Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d313238203d3e20323637393935.roa
File:                     323830343a353636343a3a2f33322d313238203d3e20323637393935.roa (raw, json)
Hash identifier:          yBJLVY573oMtFcz0CjlfuteQ1wYsu7OGqA7L4vjCAB4=
Subject key identifier:   36:3C:64:46:7F:58:00:37:BD:81:95:09:BA:E1:42:CC:EA:74:7B:B7
Certificate issuer:       /CN=697580E8392CC653843C7008AA3115A37A09736A
Certificate serial:       1B03346CA21219E1EC3EBF5A2BAF142A57C1BECC
Authority key identifier: 69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d313238203d3e20323637393935.roa
Signing time:             Wed 11 Jun 2025 16:50:32 +0000
ROA not before:           Wed 11 Jun 2025 16:45:32 +0000
ROA not after:            Wed 10 Jun 2026 16:50:32 +0000
asID:                     267995
IP address blocks:        2804:5664::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl
                          rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 19:11:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:03:34:6c:a2:12:19:e1:ec:3e:bf:5a:2b:af:14:2a:57:c1:be:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697580E8392CC653843C7008AA3115A37A09736A
        Validity
            Not Before: Jun 11 16:45:32 2025 GMT
            Not After : Jun 10 16:50:32 2026 GMT
        Subject: CN=363C64467F580037BD819509BAE142CCEA747BB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b4:6d:48:6e:1f:c9:ab:6c:6f:a9:6d:86:6c:
                    54:60:52:ca:1d:80:e3:3a:e6:65:da:f9:5a:73:e2:
                    33:e2:3f:9b:60:6a:f2:08:85:73:40:54:7c:f2:5b:
                    8b:9d:51:82:94:15:d2:90:ad:91:91:69:60:dc:ed:
                    e9:cf:25:84:9b:3d:91:14:09:3a:d5:e5:3b:b2:e6:
                    43:71:4b:80:cd:d9:e4:32:f9:63:78:56:ee:44:6d:
                    5f:89:0c:01:da:ec:2c:22:f6:dd:ba:0c:72:bd:e4:
                    8f:e9:d7:20:df:be:bd:a9:02:61:3f:ff:80:e0:3e:
                    18:72:a6:0e:69:13:06:26:19:1f:47:38:56:fa:83:
                    09:74:1a:cf:7f:2f:7c:16:1a:bf:40:31:54:43:3e:
                    58:d2:24:6f:64:0c:42:c0:21:ad:87:70:f9:66:d1:
                    07:ae:6c:28:be:48:a0:19:6a:50:da:5d:d5:f3:44:
                    2b:2f:0e:29:3e:41:ad:48:e8:2f:97:c5:bb:5a:4a:
                    6d:91:ba:0d:bd:22:00:61:6b:28:80:88:d4:49:47:
                    d1:7f:68:f3:fa:da:d0:db:7d:e6:38:a2:91:13:0d:
                    93:09:c9:f7:9e:5b:79:3d:5d:43:fd:50:c5:b8:f4:
                    93:9c:3e:d1:42:18:5f:dd:83:e8:a0:ef:c9:a0:e3:
                    bf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3C:64:46:7F:58:00:37:BD:81:95:09:BA:E1:42:CC:EA:74:7B:B7
            X509v3 Authority Key Identifier:
                keyid:69:75:80:E8:39:2C:C6:53:84:3C:70:08:AA:31:15:A3:7A:09:73:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/697580E8392CC653843C7008AA3115A37A09736A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/697580E8392CC653843C7008AA3115A37A09736A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/1/323830343a353636343a3a2f33322d313238203d3e20323637393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5664::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a3:e8:c7:d9:7e:8d:73:0a:ee:44:cd:90:e5:0b:b4:17:3d:
         29:d6:fc:67:9b:4e:31:7f:8e:91:2f:b3:60:40:1d:ab:8b:5a:
         37:bb:da:3a:20:d0:08:98:0a:03:1c:2c:0a:f2:2e:c3:87:17:
         3e:fb:27:24:eb:e1:2d:b0:54:81:87:7a:53:2e:09:31:a9:3b:
         a5:4f:94:b2:57:60:30:29:09:71:b9:98:fb:66:3b:2f:14:cc:
         f1:dc:7b:e1:94:91:42:b7:d7:2b:68:72:88:63:a6:3c:5d:6f:
         54:a7:1f:1c:fd:a7:23:8a:1f:75:cd:63:0b:32:6d:6e:12:ef:
         41:5e:18:ba:1d:09:db:5a:9a:15:87:63:fc:cc:e0:9a:eb:74:
         83:47:03:42:74:0f:e7:84:6c:0a:11:f7:12:75:16:12:0e:55:
         0c:56:62:59:cb:e3:db:30:7b:d5:d0:88:76:ab:7a:cc:9e:49:
         46:26:d2:5e:58:0a:e4:82:a0:a8:96:63:26:a2:6a:70:49:58:
         52:11:4d:cd:2c:90:f0:3c:d0:17:c1:d2:75:52:3e:78:ab:80:
         ed:0d:1e:63:ce:07:ac:e0:6b:e6:a5:88:55:fd:26:6b:c4:c8:
         dd:12:6e:3b:4b:b1:d0:7b:dc:4d:20:6d:72:e3:2c:0a:1d:bc:
         89:fa:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:20:24 2025 by rpki-client