J6sKTlvJgZv1Ox/nBwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FCi9lLmCFaUrVITFysUAsuEY4cI9MB8GA1UdIwQYMBaAFJgwCiqmepQrlMvBmOqP
dTcALASAMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnS1lSQXU3RTQ1VzlF
R3F6a3JLanhvR2dTNXVtTU00TFU3M242Ym1wY3Z3LzEvOTgzMDBBMkFBNjdBOTQy
Qjk0Q0JDMTk4RUE4Rjc1MzcwMDJDMDQ4MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85ODMwMEEyQUE2N0E5NDJCOTRDQkMxOThFQThGNzUzNzAwMkMw
NDgwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZ0tZUkF1N0U0NVc5RUdxemty
S2p4b0dnUzV1bU1NNExVNzNuNmJtcGN2dy8xLzMxMzgzNjJlMzIzMzMyMmUzMjM0
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTMyMzkzOTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
uuj3MA0GCSqGSIb3DQEBCwUAA4IBAQBIGmhSFdNvLfGZXpe4qGy/sxkum8P7doyZ
NZihYSKKYUUnwJ6TuhepT3M556AJHcqD0cNk4PoAWIt/PR+HLgUWpQzFSDFQgnje
BKXbL1us9OFKocgtBCneKUR4SgQ8IdzOfBhQaG/g836janiKNTIL90GvF+UjaTyb
awnev+tDDSOa1zVCzYNb1t6JOfVdjahzdFe2oPsW2pmipIWZq1nmiPJpR877BU3Y
3+L7ziSDdpotstkj5HiV4oKQOYtP2hK/AoZ8yjmBO3EKwTu9CwcV4bqfJ87rxCmC
tZN1XI2fpOjf6VikGCnuJrMK91qlxx7c0OuazF2SRT8hcCeTJ3S7
-----END CERTIFICATE-----
Generated at Mon Jun 9 13:22:22 2025 by rpki-client