Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa
File:                     323830343a6636383a3a2f33322d3332203d3e20323633353834.roa (raw, json)
Hash identifier:          WiSaIh5xiNomGXFJ9TzfFT6CurX7HPtoHiQxYQiePAM=
Subject key identifier:   87:BD:73:B0:C6:A3:3E:5B:4F:48:88:39:DA:FC:0C:2C:02:EC:42:4D
Certificate issuer:       /CN=AE237DC7B299A0FDCDF8225D9403B0A582305290
Certificate serial:       6A7336E248620B307A457C3EDE7D478DD8970261
Authority key identifier: AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa
Signing time:             Mon 11 Aug 2025 19:05:13 +0000
ROA not before:           Mon 11 Aug 2025 19:00:13 +0000
ROA not after:            Mon 10 Aug 2026 19:05:13 +0000
asID:                     263584
IP address blocks:        2804:f68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 09:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:73:36:e2:48:62:0b:30:7a:45:7c:3e:de:7d:47:8d:d8:97:02:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE237DC7B299A0FDCDF8225D9403B0A582305290
        Validity
            Not Before: Aug 11 19:00:13 2025 GMT
            Not After : Aug 10 19:05:13 2026 GMT
        Subject: CN=87BD73B0C6A33E5B4F488839DAFC0C2C02EC424D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d7:a1:6e:16:24:83:d8:5d:bd:22:07:07:fe:
                    bb:f3:9f:0d:ba:7e:ef:b1:36:5b:c1:97:0c:b5:fd:
                    cd:b5:75:ca:3f:0e:63:1f:94:cb:50:b7:9c:4d:7e:
                    5e:47:5e:0e:c6:59:87:b6:4f:28:f8:5d:e0:36:71:
                    13:87:82:9b:3e:f7:30:e1:18:09:11:b3:ae:8d:f6:
                    1f:95:a1:98:b6:3b:d5:47:56:73:cf:95:b8:46:7f:
                    d0:3f:1c:8a:0d:50:f5:3f:e6:64:fd:6d:95:91:22:
                    ce:9d:ba:3b:8f:2f:e7:21:e4:73:63:f5:37:f8:4f:
                    24:ea:b0:88:ef:04:3e:8b:47:5f:2d:8d:7d:66:47:
                    25:44:cd:87:51:a4:19:b6:da:4b:ee:17:6f:2b:04:
                    5f:89:76:c9:e0:b3:01:9a:d0:66:4c:79:cb:40:ed:
                    a5:0c:a5:8f:ae:cf:28:49:d1:2d:61:dc:69:a8:c9:
                    5c:41:07:f6:28:05:6d:fe:93:3d:b4:6e:7e:25:69:
                    d7:f4:f1:3e:21:9c:c4:12:25:8f:20:1b:67:73:23:
                    36:65:55:cd:7f:a2:04:56:fe:b9:f9:06:7c:f2:55:
                    e6:0d:3d:f4:2e:c7:16:1d:e5:b8:80:44:f0:1e:03:
                    6c:04:b9:54:c7:54:84:43:3c:14:8e:a7:f0:8e:d5:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BD:73:B0:C6:A3:3E:5B:4F:48:88:39:DA:FC:0C:2C:02:EC:42:4D
            X509v3 Authority Key Identifier:
                keyid:AE:23:7D:C7:B2:99:A0:FD:CD:F8:22:5D:94:03:B0:A5:82:30:52:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/AE237DC7B299A0FDCDF8225D9403B0A582305290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE237DC7B299A0FDCDF8225D9403B0A582305290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:a2:f9:c9:5a:95:d1:78:b0:7c:d6:cb:e9:5e:53:94:b9:
         e8:e5:8e:c8:bc:33:44:50:dd:2d:a2:4a:ab:08:92:04:d9:45:
         8c:10:2a:c2:5e:5a:99:70:91:63:42:fd:d0:03:95:24:16:b7:
         a8:f6:51:01:64:99:e7:fc:63:ce:3c:16:fe:f4:6d:3c:c8:c3:
         27:ab:6d:6e:49:6f:1d:83:72:62:2d:18:c4:fd:10:7a:ef:d3:
         4d:94:b2:52:6b:85:51:3a:96:43:d7:39:45:84:bc:28:cf:a9:
         40:8b:96:65:f2:f5:4c:f7:21:02:ce:53:4e:a3:47:60:c6:bd:
         6f:b6:20:4e:35:fa:f4:a8:49:c9:87:ed:ff:2b:9a:4d:1a:b6:
         62:e0:92:81:d4:cf:b5:9b:e8:dd:82:49:04:5e:7e:57:ab:ce:
         fe:ed:c6:67:cc:1c:44:68:a6:e2:44:8e:5d:f1:13:a8:c2:e6:
         77:51:c7:13:b1:a0:f4:19:a4:da:33:bf:8e:cf:05:46:07:dd:
         d0:ef:2f:d2:35:e5:23:1f:26:cc:73:24:0d:a1:6c:23:50:48:
         3d:7e:c5:b3:ee:ec:27:b3:9b:f5:e0:7a:d8:b5:a1:18:16:63:
         c4:5d:39:b4:1f:bf:d1:d5:a7:01:c1:f5:d5:fb:5b:f7:fe:f4:
         4d:37:61:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:32:09 2025 by rpki-client