Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/3137372e31302e302e302f32302d3234203d3e203533323330.roa
File:                     3137372e31302e302e302f32302d3234203d3e203533323330.roa (raw, json)
Hash identifier:          r+WenZSv9kKsazvkwR0Eb+Dj+u2FXQNm8bvbmqWw0RM=
Subject key identifier:   18:86:38:42:24:E2:65:CC:07:67:79:56:53:B2:4F:D6:06:B8:58:90
Certificate issuer:       /CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
Certificate serial:       5489D6D79C765CFE6422F53762F8E7122E65C20C
Authority key identifier: 98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/3137372e31302e302e302f32302d3234203d3e203533323330.roa
Signing time:             Thu 06 Mar 2025 07:42:20 +0000
ROA not before:           Thu 06 Mar 2025 07:37:20 +0000
ROA not after:            Thu 05 Mar 2026 07:42:20 +0000
asID:                     53230
IP address blocks:        177.10.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl
                          rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 22:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:89:d6:d7:9c:76:5c:fe:64:22:f5:37:62:f8:e7:12:2e:65:c2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98504EF12C8DFCB2080B1982C7232BD80D712E62
        Validity
            Not Before: Mar  6 07:37:20 2025 GMT
            Not After : Mar  5 07:42:20 2026 GMT
        Subject: CN=1886384224E265CC0767795653B24FD606B85890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8a:8f:9d:55:3a:fc:04:03:54:84:9e:b8:86:
                    64:dc:09:e2:52:6a:70:69:09:87:12:7a:f6:bd:d4:
                    81:48:06:b8:51:a3:77:1a:8e:5f:4c:29:9b:5a:63:
                    42:41:e1:47:38:d6:13:d6:d5:b9:fe:9d:ab:32:40:
                    af:90:a9:d8:cd:43:46:15:e4:5d:67:00:c9:39:fd:
                    b9:a2:4f:33:9c:a0:8c:60:1f:3c:11:db:1a:f9:56:
                    d4:a3:0f:cb:b3:a1:e4:e5:a8:7b:d7:dc:a9:97:e3:
                    5f:71:cf:a9:53:06:65:e3:bf:80:b4:2e:56:a6:44:
                    fa:d3:6d:58:d8:a3:3f:87:0a:9d:00:78:76:0e:65:
                    ab:2e:26:c6:96:8b:f1:11:33:8b:da:d0:19:cf:1d:
                    75:be:63:55:06:57:bd:05:68:fd:7a:39:67:91:92:
                    25:75:ee:6e:82:36:5e:d1:ca:75:13:0f:53:0f:38:
                    1b:73:79:c8:ce:0b:52:05:87:96:36:e9:6e:93:d5:
                    7b:ce:e8:22:e0:9c:69:32:a5:03:ef:92:1e:70:7e:
                    67:7a:ee:e3:04:2b:ce:48:6e:26:13:8a:b9:97:de:
                    8c:43:ca:89:0d:a8:4d:e3:65:f8:4a:9d:37:ca:9b:
                    4b:a8:75:eb:a8:5b:f1:21:8c:f3:e6:dc:d0:14:89:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:86:38:42:24:E2:65:CC:07:67:79:56:53:B2:4F:D6:06:B8:58:90
            X509v3 Authority Key Identifier:
