Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa
File:                     3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa (raw, json)
Hash identifier:          gPyQxNe60K71pLRkN2JCeKm25Hp2r6rAr5l/KoqLVjY=
Subject key identifier:   34:40:32:B4:D0:03:7E:F2:97:F8:C9:D4:21:A4:6A:1E:17:AD:F1:58
Certificate issuer:       /CN=98300A2AA67A942B94CBC198EA8F7537002C0480
Certificate serial:       0EE972D1ED9C068E37456D0976F3D2CB82AA2DF3
Authority key identifier: 98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa
Signing time:             Wed 22 Apr 2026 14:00:00 +0000
ROA not before:           Wed 22 Apr 2026 13:55:00 +0000
ROA not after:            Wed 21 Apr 2027 14:00:00 +0000
asID:                     52996
IP address blocks:        186.232.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl
                          rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e9:72:d1:ed:9c:06:8e:37:45:6d:09:76:f3:d2:cb:82:aa:2d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98300A2AA67A942B94CBC198EA8F7537002C0480
        Validity
            Not Before: Apr 22 13:55:00 2026 GMT
            Not After : Apr 21 14:00:00 2027 GMT
        Subject: CN=3082010A0282010100A3B81A081EE004F34E430B6690812347789321622427571097F99792DCF04D9A740617F94E7F129EEEC595CC44D3C16AB44A99B46535EE4084D9378D9BCAC0EECE4DBD9F635FCE5E6D284C8695A2BE6DA09D90C69C50FEE107A251DA7033891721EA337154F0E0EEE3C8185671C8D55340B6A1DF735D0C9158D06CEB40B704E7E313E6779FB9EDBE636AA69B2CB1AC1589F497D6841F3C9FDA4A432467777965085AFB11CE9FE1CF66B2A5D56ECFF8B69D7E2B7318A6FADF9223F7E1ECD25CCF61B7CAE24A526084EFEE37C74962E8823DD49520C851EFA705FD5B538FCEF156D29DAE790FEDAB298E6C2907A3DD1F9231451B2A26C39D72CB1650209A0C04370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b8:1a:08:1e:e0:04:f3:4e:43:0b:66:90:81:
                    23:47:78:93:21:62:24:27:57:10:97:f9:97:92:dc:
                    f0:4d:9a:74:06:17:f9:4e:7f:12:9e:ee:c5:95:cc:
                    44:d3:c1:6a:b4:4a:99:b4:65:35:ee:40:84:d9:37:
                    8d:9b:ca:c0:ee:ce:4d:bd:9f:63:5f:ce:5e:6d:28:
                    4c:86:95:a2:be:6d:a0:9d:90:c6:9c:50:fe:e1:07:
                    a2:51:da:70:33:89:17:21:ea:33:71:54:f0:e0:ee:
                    e3:c8:18:56:71:c8:d5:53:40:b6:a1:df:73:5d:0c:
                    91:58:d0:6c:eb:40:b7:04:e7:e3:13:e6:77:9f:b9:
                    ed:be:63:6a:a6:9b:2c:b1:ac:15:89:f4:97:d6:84:
                    1f:3c:9f:da:4a:43:24:67:77:79:65:08:5a:fb:11:
                    ce:9f:e1:cf:66:b2:a5:d5:6e:cf:f8:b6:9d:7e:2b:
                    73:18:a6:fa:df:92:23:f7:e1:ec:d2:5c:cf:61:b7:
                    ca:e2:4a:52:60:84:ef:ee:37:c7:49:62:e8:82:3d:
                    d4:95:20:c8:51:ef:a7:05:fd:5b:53:8f:ce:f1:56:
                    d2:9d:ae:79:0f:ed:ab:29:8e:6c:29:07:a3:dd:1f:
                    92:31:45:1b:2a:26:c3:9d:72:cb:16:50:20:9a:0c:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:40:32:B4:D0:03:7E:F2:97:F8:C9:D4:21:A4:6A:1E:17:AD:F1:58
            X509v3 Authority Key Identifier:
                keyid:98:30:0A:2A:A6:7A:94:2B:94:CB:C1:98:EA:8F:75:37:00:2C:04:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/98300A2AA67A942B94CBC198EA8F7537002C0480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98300A2AA67A942B94CBC198EA8F7537002C0480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgKYRAu7E45W9EGqzkrKjxoGgS5umMM4LU73n6bmpcvw/1/3138362e3233322e3234372e302f32342d3234203d3e203532393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.232.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:10:42:65:fd:56:c4:94:df:2f:ff:73:94:0d:d0:98:04:ba:
         3b:e5:49:3c:f2:bd:93:3d:b6:5f:1b:af:25:a5:28:cb:83:33:
         f2:5c:c9:7f:ba:40:f5:17:15:20:ec:83:c2:12:3f:9c:0b:e8:
         5e:44:87:9a:8e:0f:0e:75:14:54:5b:55:1a:9d:ec:07:ba:de:
         39:ba:a9:52:b9:68:24:98:75:1b:f6:72:8e:be:c0:fd:ae:46:
         a5:4e:c4:75:73:77:4b:9c:99:9c:eb:1b:44:61:13:8e:0a:82:
         5f:2b:f5:3c:4e:1a:69:b5:6d:ca:db:ee:b5:08:b7:1d:3e:e0:
         35:24:42:10:21:39:76:ca:4a:3a:9f:8a:42:83:7d:81:92:16:
         48:64:55:89:d7:d8:b4:34:45:92:31:67:d1:01:12:a6:61:70:
         3d:03:66:fc:79:22:bb:b1:2a:0c:dd:7d:ec:a9:8a:66:81:dc:
         20:f9:91:7e:0e:3c:fb:64:fc:8e:7b:20:c7:d4:f7:14:e9:c3:
         93:98:44:d7:14:01:ee:94:46:bc:94:5b:8f:9c:6f:4f:ef:ac:
         25:62:2b:f3:8c:90:1f:db:55:41:e3:fc:52:93:b0:c6:0f:62:
         1f:1e:69:aa:a1:fe:1c:a7:64:8e:78:79:16:73:d0:c1:47:09:
         4e:33:90:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:28:48 2026 by rpki-client