Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133392e302f32342d3234203d3e20323731303830.roa
File:                     3137372e38362e3133392e302f32342d3234203d3e20323731303830.roa (raw, json)
Hash identifier:          cFBXGMUIwpvstinGqmfTxtN04/8OHzSPNQ71b7NtOq4=
Subject key identifier:   1E:2C:31:84:93:F4:25:E8:90:E2:65:21:55:01:A3:19:B6:1F:A7:9E
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       5263579038C67286D5CBE6E20DDC1F450A1BF4DB
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133392e302f32342d3234203d3e20323731303830.roa
Signing time:             Sat 01 Feb 2025 19:55:52 +0000
ROA not before:           Sat 01 Feb 2025 19:50:52 +0000
ROA not after:            Sat 31 Jan 2026 19:55:52 +0000
asID:                     271080
IP address blocks:        177.86.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:63:57:90:38:c6:72:86:d5:cb:e6:e2:0d:dc:1f:45:0a:1b:f4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Feb  1 19:50:52 2025 GMT
            Not After : Jan 31 19:55:52 2026 GMT
        Subject: CN=1E2C318493F425E890E265215501A319B61FA79E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b4:4f:e2:6b:ad:49:35:9e:3f:70:fb:86:8a:
                    2b:c9:e8:5d:98:73:0d:a3:31:21:ee:90:b6:52:df:
                    31:f8:f3:56:53:cb:3e:32:21:81:96:75:fd:7e:fc:
                    cc:6d:f7:91:c1:b6:ed:7d:74:ea:25:19:57:89:96:
                    0a:7a:9f:ae:a8:fd:f2:43:f2:96:a8:ed:bf:eb:b5:
                    4d:0d:0f:7b:a7:af:af:06:96:1d:01:dd:2f:ab:2f:
                    44:aa:f3:7f:d5:ae:bb:41:84:06:67:c5:99:ba:7f:
                    f0:7e:f8:f7:38:29:db:b8:b5:48:cc:d3:16:d0:ad:
                    f0:b9:7a:e1:20:50:88:14:28:d4:34:81:8e:41:64:
                    4d:52:81:03:08:fb:f1:33:a4:da:84:73:e2:6c:37:
                    1a:e5:47:c0:df:2f:de:14:01:95:af:cd:fa:0c:ab:
                    c9:3f:39:51:05:df:3f:8d:09:7a:30:37:08:73:93:
                    de:81:66:41:b0:12:34:9e:ce:e4:41:00:31:9a:62:
                    4b:c5:4f:6c:cc:24:8c:a0:7d:f3:fd:60:fd:6a:ae:
                    8f:25:77:5a:f0:e6:e3:89:88:01:bc:dd:34:82:81:
                    8a:fd:87:7c:ff:82:bf:7b:80:bc:be:53:e8:07:0f:
                    ee:03:fd:e4:4c:60:64:a9:40:77:d3:ef:1e:1f:28:
                    e0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:31:84:93:F4:25:E8:90:E2:65:21:55:01:A3:19:B6:1F:A7:9E
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/3137372e38362e3133392e302f32342d3234203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:11:ed:0e:0c:58:94:1b:05:cb:f3:85:84:d9:e1:cc:ea:
         f6:17:6b:c4:f6:83:7c:f8:ba:02:ac:85:fd:da:b1:10:fc:06:
         77:4b:76:52:da:73:1c:29:2c:62:34:02:cc:25:a7:ff:b2:48:
         f8:04:ca:95:7e:22:69:69:ca:43:c4:cb:e3:5c:c5:80:3e:bb:
         2c:45:94:b8:d4:9f:37:a0:33:b6:60:f8:d3:d9:59:03:26:c8:
         5c:82:5a:13:40:de:1a:59:45:ed:6e:84:82:7f:f1:39:09:2a:
         f3:ec:a3:c5:52:59:51:a1:88:e4:aa:fa:d7:9f:b3:47:b7:08:
         a6:5e:52:21:64:55:b9:61:ea:82:6c:61:15:ce:f7:c3:bf:d6:
         6e:76:00:de:0f:de:b4:8c:8f:7d:55:4f:f8:8b:93:f4:22:47:
         06:7b:4e:8d:10:95:51:1e:75:2e:f4:42:df:df:75:d6:d8:65:
         5e:8f:30:21:bf:73:11:a7:7d:72:cb:64:ef:e9:f0:b0:17:18:
         e9:76:01:f7:c3:90:f8:5e:00:29:f0:98:6b:ef:3a:58:a4:5c:
         e1:85:36:5a:a9:19:0e:9e:ab:fa:bc:bf:7d:7d:14:0b:e0:cd:
         fa:82:43:5c:8f:66:bf:32:11:9e:00:69:52:28:45:ee:47:87:
         cf:b3:2a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:19:25 2025 by rpki-client