Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/323830343a336336303a3a2f33322d313238203d3e20323636323037.roa
File:                     323830343a336336303a3a2f33322d313238203d3e20323636323037.roa (raw, json)
Hash identifier:          SoUKIEfhbFTW8l3BBJ4UrqfwJxte5BAOwfMb2s2SsNM=
Subject key identifier:   FA:2B:3F:D3:FE:E3:15:CC:D9:0B:80:69:C9:C5:96:B1:F8:54:CF:64
Certificate issuer:       /CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
Certificate serial:       33211F103FA7306F68EE822A37BEE3F1406F0B71
Authority key identifier: 16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/323830343a336336303a3a2f33322d313238203d3e20323636323037.roa
Signing time:             Wed 28 May 2025 18:49:43 +0000
ROA not before:           Wed 28 May 2025 18:44:43 +0000
ROA not after:            Wed 27 May 2026 18:49:43 +0000
asID:                     266207
IP address blocks:        2804:3c60::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl
                          rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:21:1f:10:3f:a7:30:6f:68:ee:82:2a:37:be:e3:f1:40:6f:0b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=165D5CE1AD75707F0EBAD74246A8509CC4934DE0
        Validity
            Not Before: May 28 18:44:43 2025 GMT
            Not After : May 27 18:49:43 2026 GMT
        Subject: CN=FA2B3FD3FEE315CCD90B8069C9C596B1F854CF64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:bd:12:77:09:25:15:fd:b3:32:2b:f8:d2:
                    27:dc:73:48:f6:69:68:3a:f2:9f:e5:e6:96:70:eb:
                    5e:47:0c:ff:58:89:c4:8d:8e:40:61:b3:b7:56:4c:
                    0b:04:d6:d0:3d:eb:b0:db:2b:d9:8f:f8:3b:fa:65:
                    37:fa:24:b5:d5:73:e5:6b:f6:9f:ad:d8:75:02:36:
                    4c:a0:cb:1d:70:af:44:fe:94:15:b1:a6:de:ea:7c:
                    e7:47:28:bb:58:b7:fb:aa:6c:d8:e8:8a:ad:cc:cb:
                    24:46:4e:b6:13:c0:7c:42:c0:c1:98:6e:86:c8:9f:
                    a5:ab:cf:6e:c9:ef:aa:ac:02:64:b4:4d:d8:16:69:
                    fe:58:f0:f2:e5:b6:58:a2:2d:bb:78:1e:31:95:62:
                    40:e6:e4:74:36:dd:b0:7c:60:91:53:67:3f:63:dd:
                    e5:9e:92:8f:e2:20:b9:9d:40:69:62:c6:68:7b:4c:
                    87:a4:85:a1:da:96:03:27:1a:92:cf:47:7c:70:f7:
                    5a:25:5e:65:4d:a8:b3:de:4d:62:9a:c5:79:c3:51:
                    12:9d:00:a7:67:63:51:29:e9:29:d8:af:7d:f3:84:
                    bb:3c:17:df:89:76:35:ff:7c:67:f0:ae:a3:de:10:
                    5f:06:88:13:ea:f3:03:d3:ba:15:30:79:49:7a:2c:
                    2b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:3F:D3:FE:E3:15:CC:D9:0B:80:69:C9:C5:96:B1:F8:54:CF:64
            X509v3 Authority Key Identifier:
                keyid:16:5D:5C:E1:AD:75:70:7F:0E:BA:D7:42:46:A8:50:9C:C4:93:4D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/165D5CE1AD75707F0EBAD74246A8509CC4934DE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GD2SX2r86MbQe2vcgTLs2jcLpKTPMTkSKsEKX4XFjEZM/0/323830343a336336303a3a2f33322d313238203d3e20323636323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:8f:30:de:2a:8f:72:a7:02:b8:bb:b1:04:47:31:e4:88:a3:
         0d:1a:e0:e0:73:2e:eb:a8:77:d3:f8:36:f2:8a:94:cf:cf:9e:
         2b:75:5b:38:e3:c8:8b:4c:99:ec:95:6e:6a:e7:dc:08:6c:e4:
         f8:5b:d7:1b:73:26:1a:c3:a4:8c:ce:70:b3:39:20:ce:33:87:
         d2:f6:b8:71:07:9d:0a:4c:57:c6:d9:28:44:8e:34:49:94:be:
         07:c0:ee:cc:26:dc:f4:d9:5c:88:6b:7e:27:84:b4:d6:a0:29:
         35:b2:3b:e7:7a:93:7b:6a:99:6f:4b:60:c1:a1:fc:d6:3a:6d:
         66:87:11:12:3b:ff:f7:83:e2:fd:26:5a:59:9c:9b:b0:07:17:
         9b:87:fb:5b:b7:11:6b:c4:37:32:92:ee:fa:95:93:d9:29:bd:
         0f:90:fd:35:c1:08:e1:27:bf:04:b4:58:14:29:35:c3:40:e3:
         30:45:f5:04:3b:df:3b:a4:9b:45:7e:52:f1:f8:34:85:13:dc:
         a8:c5:99:48:b3:1e:10:c8:df:05:9c:7a:71:95:61:c2:20:33:
         d7:0f:80:d1:22:40:1b:df:e0:44:ff:2c:58:01:18:e0:b0:a3:
         03:a9:8b:e0:08:f9:a7:1e:f4:ae:3d:26:78:e5:ea:04:23:22:
         10:e1:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:48:05 2025 by rpki-client