Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/323830343a333338303a3a2f33322d3332203d3e20323635343030.roa
File:                     323830343a333338303a3a2f33322d3332203d3e20323635343030.roa (raw, json)
Hash identifier:          ZLoqT1Up5OznHIw7pBrq02BdIrVKxlgel9J2oVYphAs=
Subject key identifier:   24:1D:62:75:E3:6D:5B:6F:1A:6D:FE:F8:C8:6F:1C:FE:DF:3F:45:61
Certificate issuer:       /CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
Certificate serial:       4A220F9F620DDDADF4D6FC2CBD96F3CDAA508EAF
Authority key identifier: 51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/323830343a333338303a3a2f33322d3332203d3e20323635343030.roa
Signing time:             Fri 28 Mar 2025 17:04:32 +0000
ROA not before:           Fri 28 Mar 2025 16:59:32 +0000
ROA not after:            Fri 27 Mar 2026 17:04:32 +0000
asID:                     265400
IP address blocks:        2804:3380::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.crl
                          rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 09:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:22:0f:9f:62:0d:dd:ad:f4:d6:fc:2c:bd:96:f3:cd:aa:50:8e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1
        Validity
            Not Before: Mar 28 16:59:32 2025 GMT
            Not After : Mar 27 17:04:32 2026 GMT
        Subject: CN=241D6275E36D5B6F1A6DFEF8C86F1CFEDF3F4561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:04:07:cc:c9:0c:c1:fb:80:36:a5:f8:08:02:
                    ab:4d:31:00:82:a7:ed:59:a3:6f:38:f9:f5:32:db:
                    be:bd:6d:1d:57:39:32:c1:d6:0a:ad:c6:84:83:80:
                    b1:e5:f4:f3:aa:47:44:bb:c8:da:1a:6c:03:40:7d:
                    c7:ce:18:b9:ca:02:58:91:bb:35:60:5b:93:40:7c:
                    3f:dc:88:25:02:10:6f:25:f3:1c:89:b6:22:42:da:
                    f1:bf:f7:39:82:f5:cf:3a:65:03:22:6c:44:58:b7:
                    f6:4e:b9:3f:3a:50:fa:8c:a0:84:50:33:de:c7:f4:
                    0d:02:80:60:a0:2a:fb:29:54:34:b1:cb:9b:8d:8b:
                    22:0a:a8:c8:cf:95:e4:3b:98:7e:34:4d:ad:51:c7:
                    0c:a7:a8:af:24:bd:3c:bd:7d:a2:5c:4c:7d:18:44:
                    af:aa:f8:f4:03:0e:b3:6d:7a:ed:51:39:3c:64:35:
                    32:ea:37:20:96:d6:a9:a7:e4:d2:e7:4b:54:d4:fe:
                    a3:3d:db:f5:54:cb:78:0a:0b:c0:d6:02:73:ec:80:
                    a4:de:d2:b3:11:ed:f5:4a:64:c3:da:80:3f:01:a6:
                    b0:e1:eb:fd:44:78:ff:3d:3f:ec:f7:f5:d9:c4:8b:
                    16:2d:f5:fd:a0:8b:5e:4a:2e:db:d3:b5:95:6b:79:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1D:62:75:E3:6D:5B:6F:1A:6D:FE:F8:C8:6F:1C:FE:DF:3F:45:61
            X509v3 Authority Key Identifier:
                keyid:51:80:B3:26:D4:97:3A:1F:A0:FA:CE:EA:2E:BD:FE:BF:DB:B6:68:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5180B326D4973A1FA0FACEEA2EBDFEBFDBB668A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH2vJLmAoDrBskUUxV7qj5EoKENh77KSR4KaLb527tSo/0/323830343a333338303a3a2f33322d3332203d3e20323635343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3380::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:7c:0c:41:36:fb:cf:27:72:71:b2:18:ca:6e:fe:2b:d5:ce:
         f3:c7:6a:33:b3:4e:1c:97:d3:c6:fd:23:c0:71:19:d1:93:5d:
         85:a6:f5:a9:d3:ca:8f:61:f3:4d:06:be:db:69:7b:f0:69:b2:
         e9:e7:1d:b8:25:6d:dd:ba:c1:c2:4a:8a:46:11:8a:55:1d:55:
         02:2b:4e:df:e6:39:2a:9b:e9:5b:98:1a:ca:5d:7e:f9:68:46:
         cc:a2:c6:4e:5c:1d:14:2f:97:af:71:5d:5c:f9:07:e5:38:d2:
         86:90:5b:1d:6e:09:0f:bc:78:18:c0:ed:9e:7e:45:e9:1d:70:
         27:67:24:99:e7:13:5d:d8:f3:ac:2f:ee:c4:0d:9d:e9:a8:48:
         f5:af:2f:28:b1:48:a8:75:6f:3a:14:35:d7:45:f9:3a:6a:8b:
         01:45:6d:a2:ef:d5:50:34:b8:ac:a0:d2:7f:1b:2d:d6:6d:a2:
         80:ac:ca:1d:ab:a1:1e:5b:75:e8:c5:7e:16:69:26:da:ed:f7:
         30:25:57:09:83:d8:f2:9a:f8:70:a8:bc:ad:ee:0f:9d:44:50:
         05:ed:62:6b:8a:14:9c:56:c8:66:56:1b:22:64:30:10:44:04:
         8b:66:b7:a6:3a:1b:bf:6a:b0:68:92:dc:b1:c3:1c:1c:da:83:
         6d:bb:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:14:13 2025 by rpki-client