                keyid:98:50:4E:F1:2C:8D:FC:B2:08:0B:19:82:C7:23:2B:D8:0D:71:2E:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98504EF12C8DFCB2080B1982C7232BD80D712E62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GphiDnRJxh82jByWBFfhhYDM1fCJLyy1kVeiGAA2WA15/1/3137372e31302e302e302f32302d3234203d3e203533323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:98:27:11:d1:a6:2f:9c:db:81:73:12:9e:4a:0c:d9:3b:
         e1:82:52:86:9e:fa:d1:88:df:ba:94:02:20:90:e7:3c:b0:07:
         b0:46:77:6b:91:f3:22:05:c0:74:a6:f6:5d:9b:ff:27:b4:57:
         eb:8d:fc:73:4b:bd:75:3b:02:e2:1f:1d:3c:06:09:e9:10:c4:
         20:18:b8:95:d9:68:90:88:78:ad:d1:35:0e:9c:15:21:9b:81:
         9a:53:26:6d:bd:7e:6b:85:44:bf:e6:ed:bb:4f:3d:74:11:f8:
         d8:31:12:51:c8:ae:5d:d3:ce:8f:ba:10:d0:51:ab:c8:bf:d4:
         a1:a1:85:d9:74:9e:69:e3:08:7f:15:94:9a:17:a9:b9:f8:e3:
         b5:ee:51:88:8e:61:b6:e2:19:a6:18:71:ff:56:2b:c4:5d:28:
         c0:ed:c1:82:b5:ca:cb:2c:85:64:30:87:6d:3b:29:a2:7f:7e:
         f9:77:cd:a6:66:dc:3e:5a:ae:94:04:c2:88:d9:53:ee:21:13:
         38:f4:db:20:72:52:0e:83:87:35:f6:8e:a5:b5:9a:bb:63:6b:
         57:a1:e4:13:4b:87:68:6a:ef:27:3d:d1:a8:bf:45:a7:25:7f:
         61:7e:4c:1c:1a:4f:47:e4:e2:ed:7b:64:e6:40:42:21:f0:58:
         e9:02:e6:8b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUVInW15x2XP5kIvU3YvjnEi5lwgwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1MDRFRjEyQzhERkNCMjA4MEIxOTgyQzcyMzJCRDgw
RDcxMkU2MjAeFw0yNTAzMDYwNzM3MjBaFw0yNjAzMDUwNzQyMjBaMDMxMTAvBgNV
BAMTKDE4ODYzODQyMjRFMjY1Q0MwNzY3Nzk1NjUzQjI0RkQ2MDZCODU4OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtio+dVTr8BANUhJ64hmTcCeJS
anBpCYcSeva91IFIBrhRo3cajl9MKZtaY0JB4Uc41hPW1bn+nasyQK+QqdjNQ0YV
5F1nAMk5/bmiTzOcoIxgHzwR2xr5VtSjD8uzoeTlqHvX3KmX419xz6lTBmXjv4C0
LlamRPrTbVjYoz+HCp0AeHYOZasuJsaWi/ERM4va0BnPHXW+Y1UGV70FaP16OWeR
kiV17m6CNl7RynUTD1MPOBtzecjOC1IFh5Y26W6T1XvO6CLgnGkypQPvkh5wfmd6
7uMEK85IbiYTirmX3oxDyokNqE3jZfhKnTfKm0uodeuoW/EhjPPm3NAUiUehAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUGIY4QiTiZcwHZ3lWU7JP1ga4WJAwHwYDVR0j
BBgwFoAUmFBO8SyN/LIICxmCxyMr2A1xLmIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3BoaURuUkp4aDgyakJ5V0JGZmhoWURNMWZDSkx5eTFrVmVpR0FBMldB
MTUvMS85ODUwNEVGMTJDOERGQ0IyMDgwQjE5ODJDNzIzMkJEODBENzEyRTYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTA0RUYxMkM4REZDQjIw
ODBCMTk4MkM3MjMyQkQ4MEQ3MTJFNjIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dwaGlEblJKeGg4MmpCeVdCRmZoaFlETTFmQ0pMeXkxa1ZlaUdBQTJXQTE1LzEv
MzEzNzM3MmUzMTMwMmUzMDJlMzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM1MzMzMjMz
MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBASxCgAwDQYJKoZIhvcNAQELBQADggEBAFwgmCcR0aYvnNuB
cxKeSgzZO+GCUoae+tGI37qUAiCQ5zywB7BGd2uR8yIFwHSm9l2b/ye0V+uN/HNL
vXU7AuIfHTwGCekQxCAYuJXZaJCIeK3RNQ6cFSGbgZpTJm29fmuFRL/m7btPPXQR
+NgxElHIrl3Tzo+6ENBRq8i/1KGhhdl0nmnjCH8VlJoXqbn447XuUYiOYbbiGaYY
cf9WK8RdKMDtwYK1yssshWQwh207KaJ/fvl3zaZm3D5arpQEwojZU+4hEzj02yBy
Ug6DhzX2jqW1mrtja1eh5BNLh2hq7yc90ai/Raclf2F+TBwaT0fk4u17ZOZAQiHw
WOkC5os=
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:02:47 2025 by rpki-client on console.sobornost.net