Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa
File:                     323830343a356537303a3a2f33322d313238203d3e20323639303333.roa (raw, json)
Hash identifier:          Oh5dhzBsGMYLilLYPEFDpXY+Wi8Wkz7BDT8euwRfD9c=
Subject key identifier:   D9:93:2B:72:A3:26:6F:74:4A:C5:25:ED:9F:03:3C:E3:FD:1D:78:2E
Certificate issuer:       /CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
Certificate serial:       5C6973366C44366E562E898D8CAED2ECD4D63CEE
Authority key identifier: 99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa
Signing time:             Thu 06 Mar 2025 03:14:29 +0000
ROA not before:           Thu 06 Mar 2025 03:09:29 +0000
ROA not after:            Thu 05 Mar 2026 03:14:29 +0000
asID:                     269033
IP address blocks:        2804:5e70::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl
                          rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 06:14:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:69:73:36:6c:44:36:6e:56:2e:89:8d:8c:ae:d2:ec:d4:d6:3c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996BFE16B00A8EF9DDE555A91330A0BC74A38162
        Validity
            Not Before: Mar  6 03:09:29 2025 GMT
            Not After : Mar  5 03:14:29 2026 GMT
        Subject: CN=D9932B72A3266F744AC525ED9F033CE3FD1D782E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b6:f6:58:77:b6:22:60:7a:b8:27:02:ec:1e:
                    82:46:86:71:ac:f6:69:fe:29:96:25:47:e0:8b:ff:
                    71:36:1c:15:b4:d1:56:a6:bb:98:5f:1d:d8:61:c0:
                    6a:5a:93:5c:a9:d1:09:bd:71:35:4a:86:b3:66:42:
                    c4:3f:2a:d8:20:23:48:ae:3c:57:6e:64:6a:2a:17:
                    9e:99:e0:52:41:55:f9:4c:ac:5f:ec:e4:c8:3f:84:
                    f6:63:0e:6f:e6:0a:2d:7f:9a:bd:dc:31:b2:87:6b:
                    2e:5f:d2:59:41:0c:17:de:09:42:eb:3e:75:6f:3d:
                    b4:f3:b6:d6:19:21:b1:ef:83:dc:d3:a0:b0:04:10:
                    b4:ba:44:72:e5:37:47:90:10:c8:27:9c:b0:71:77:
                    a3:69:db:c0:02:7d:3d:d0:2b:30:3a:c3:08:c0:4a:
                    0f:29:78:35:df:f8:8d:3a:81:a8:4c:50:9c:ea:c8:
                    79:9d:7b:d3:d0:b8:41:38:d9:26:29:7a:24:1b:7b:
                    05:bd:a0:3e:e7:02:40:4d:0a:ad:1f:14:5e:86:bd:
                    ed:ea:a7:94:ec:5f:3c:da:bb:63:cc:16:77:df:a9:
                    66:25:ed:aa:c2:82:95:a4:02:0c:18:70:72:fd:30:
                    6d:65:19:fa:68:3c:fc:fc:85:b1:57:f0:82:43:b9:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:93:2B:72:A3:26:6F:74:4A:C5:25:ED:9F:03:3C:E3:FD:1D:78:2E
            X509v3 Authority Key Identifier:
                keyid:99:6B:FE:16:B0:0A:8E:F9:DD:E5:55:A9:13:30:A0:BC:74:A3:81:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/996BFE16B00A8EF9DDE555A91330A0BC74A38162.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBvLLddTZapdzFLEytbF9QcDT6jRCQfqM35opa9hdQrU/1/323830343a356537303a3a2f33322d313238203d3e20323639303333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e70::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:b9:23:b7:86:58:45:d1:83:a0:9a:18:d8:89:12:ba:6e:4d:
         7f:46:6c:81:e9:70:1a:7f:bd:64:df:47:8d:bb:ba:fe:6d:97:
         37:ba:d7:f3:9d:0c:ec:40:4a:f7:62:82:83:87:b2:8e:ce:66:
         0d:e6:de:d8:0a:07:b6:37:da:5c:82:e4:e6:23:56:f8:fb:7a:
         51:64:8d:d4:99:3a:9e:35:cd:b9:df:55:7c:97:97:4c:b7:d8:
         34:17:0e:bc:f4:74:ac:98:d7:79:64:93:62:8a:f9:23:bf:d1:
         88:0d:16:fa:ab:b9:d4:1a:2b:97:17:81:3a:21:92:fd:47:df:
         25:08:8c:7a:5a:d8:d9:e5:b7:85:d3:5a:42:22:e1:83:aa:93:
         a8:f6:bb:d2:92:ff:18:35:a2:4f:1f:92:de:57:e6:34:83:bb:
         d5:15:08:02:78:9c:d1:96:57:d9:67:f2:40:07:03:6a:7e:ce:
         f9:b5:36:b2:d9:18:88:ac:5f:ac:47:ac:70:19:d7:b5:4a:59:
         2f:e8:c2:d8:80:18:0d:fa:5d:2e:6d:87:20:d7:21:05:89:a4:
         81:c4:84:50:33:65:88:18:10:cd:2a:10:7b:bd:9f:ff:17:be:
         1d:23:3f:5b:c4:9c:c2:a4:86:fa:19:f8:01:a1:11:fb:2d:10:
         86:b9:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:24:42 2025 by rpki-client