Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3334203d3e20323634323933.roa
File:                     323830343a323561383a3a2f33322d3334203d3e20323634323933.roa (raw, json)
Hash identifier:          ZoB1LT2ZH9Vj6IVaBBhWrsP4cnsjosijPidmwDlg3SQ=
Subject key identifier:   78:8F:93:59:EA:A5:EF:AC:3D:E6:BB:15:61:28:77:09:12:A6:1D:86
Certificate issuer:       /CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F
Certificate serial:       19CACE26BB865C0F158EFDEB674E2833054FBCEE
Authority key identifier: A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3334203d3e20323634323933.roa
Signing time:             Mon 14 Jul 2025 18:32:51 +0000
ROA not before:           Mon 14 Jul 2025 18:27:51 +0000
ROA not after:            Mon 13 Jul 2026 18:32:51 +0000
asID:                     264293
IP address blocks:        2804:25a8::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl
                          rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 27 Jul 2025 14:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ca:ce:26:bb:86:5c:0f:15:8e:fd:eb:67:4e:28:33:05:4f:bc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A2A3F34AD377DD8B185FB62F294479A4953EA29F
        Validity
            Not Before: Jul 14 18:27:51 2025 GMT
            Not After : Jul 13 18:32:51 2026 GMT
        Subject: CN=788F9359EAA5EFAC3DE6BB156128770912A61D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a1:6b:d0:6a:de:07:8e:26:62:14:01:1f:a7:
                    2e:fe:41:34:2f:52:e2:49:4b:53:a0:5c:94:36:11:
                    ec:82:6a:cb:75:6a:5f:ca:2d:3b:38:bf:fb:76:ed:
                    71:18:4d:29:67:19:55:30:79:25:22:a2:43:ff:cb:
                    b5:36:db:ca:08:3c:b2:e9:66:1e:ad:aa:5a:d7:60:
                    b3:28:30:15:0c:e6:cb:e8:0f:40:f8:04:09:21:d1:
                    fc:e8:03:a3:7b:5b:34:f0:9e:e0:d5:1b:90:0d:99:
                    92:52:8e:2e:0e:28:53:39:66:3b:b8:e2:38:43:d8:
                    36:d5:5c:4d:0c:b1:e6:10:38:b4:13:44:1c:a1:18:
                    ec:ae:bf:21:34:3a:38:c5:8a:92:1c:c2:fb:e2:da:
                    e5:6c:c9:82:ea:df:62:46:b1:40:4e:31:db:26:ba:
                    2a:b8:fc:e5:8c:1d:55:a1:54:19:c5:c4:17:ec:38:
                    16:36:b0:91:1c:26:db:68:64:3f:7d:97:96:ac:60:
                    62:3b:b6:16:d4:f2:7c:e0:12:b4:33:db:12:43:ad:
                    44:9d:4b:f7:59:45:70:ca:06:e4:f5:4d:86:8b:49:
                    d6:9e:f7:d3:1d:9f:77:27:e5:ad:5b:63:e6:04:0c:
                    61:a4:6c:52:0e:5f:f2:b7:a8:1c:76:f6:68:df:bb:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8F:93:59:EA:A5:EF:AC:3D:E6:BB:15:61:28:77:09:12:A6:1D:86
            X509v3 Authority Key Identifier:
                keyid:A2:A3:F3:4A:D3:77:DD:8B:18:5F:B6:2F:29:44:79:A4:95:3E:A2:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/A2A3F34AD377DD8B185FB62F294479A4953EA29F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2A3F34AD377DD8B185FB62F294479A4953EA29F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GakttCk2jKC2yqSgzizrJrrY5agzsZ2w7BQqvkXFXVFh/0/323830343a323561383a3a2f33322d3334203d3e20323634323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:87:36:48:6f:0e:ad:90:92:cb:a1:96:55:b4:af:18:bd:a8:
         3e:6f:9f:90:c7:2f:36:23:6a:a9:0b:6b:3b:6f:e1:8f:b4:16:
         5d:da:ed:24:70:db:ef:3b:d4:15:cb:8c:1c:ec:08:53:55:41:
         7d:58:9d:51:ea:55:ed:13:bb:ee:d5:b1:40:13:cf:fa:8a:df:
         26:ef:9a:51:ca:51:60:65:43:55:15:fe:0c:d6:fb:73:ba:e4:
         dd:1d:d8:79:56:b5:0c:2d:26:14:c7:40:bb:4f:f8:a1:60:a1:
         00:83:7a:1e:bf:00:89:71:18:c2:8e:38:b5:34:59:aa:32:05:
         d8:7c:0c:63:37:cd:eb:63:31:7e:27:74:39:9f:3f:6e:b0:bf:
         73:f8:36:25:be:c4:53:11:7a:81:1d:c6:0e:24:cf:1f:41:82:
         1e:16:7d:ce:73:c8:2f:66:8d:cc:ae:43:38:83:67:db:57:2f:
         4c:27:aa:3a:35:47:09:36:0f:2a:20:95:40:9d:58:3a:3b:87:
         ce:c6:aa:88:e6:46:5e:00:89:5e:36:fb:0f:1c:b5:10:ea:e6:
         37:c6:88:6c:31:21:68:bf:32:e3:93:74:e3:c1:bd:64:a7:7d:
         20:54:6a:25:40:9b:d2:b5:70:b1:ee:e6:0c:84:a0:40:b2:d4:
         ee:b0:d5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:20:22 2025 by rpki-client