Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa
File:                     323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa (raw, json)
Hash identifier:          OaeFm68iQt2fEHxg7k5wJaetpJeY8Oq9If0LtinjYXw=
Subject key identifier:   1D:7C:E2:8C:32:85:6E:FC:6F:3D:39:4A:B6:10:EC:3A:08:4D:BA:49
Certificate issuer:       /CN=171FB2622757FE5D9107ADC119D88C8439A742D9
Certificate serial:       1C60C105FDA2606CD9A46CCCB8368FD005D25040
Authority key identifier: 17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa
Signing time:             Tue 02 Sep 2025 18:09:37 +0000
ROA not before:           Tue 02 Sep 2025 18:04:37 +0000
ROA not after:            Tue 01 Sep 2026 18:09:37 +0000
asID:                     61721
IP address blocks:        2801:80:c30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl
                          rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 09:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:60:c1:05:fd:a2:60:6c:d9:a4:6c:cc:b8:36:8f:d0:05:d2:50:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171FB2622757FE5D9107ADC119D88C8439A742D9
        Validity
            Not Before: Sep  2 18:04:37 2025 GMT
            Not After : Sep  1 18:09:37 2026 GMT
        Subject: CN=1D7CE28C32856EFC6F3D394AB610EC3A084DBA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e8:0f:b1:34:cd:54:48:77:6a:75:82:1f:44:
                    e3:f6:5a:d2:d7:61:6c:93:29:82:b3:86:62:94:9b:
                    aa:c0:b4:ac:fa:6b:fd:e0:99:e2:1b:ca:3e:1e:57:
                    5c:6f:0c:61:d8:fe:fa:a3:0e:42:f7:d1:bb:c9:97:
                    1b:ca:55:2f:2c:a3:44:de:3e:79:27:10:de:8e:42:
                    d9:68:b3:a3:da:44:53:ec:60:c7:7e:6d:a2:25:a1:
                    78:1e:25:34:83:4d:1e:1c:ab:12:0a:24:54:3f:25:
                    1b:b7:f8:7f:be:ca:87:bd:77:de:9a:42:4a:05:b2:
                    98:c0:30:57:68:cc:58:77:aa:5a:71:5a:1a:4a:55:
                    3a:10:c5:a1:5e:b1:d9:d0:8b:6a:a1:34:6e:87:e4:
                    f1:a2:ae:19:41:fb:04:bf:c7:43:42:07:1a:ec:9d:
                    0f:e1:fd:f9:0d:30:5a:14:ed:5f:7c:a3:ed:87:fe:
                    c1:84:e0:94:d4:23:c3:48:e5:bb:b2:cc:c2:ca:59:
                    5d:0d:b6:16:1d:82:ff:c5:8e:82:4b:4e:f4:a7:03:
                    98:01:b2:b6:5d:21:e8:35:71:60:37:66:fc:17:d5:
                    19:9e:c5:11:37:4f:ee:44:67:ae:60:45:bf:80:80:
                    71:26:4a:a2:84:84:14:93:a6:e7:b2:3f:49:6a:9f:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7C:E2:8C:32:85:6E:FC:6F:3D:39:4A:B6:10:EC:3A:08:4D:BA:49
            X509v3 Authority Key Identifier:
                keyid:17:1F:B2:62:27:57:FE:5D:91:07:AD:C1:19:D8:8C:84:39:A7:42:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/171FB2622757FE5D9107ADC119D88C8439A742D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/171FB2622757FE5D9107ADC119D88C8439A742D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830313a38303a6333303a3a2f34382d3438203d3e203631373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:c30::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:07:d7:f2:a4:4d:0e:dd:f4:35:8a:98:fd:b8:a1:f8:e0:
         82:ec:d3:25:cc:e0:cb:ae:29:ed:52:2a:0f:72:b5:97:f9:81:
         e3:72:d1:25:65:02:f5:c3:a9:08:61:a2:0a:d2:44:82:c0:a0:
         22:7a:0d:c3:46:66:ef:28:14:79:da:8f:ed:2b:fc:b8:0e:5f:
         41:42:d3:d8:03:55:29:78:d6:a0:09:9c:b3:d4:e9:d9:3c:86:
         04:a0:67:85:70:df:89:ec:42:09:ee:ba:f3:24:fb:ae:9c:1d:
         ee:b0:9c:cc:a6:b1:4a:3e:6a:18:6f:f5:3d:15:39:c5:02:e7:
         1f:04:34:6c:c3:9e:02:99:6d:1e:df:cf:b4:99:d2:ec:f4:e4:
         ca:f1:7d:f0:1f:73:27:55:0a:0a:4e:c9:3d:c4:22:61:70:8e:
         30:75:69:64:7f:4b:1d:12:bb:42:ab:90:94:a2:27:7e:0b:84:
         9f:31:c4:ff:b7:a1:d9:eb:9d:12:52:c7:fd:72:22:71:e8:fc:
         18:a9:51:d1:13:fe:e3:a4:e5:a2:c8:56:2c:91:61:6a:eb:32:
         90:17:e6:68:b5:31:7c:51:39:54:07:a7:26:fb:77:29:1e:d7:
         8c:ac:e9:52:6a:0b:10:3b:f7:46:4b:e0:17:f5:8c:cf:b0:21:
         c1:b6:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 18:01:24 2025 by rpki-client