Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa
File:                     3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          qOYxKSbXFMWYCMCd0cfHsLap9YWtU6g/mQikYImWVDs=
Subject key identifier:   AB:48:24:8B:4C:79:D8:04:C8:CE:D4:D7:9C:E1:20:D4:6B:D8:B2:0D
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       4D424B28337158CB427D204B57CC4CF557B03480
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa
Signing time:             Sat 01 Feb 2025 19:55:48 +0000
ROA not before:           Sat 01 Feb 2025 19:50:48 +0000
ROA not after:            Sat 31 Jan 2026 19:55:48 +0000
asID:                     271080
IP address blocks:        177.86.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:42:4b:28:33:71:58:cb:42:7d:20:4b:57:cc:4c:f5:57:b0:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Feb  1 19:50:48 2025 GMT
            Not After : Jan 31 19:55:48 2026 GMT
        Subject: CN=AB48248B4C79D804C8CED4D79CE120D46BD8B20D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:b0:e4:7e:22:05:21:25:64:42:e4:7e:bb:
                    1f:c1:0a:22:a9:24:60:e9:e3:cc:63:c6:a5:e0:ca:
                    39:dc:06:ff:88:e4:d3:f1:4c:92:25:06:85:be:56:
                    81:fa:30:f1:ef:79:a2:05:bc:5a:e7:91:b1:f8:17:
                    9e:1e:6b:83:f0:1b:44:f2:15:d2:5e:76:a5:8a:12:
                    5a:40:53:cd:ad:63:11:05:5a:5c:46:21:2b:d4:78:
                    cc:fa:5f:87:ea:40:39:45:3c:22:f6:38:31:e5:be:
                    d8:49:6c:97:b2:40:7b:cf:db:db:25:ff:cd:ec:e5:
                    a0:82:3c:51:f3:88:d8:b4:97:ae:bf:c7:9f:25:0d:
                    92:98:69:c4:94:b1:8b:b7:17:f2:b7:6e:c8:1a:01:
                    9a:52:ce:3b:83:22:8a:d7:5a:3a:c1:a6:12:a4:8d:
                    35:d6:de:3b:92:87:55:a5:5d:bd:b9:0b:da:a8:2f:
                    e7:b0:f2:fa:65:9b:1b:1f:58:9a:fe:8e:95:f3:1a:
                    77:72:75:90:fa:c5:e8:42:b6:33:53:fa:52:ce:58:
                    65:da:8a:ad:52:74:91:77:f2:6b:a9:11:a9:5b:50:
                    4c:f0:70:03:fc:7d:f1:21:b2:87:2f:83:f4:b0:a3:
                    b4:41:34:b4:81:75:b6:77:30:8a:91:13:c9:2e:8f:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:48:24:8B:4C:79:D8:04:C8:CE:D4:D7:9C:E1:20:D4:6B:D8:B2:0D
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133382e302f32342d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:3d:3d:f0:bd:e8:35:5f:5a:e7:fb:73:95:57:e0:ad:e3:07:
         e0:61:f2:09:af:8f:38:df:65:87:f9:44:0c:38:a1:e9:3b:ac:
         37:ed:85:cf:37:11:23:5b:5a:bc:1b:ce:c0:90:cb:09:a5:30:
         b8:fb:f4:6f:0b:0e:cf:da:8d:c6:8d:3e:1e:95:de:8d:b8:6b:
         a1:aa:5a:4c:cc:24:de:44:5a:44:da:bb:53:b2:a7:f8:8a:48:
         4a:cf:07:53:b0:bf:16:88:b5:63:f2:e5:35:57:4d:56:6f:98:
         20:5c:83:fe:19:1b:c2:81:37:00:d2:b3:71:1c:4c:fd:f1:b1:
         cd:cc:67:1e:41:83:6c:c1:46:0c:0a:2c:9e:40:1a:2c:5f:52:
         5a:a3:29:45:b1:6f:00:87:ea:13:87:85:85:eb:36:21:9f:03:
         a1:da:0e:c6:82:14:6f:c0:12:8a:44:98:40:67:52:da:7f:0a:
         d2:aa:08:d7:28:72:8b:48:b4:27:25:c5:df:4c:8b:07:6c:27:
         03:b3:69:d6:94:2c:63:0f:be:c0:33:29:86:7e:cc:5d:bc:c4:
         76:78:35:23:87:7d:48:ee:92:73:83:a6:c5:e2:7f:00:2c:6b:
         7b:9d:e6:42:7c:71:42:d7:90:5c:54:86:ba:e3:03:a5:52:b3:
         b6:a5:38:68
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTUJLKDNxWMtCfSBLV8xM9VewNIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgwN0JDNjJERDlCNDNCNTgwNUQ4OTE5Qjg2MjZGM0E4
RUQyRjhENDAeFw0yNTAyMDExOTUwNDhaFw0yNjAxMzExOTU1NDhaMDMxMTAvBgNV
BAMTKEFCNDgyNDhCNEM3OUQ4MDRDOENFRDRENzlDRTEyMEQ0NkJEOEIyMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOIrDkfiIFISVkQuR+ux/BCiKp
JGDp48xjxqXgyjncBv+I5NPxTJIlBoW+VoH6MPHveaIFvFrnkbH4F54ea4PwG0Ty
FdJedqWKElpAU82tYxEFWlxGISvUeMz6X4fqQDlFPCL2ODHlvthJbJeyQHvP29sl
/83s5aCCPFHziNi0l66/x58lDZKYacSUsYu3F/K3bsgaAZpSzjuDIorXWjrBphKk
jTXW3juSh1WlXb25C9qoL+ew8vplmxsfWJr+jpXzGndydZD6xehCtjNT+lLOWGXa
iq1SdJF38mupEalbUEzwcAP8ffEhsocvg/Swo7RBNLSBdbZ3MIqRE8kuj7VFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUq0gki0x52ATIztTXnOEg1GvYsg0wHwYDVR0j
BBgwFoAUmAe8Yt2bQ7WAXYkZuGJvOo7S+NQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tRazJ6NGJzRjVzWUp6YjkxekI2NUU4dFZzSFFBUXVnaFp3TTI0TWI1
Z1EvMS85ODA3QkM2MkREOUI0M0I1ODA1RDg5MTlCODYyNkYzQThFRDJGOEQ0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4MDdCQzYyREQ5QjQzQjU4
MDVEODkxOUI4NjI2RjNBOEVEMkY4RDQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drUWsyejRic0Y1c1lKemI5MXpCNjVFOHRWc0hRQVF1Z2had00yNE1iNWdRLzEv
MzEzNzM3MmUzODM2MmUzMTMzMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMDM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACxVoowDQYJKoZIhvcNAQELBQADggEBAEY9PfC9
6DVfWuf7c5VX4K3jB+Bh8gmvjzjfZYf5RAw4oek7rDfthc83ESNbWrwbzsCQywml
MLj79G8LDs/ajcaNPh6V3o24a6GqWkzMJN5EWkTau1Oyp/iKSErPB1OwvxaItWPy
5TVXTVZvmCBcg/4ZG8KBNwDSs3EcTP3xsc3MZx5Bg2zBRgwKLJ5AGixfUlqjKUWx
bwCH6hOHhYXrNiGfA6HaDsaCFG/AEopEmEBnUtp/CtKqCNcocotItCclxd9Miwds
JwOzadaULGMPvsAzKYZ+zF28xHZ4NSOHfUjuknODpsXifwAsa3ud5kJ8cULXkFxU
hrrjA6VSs7alOGg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:51:09 2025 by rpki-client