Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/323830313a38303a3166303a3a2f34382d3438203d3e203532393936.roa
File:                     323830313a38303a3166303a3a2f34382d3438203d3e203532393936.roa (raw, json)
Hash identifier:          L32PQMzTkCZK2JWtd4+u+cWP0et9QArqJnjma4hNWNg=
Subject key identifier:   31:5D:A7:CE:45:77:20:CD:C5:43:57:E9:3A:4E:A4:BD:33:B5:99:28
Certificate issuer:       /CN=98300A2AA67A942B94CBC198EA8F7537002C0480
Certificate serial:       7F4EAD7447DB4A3CE1B7525951C4470F4C14DA58
Authority key identifier: 98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/323830313a38303a3166303a3a2f34382d3438203d3e203532393936.roa
Signing time:             Wed 21 May 2025 13:48:50 +0000
ROA not before:           Wed 21 May 2025 13:43:50 +0000
ROA not after:            Wed 20 May 2026 13:48:50 +0000
asID:                     52996
IP address blocks:        2801:80:1f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl
                          rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 05:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:4e:ad:74:47:db:4a:3c:e1:b7:52:59:51:c4:47:0f:4c:14:da:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98300A2AA67A942B94CBC198EA8F7537002C0480
        Validity
            Not Before: May 21 13:43:50 2025 GMT
            Not After : May 20 13:48:50 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:b5:48:72:43:43:b2:ba:f7:a2:b0:2b:58:
                    c3:67:65:eb:0c:2f:32:37:1e:39:9f:18:b7:1d:e3:
                    ee:5f:f3:bf:cf:b1:9b:07:c9:82:6f:1f:60:42:92:
                    86:f7:58:25:5b:61:8b:fe:f4:59:51:b3:5c:c2:e0:
                    7e:9e:4c:4c:1c:95:53:17:1d:cf:f4:36:07:f7:7d:
                    f0:c6:b3:0a:a2:1c:1d:62:a7:d4:8a:8a:ab:b9:99:
                    73:d0:03:d5:ea:d8:39:fb:ea:4c:f5:42:12:bb:ab:
                    78:7d:6e:0f:f3:12:90:7c:2f:d8:d4:d2:ed:ab:d3:
                    a3:f3:84:54:9b:aa:cc:1f:77:9f:fc:ce:e4:0e:b9:
                    48:17:a1:7f:67:6f:12:bb:4c:88:90:5d:a4:b6:90:
                    b4:8e:b2:a5:d2:c0:82:df:6d:8c:a4:2e:e2:6a:ba:
                    32:04:6e:f6:da:6d:50:c5:dc:08:ec:c1:5f:6e:78:
                    0f:fd:43:9d:eb:03:77:1a:09:01:e3:24:53:80:6e:
                    8d:9c:37:7b:43:ab:b2:ef:76:5e:2c:03:a0:c3:b0:
                    11:de:4e:58:95:89:fe:89:cd:9c:7a:c7:6d:e4:1c:
                    e4:e2:9b:e7:67:19:5a:df:5a:7d:30:dd:21:01:34:
                    a3:35:25:34:d4:39:f5:02:06:12:30:ff:09:f2:83:
                    fc:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5D:A7:CE:45:77:20:CD:C5:43:57:E9:3A:4E:A4:BD:33:B5:99:28
            X509v3 Authority Key Identifier:
                keyid:98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/323830313a38303a3166303a3a2f34382d3438203d3e203532393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:1f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:97:f1:25:44:cd:1f:c2:08:39:28:f7:7e:1c:d6:d1:97:
         74:d3:e1:59:23:09:72:c5:ab:d8:1a:25:79:4f:45:7c:6b:d1:
         c1:15:0a:b1:16:86:65:8a:79:02:e6:c1:98:57:0d:60:b3:34:
         b2:72:38:93:f6:f3:cc:ae:e9:78:89:bf:d4:8d:d5:81:49:76:
