Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3332203d3e20323637393932.roa
File:                     323830343a353635383a3a2f33322d3332203d3e20323637393932.roa (raw, json)
Hash identifier:          UjLqPLh3sIodco2OZOdv6oxQ1f7DqERyP7MTiGmXrRs=
Subject key identifier:   0E:B3:76:4D:12:1B:83:A1:8A:9B:DB:CE:63:98:51:46:D7:47:35:C1
Certificate issuer:       /CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
Certificate serial:       6D269AA612CAD266DB9C04FDF66F3BB8B6A0CEA4
Authority key identifier: 78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3332203d3e20323637393932.roa
Signing time:             Wed 25 Jun 2025 13:43:55 +0000
ROA not before:           Wed 25 Jun 2025 13:38:55 +0000
ROA not after:            Wed 24 Jun 2026 13:43:55 +0000
asID:                     267992
IP address blocks:        2804:5658::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl
                          rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 00:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:26:9a:a6:12:ca:d2:66:db:9c:04:fd:f6:6f:3b:b8:b6:a0:ce:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7
        Validity
            Not Before: Jun 25 13:38:55 2025 GMT
            Not After : Jun 24 13:43:55 2026 GMT
        Subject: CN=0EB3764D121B83A18A9BDBCE63985146D74735C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:d7:88:72:d8:03:d3:db:3c:61:a7:e2:9c:
                    3b:77:72:1f:ac:b0:82:20:6d:91:cb:ff:7b:bc:1f:
                    9f:9a:c7:15:eb:80:00:24:ef:f6:53:a1:e3:a3:e6:
                    59:e5:4f:c5:14:0c:7b:20:45:4c:39:9b:e0:67:23:
                    fe:96:d7:7e:87:cc:41:70:3c:bc:ca:d5:4b:05:66:
                    c2:43:cf:b1:c3:ce:29:93:33:e4:57:f2:ea:80:80:
                    d1:ab:05:03:df:d9:58:44:07:05:17:5c:9c:b8:cc:
                    68:ef:16:66:98:4b:e1:2f:f4:53:2b:af:67:47:4a:
                    30:75:72:19:ae:64:04:6b:15:83:22:37:0e:aa:12:
                    1a:f5:ab:1a:e1:aa:32:99:98:71:60:23:27:08:c7:
                    17:f1:da:3e:53:53:91:70:7a:b9:d5:e5:9f:ab:10:
                    44:75:48:a7:e5:a5:93:15:27:8a:d8:dc:fc:d4:bf:
                    96:cb:97:a6:ce:fd:3d:61:3d:bc:97:8e:92:bd:99:
                    3d:9a:97:f2:ea:ef:04:42:e1:09:7e:55:f5:28:50:
                    dc:67:f9:ca:ee:ca:9a:61:4f:06:87:8c:ff:0f:25:
                    52:cb:91:76:98:fc:0f:47:36:2d:3d:76:cc:6b:84:
                    92:86:8f:22:f8:ac:14:8c:85:df:dd:35:9e:88:da:
                    12:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B3:76:4D:12:1B:83:A1:8A:9B:DB:CE:63:98:51:46:D7:47:35:C1
            X509v3 Authority Key Identifier:
                keyid:78:73:E1:E8:F4:DA:C8:0D:5E:99:B8:19:A8:A4:29:E5:C3:E8:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7873E1E8F4DAC80D5E99B819A8A429E5C3E825E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/323830343a353635383a3a2f33322d3332203d3e20323637393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5658::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:6b:54:bb:dd:de:c6:2f:4e:6b:52:ab:46:f3:1a:35:6b:60:
         1c:18:55:ee:b4:46:21:b2:56:72:f3:1b:0b:30:46:f9:bd:18:
         79:f3:20:84:43:d2:ff:89:8f:17:09:6d:9a:f1:e9:7d:c8:ba:
         d4:de:4b:94:0e:bb:9c:53:26:f8:a1:2f:99:fb:e5:2f:d0:25:
         e4:8b:86:b9:f7:01:65:c9:4e:3b:70:4d:a1:8e:86:b8:b7:1b:
         12:9e:b0:52:8b:fe:0f:4b:1a:13:6a:34:2c:13:8c:6f:d7:b6:
         07:8a:98:97:ca:70:aa:f7:e8:9a:98:5c:30:33:2e:de:73:c4:
         72:c8:f5:64:25:0a:6a:7b:a6:c6:d3:2c:ba:8b:62:6f:52:b1:
         81:32:0e:d5:52:63:c2:4b:66:14:11:f2:24:02:5b:0b:fa:5b:
         11:b2:b1:20:82:2a:b6:70:90:0a:b1:21:38:56:d4:0a:78:0d:
         47:83:51:b5:a8:4e:45:8c:25:e6:f2:ad:f3:1e:2b:cc:0d:7b:
         23:a4:e0:f8:18:1e:04:ed:fb:e2:66:a4:51:66:b2:bd:62:68:
         11:c3:23:f9:85:93:3a:24:0f:c6:ab:28:e2:d1:5a:47:28:03:
         0c:8d:16:e0:dd:6b:5f:51:89:fc:93:a3:60:6a:c7:92:81:67:
         4f:3c:b2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:33:27 2025 by rpki-client