Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa
File:                     323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa (raw, json)
Hash identifier:          BlDrV6NJ4gN73fY27CwZdqduEQtozWeDaLjZPsRaCr0=
Subject key identifier:   BD:DA:2C:4F:09:C1:2D:45:B7:8D:A0:9C:BF:02:D9:2A:EB:34:AF:8F
Certificate issuer:       /CN=9E3215C480F080F897B1BC29041417B2B2F0668D
Certificate serial:       3770F3D867906A1EE68C6F4E4D8B4415D2238246
Authority key identifier: 9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa
Signing time:             Fri 08 Aug 2025 19:23:34 +0000
ROA not before:           Fri 08 Aug 2025 19:18:34 +0000
ROA not after:            Fri 07 Aug 2026 19:23:34 +0000
asID:                     61609
IP address blocks:        2804:87bc:dc01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl
                          rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 20 Sep 2025 14:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:70:f3:d8:67:90:6a:1e:e6:8c:6f:4e:4d:8b:44:15:d2:23:82:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E3215C480F080F897B1BC29041417B2B2F0668D
        Validity
            Not Before: Aug  8 19:18:34 2025 GMT
            Not After : Aug  7 19:23:34 2026 GMT
        Subject: CN=BDDA2C4F09C12D45B78DA09CBF02D92AEB34AF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:b9:1f:f3:2e:12:8f:e3:52:27:62:15:02:
                    e4:61:9d:60:87:ee:db:e4:42:02:0e:98:a3:31:fd:
                    d1:47:23:48:aa:af:db:6e:d9:84:1e:0f:91:c9:99:
                    7b:6d:61:dc:21:d1:9c:53:c1:6c:ef:e7:60:b9:84:
                    a1:79:98:c5:d5:04:ea:7c:40:e7:97:ff:72:67:7f:
                    eb:f3:95:03:52:bd:eb:27:8f:2b:ee:cd:56:b6:dc:
                    6b:a4:20:9e:8f:61:39:57:bd:53:0b:53:24:0b:5b:
                    ce:8a:92:b4:12:c8:9b:2c:45:33:4a:6b:de:54:0a:
                    4e:ac:c8:5b:fb:8a:15:0b:69:0f:f2:ef:73:0d:0a:
                    8a:d4:e4:86:81:84:4d:c0:6a:55:b7:aa:fe:e9:9e:
                    0d:96:0e:33:9b:9b:ab:81:3b:e5:7b:b8:6c:46:c4:
                    0a:10:70:83:ab:f2:13:c6:1e:a7:a3:60:c2:85:7b:
                    3f:4e:6b:07:b9:32:21:d0:d8:ab:e0:0a:01:6e:cd:
                    b0:98:b4:b1:75:43:05:4f:53:20:cd:83:e5:20:be:
                    ec:4c:46:85:c1:91:80:32:90:6d:81:8d:e8:93:b4:
                    d2:2b:57:f8:0c:9a:c1:21:23:2e:a1:01:3b:4f:dc:
                    74:51:9a:00:54:39:e7:c8:aa:1f:03:e5:95:b7:07:
                    e2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:DA:2C:4F:09:C1:2D:45:B7:8D:A0:9C:BF:02:D9:2A:EB:34:AF:8F
            X509v3 Authority Key Identifier:
                keyid:9E:32:15:C4:80:F0:80:F8:97:B1:BC:29:04:14:17:B2:B2:F0:66:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/9E3215C480F080F897B1BC29041417B2B2F0668D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E3215C480F080F897B1BC29041417B2B2F0668D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/0/323830343a383762633a646330313a3a2f34382d3438203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc:dc01::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:f4:ff:4d:e4:45:19:2c:86:0f:51:73:26:a6:dc:4d:9d:aa:
         d5:2a:c0:3f:08:55:dd:fa:6f:fc:20:93:d3:ca:89:fa:73:60:
         f5:65:1a:2c:2f:ba:6e:6b:cd:9d:a2:fa:dc:57:f1:d4:d8:68:
         23:2a:e5:dd:51:c9:45:a7:f3:3c:06:1f:5a:a2:5f:4e:1e:a7:
         ec:f7:d9:39:0e:8e:04:de:69:65:1d:f3:97:92:9c:63:1e:b4:
         4b:87:09:16:67:f1:5f:f0:e5:2d:8d:5f:d1:3f:68:8c:2f:fb:
         50:9a:ea:d6:da:98:d6:4f:44:a1:e1:47:0d:e4:44:cf:69:06:
         73:c4:3b:29:88:41:26:24:c4:ff:49:73:01:40:82:b2:0e:24:
         20:12:f8:ae:8b:83:47:42:bd:2a:1f:9d:4b:48:98:9e:61:38:
         23:8f:3c:48:e7:fe:91:3d:22:34:e4:72:29:d2:91:23:af:dd:
         a0:2c:be:6b:69:23:f1:b9:35:5b:3c:1b:f2:94:be:ac:95:53:
         d1:9f:b0:6d:b1:eb:d7:6b:c7:2c:86:ed:c1:72:ba:b2:d7:a8:
         ab:8d:d3:50:ed:b9:09:03:dd:bd:52:ef:ef:f2:48:44:6d:24:
         d1:3b:15:83:06:21:ea:c6:f2:01:e6:b1:6a:55:0a:3f:27:bd:
         a6:b6:0e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 05:45:34 2025 by rpki-client