         f7:71:0e:ad:1a:91:ad:20:57:d3:1c:d2:c4:57:c2:b1:3f:52:
         51:66:61:67:c5:00:3d:75:21:93:2c:c6:0c:ff:f0:8e:6b:de:
         bb:35:8a:fe:6e:5f:83:83:24:4b:a3:44:3a:fb:fe:73:9e:d8:
         8f:ac:89:65:84:df:c6:a1:6d:e2:52:db:78:e1:76:57:93:16:
         2a:63:47:af:d7:06:bb:bf:af:1a:ca:34:8d:2d:cb:bf:9e:99:
         ad:f5:dd:6e:b2:5d:4e:db:00:6e:48:cf:81:bf:1b:ce:e6:9c:
         9a:a6:bf:3e:2d:c6:a7:92:c6:0d:37:82:c3:6e:bc:cf:a3:ae:
         ef:5c:31:9b:f5:2d:49:4c:2e:05:2d:4f:5a:47:db:7e:d8:27:
         9d:b6:c5:54:f2:a1:b2:c4:9a:23:db:55:23:13:16:4f:7c:b2:
         fc:1c:eb:c2:87:13:5b:b2:ba:24:82:a7:7a:1d:dc:28:6b:bf:
         4e:06:1e:3a
-----BEGIN CERTIFICATE-----
MIIHRjCCBi6gAwIBAgIUf06tdEfbSjzht1JZUcRHD0wU2lgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgzMDBBMkFBNjdBOTQyQjk0Q0JDMTk4RUE4Rjc1Mzcw
MDJDMDQ4MDAeFw0yNTA1MjExMzQzNTBaFw0yNjA1MjAxMzQ4NTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQThENkI1NDg3MjQzNDNCMkJB
RjdBMkIwMkI1OEMzNjc2NUVCMEMyRjMyMzcxRTM5OUYxOEI3MURFM0VFNUZGM0JG
Q0ZCMTlCMDdDOTgyNkYxRjYwNDI5Mjg2Rjc1ODI1NUI2MThCRkVGNDU5NTFCMzVD
QzJFMDdFOUU0QzRDMUM5NTUzMTcxRENGRjQzNjA3Rjc3REYwQzZCMzBBQTIxQzFE
NjJBN0Q0OEE4QUFCQjk5OTczRDAwM0Q1RUFEODM5RkJFQTRDRjU0MjEyQkJBQjc4
N0Q2RTBGRjMxMjkwN0MyRkQ4RDREMkVEQUJEM0EzRjM4NDU0OUJBQUNDMUY3NzlG
RkNDRUU0MEVCOTQ4MTdBMTdGNjc2RjEyQkI0Qzg4OTA1REE0QjY5MEI0OEVCMkE1
RDJDMDgyREY2RDhDQTQyRUUyNkFCQTMyMDQ2RUY2REE2RDUwQzVEQzA4RUNDMTVG
NkU3ODBGRkQ0MzlERUIwMzc3MUEwOTAxRTMyNDUzODA2RThEOUMzNzdCNDNBQkIy
RUY3NjVFMkMwM0EwQzNCMDExREU0RTU4OTU4OUZFODlDRDlDN0FDNzZERTQxQ0U0
RTI5QkU3NjcxOTVBREY1QTdEMzBERDIxMDEzNEEzMzUyNTM0RDQzOUY1MDIwNjEy
MzBGRjA5RjI4M0ZDQ0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqNa1SHJDQ7K696KwK1jDZ2XrDC8yNx45nxi3HePuX/O/z7GbB8mC
bx9gQpKG91glW2GL/vRZUbNcwuB+nkxMHJVTFx3P9DYH933wxrMKohwdYqfUioqr
uZlz0APV6tg5++pM9UISu6t4fW4P8xKQfC/Y1NLtq9Oj84RUm6rMH3ef/M7kDrlI
F6F/Z28Su0yIkF2ktpC0jrKl0sCC322MpC7iaroyBG722m1QxdwI7MFfbngP/UOd
6wN3GgkB4yRTgG6NnDd7Q6uy73ZeLAOgw7AR3k5YlYn+ic2cesdt5Bzk4pvnZxla
31p9MN0hATSjNSU01Dn1AgYSMP8J8oP8ywIDAQABo4ICVDCCAlAwHQYDVR0OBBYE
FDFdp85FdyDNxUNX6TpOpL0ztZkoMB8GA1UdIwQYMBaAFJgwCiqmepQrlMvBmOqP
dTcALASAMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dnS1lSQXU3RTQ1VzlF
R3F6a3JLanhvR2dTNXVtTU00TFU3M242Ym1wY3Z3LzEvOTgzMDBBMkFBNjdBOTQy
Qjk0Q0JDMTk4RUE4Rjc1MzcwMDJDMDQ4MC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS85ODMwMEEyQUE2N0E5NDJCOTRDQkMxOThFQThGNzUzNzAwMkMw
NDgwLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HZ0tZUkF1N0U0NVc5RUdxemty
S2p4b0dnUzV1bU1NNExVNzNuNmJtcGN2dy8xLzMyMzgzMDMxM2EzODMwM2EzMTY2
MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMyMzkzOTM2LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcA
KAEAgAHwMA0GCSqGSIb3DQEBCwUAA4IBAQAcL5fxJUTNH8IIOSj3fhzW0Zd00+FZ
IwlyxavYGiV5T0V8a9HBFQqxFoZlinkC5sGYVw1gszSycjiT9vPMrul4ib/UjdWB
SXb3cQ6tGpGtIFfTHNLEV8KxP1JRZmFnxQA9dSGTLMYM//COa967NYr+bl+DgyRL
o0Q6+/5zntiPrIllhN/GoW3iUtt44XZXkxYqY0ev1wa7v68ayjSNLcu/npmt9d1u
sl1O2wBuSM+BvxvO5pyapr8+LcanksYNN4LDbrzPo67vXDGb9S1JTC4FLU9aR9t+
2CedtsVU8qGyxJoj21UjExZPfLL8HOvChxNbsrokgqd6Hdwoa79OBh46
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:49:22 2025 by rpki-client