Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa
File:                     323830343a6636383a3a2f33322d3332203d3e20323633353834.roa (raw, json)
Hash identifier:          zUD8uqd6uittgR5PWSbgkrPlAbzFb/Kx/40Lbq9YDXw=
Subject key identifier:   7D:7B:62:47:A0:7C:38:2D:67:4A:6D:D6:33:4B:89:A5:D2:59:9F:AE
Certificate issuer:       /CN=614EF54DCD6F303805D5996E2C956F5A6154005E
Certificate serial:       0380A59C069E8915E6ACCB4E7461A58931780C48
Authority key identifier: 61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa
Signing time:             Thu 10 Jul 2025 23:51:56 +0000
ROA not before:           Thu 10 Jul 2025 23:46:56 +0000
ROA not after:            Thu 09 Jul 2026 23:51:56 +0000
asID:                     263584
IP address blocks:        2804:f68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Jul 2025 16:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:80:a5:9c:06:9e:89:15:e6:ac:cb:4e:74:61:a5:89:31:78:0c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614EF54DCD6F303805D5996E2C956F5A6154005E
        Validity
            Not Before: Jul 10 23:46:56 2025 GMT
            Not After : Jul  9 23:51:56 2026 GMT
        Subject: CN=7D7B6247A07C382D674A6DD6334B89A5D2599FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:87:b9:cf:19:a7:45:78:84:93:13:af:d6:a5:
                    b4:f4:e6:51:99:0b:91:d9:b1:de:7d:54:05:a3:ef:
                    cb:48:63:3d:62:39:3d:0b:22:84:33:c2:39:16:93:
                    8a:40:00:55:9e:a9:c1:8c:4e:20:94:27:e2:28:5c:
                    a1:10:de:44:4d:2d:7f:6d:e4:14:3e:e7:4d:be:90:
                    da:d7:5b:95:dd:e0:62:7a:bc:20:d1:bf:b3:d1:4f:
                    e0:28:61:ea:63:aa:11:d9:4e:4f:68:d9:08:6d:5b:
                    e9:aa:c6:13:a3:13:59:ca:02:3b:40:c1:6a:76:ec:
                    02:c1:1c:32:d4:65:25:ab:86:fa:78:7d:56:dd:8a:
                    ab:b7:6b:d2:82:f9:3e:4f:d6:38:6f:23:35:03:c2:
                    a0:53:67:33:54:2e:aa:e1:70:88:8e:f8:7d:8f:59:
                    d3:d4:2e:f3:b2:fe:a5:bc:f2:1e:1a:51:d9:04:80:
                    a2:ae:60:cc:13:1e:ec:36:b1:bf:8a:62:6d:ab:51:
                    c9:32:04:f8:91:7b:39:44:62:05:a8:dc:6d:06:d4:
                    0c:06:1c:b7:49:68:82:d6:c9:bb:ee:bd:42:8a:e4:
                    66:6b:68:d1:0e:d6:01:ac:a8:2d:c5:81:d7:3b:40:
                    ff:aa:ef:41:a8:a3:d6:6f:0d:d3:6c:b9:67:f2:20:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7B:62:47:A0:7C:38:2D:67:4A:6D:D6:33:4B:89:A5:D2:59:9F:AE
            X509v3 Authority Key Identifier:
                keyid:61:4E:F5:4D:CD:6F:30:38:05:D5:99:6E:2C:95:6F:5A:61:54:00:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/614EF54DCD6F303805D5996E2C956F5A6154005E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/614EF54DCD6F303805D5996E2C956F5A6154005E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:9e:e0:99:61:ac:de:6a:c5:a7:d0:3f:66:b4:6c:64:a9:f9:
         67:36:86:31:9b:98:31:2d:bb:85:33:29:ea:21:a5:56:87:6e:
         30:0b:92:79:0b:56:ab:d5:10:98:14:04:78:40:1a:7c:18:00:
         1c:56:fc:f4:7a:0c:cf:02:e4:9e:7e:38:ee:32:ea:a7:e1:3b:
         2e:66:d0:a0:36:36:85:28:e2:36:90:26:5e:ad:33:3b:9a:18:
         85:22:03:4b:13:8b:76:a7:5b:aa:28:97:f2:62:c4:56:0b:ec:
         79:a1:31:e8:bb:dc:a3:b4:97:7b:09:8b:4b:ac:b1:8c:10:54:
         e7:fa:19:29:fd:c4:3e:29:00:52:bf:3d:02:b5:e8:dd:2b:24:
         a2:9b:47:6e:9f:a4:90:93:d8:2d:83:17:3b:6a:ca:38:f2:3e:
         18:d8:9e:f3:29:e2:59:cc:38:6b:8a:60:d5:1d:87:40:02:78:
         47:8b:68:d8:47:1d:b9:b8:b2:81:f7:8d:fe:3d:33:c5:d6:0c:
         fb:47:eb:15:61:99:09:66:56:1d:73:40:14:2b:d4:3c:82:05:
         5e:95:b5:65:0b:65:f2:a0:0f:9a:91:73:a8:57:b4:91:21:63:
         79:fd:70:5d:a6:40:08:e5:ae:65:45:8b:e1:85:45:e9:4f:bc:
         04:2e:8c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:04:52 2025 by rpki-client