Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/323830343a3933633a3a2f33322d3438203d3e203532383738.roa
File:                     323830343a3933633a3a2f33322d3438203d3e203532383738.roa (raw, json)
Hash identifier:          2iNhTUcEeR88uB5mYll6G+sk8NT2q3KShXDAd0BwN60=
Subject key identifier:   E2:82:76:0D:F4:06:C3:72:4E:FB:14:F0:15:E4:99:D4:65:3C:B4:36
Certificate issuer:       /CN=36636C5524467BBA576827BCA72D663FDD92AE4C
Certificate serial:       6A69A0D8E4BBFE7A5C776B60EEACE7B624BC87FA
Authority key identifier: 36:63:6C:55:24:46:7B:BA:57:68:27:BC:A7:2D:66:3F:DD:92:AE:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/323830343a3933633a3a2f33322d3438203d3e203532383738.roa
Signing time:             Sun 04 May 2025 13:49:41 +0000
ROA not before:           Sun 04 May 2025 13:44:41 +0000
ROA not after:            Sun 03 May 2026 13:49:41 +0000
asID:                     52878
IP address blocks:        2804:93c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.crl
                          rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 11:11:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:69:a0:d8:e4:bb:fe:7a:5c:77:6b:60:ee:ac:e7:b6:24:bc:87:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36636C5524467BBA576827BCA72D663FDD92AE4C
        Validity
            Not Before: May  4 13:44:41 2025 GMT
            Not After : May  3 13:49:41 2026 GMT
        Subject: CN=E282760DF406C3724EFB14F015E499D4653CB436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:2f:54:32:5c:db:95:10:76:0b:01:a5:c9:
                    16:c4:df:87:aa:b8:3b:bc:d3:94:d0:30:5a:7e:8e:
                    2f:a3:31:44:3a:0d:ee:4c:16:ec:61:aa:25:b2:ac:
                    9c:bd:e1:fe:b3:93:0b:bf:44:78:99:63:d9:55:a4:
                    bb:93:6f:d5:61:82:f5:14:8f:7c:fa:f2:35:cb:40:
                    60:27:cf:6e:87:61:8c:79:10:1c:7f:2d:f8:52:ef:
                    79:22:ab:1f:78:91:34:b7:4c:16:71:4b:f8:8e:07:
                    f8:f9:02:f3:fc:e9:f7:4c:b2:04:c7:72:aa:34:39:
                    b5:be:32:95:c8:e6:1d:3a:9f:47:65:86:0f:43:f4:
                    ac:58:e8:e3:97:cf:06:f4:02:78:d7:6c:60:7c:07:
                    81:41:42:c0:1c:27:f1:f8:5b:2e:f5:4b:2f:10:44:
                    bf:36:5e:e0:29:fa:51:11:e2:6e:bf:bd:6f:6e:f3:
                    6e:fb:78:a5:4c:c0:dd:72:94:50:ad:bd:8e:7f:0b:
                    cf:48:c6:42:70:0d:83:0a:68:c9:b6:02:a9:b0:7f:
                    3b:e5:45:0d:ef:be:d0:38:4d:c3:81:65:a7:17:47:
                    52:4d:79:8c:33:65:16:14:19:04:6f:b2:a6:f8:cb:
                    ea:eb:32:40:4d:f8:b8:75:2a:74:3b:fd:b2:06:02:
                    13:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:82:76:0D:F4:06:C3:72:4E:FB:14:F0:15:E4:99:D4:65:3C:B4:36
            X509v3 Authority Key Identifier:
                keyid:36:63:6C:55:24:46:7B:BA:57:68:27:BC:A7:2D:66:3F:DD:92:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/36636C5524467BBA576827BCA72D663FDD92AE4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/36636C5524467BBA576827BCA72D663FDD92AE4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSuGRBseT2oDkG65k5Uf8YtpTVqFy2Z7ipsFPUfBd6C4/0/323830343a3933633a3a2f33322d3438203d3e203532383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:93c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:78:d7:f8:ca:5a:db:60:48:f0:a3:c2:5b:f3:6b:6c:b5:30:
         38:77:f6:02:22:3c:c1:1e:3c:0a:92:13:c9:97:6a:bf:72:17:
         8a:ed:64:ea:4c:be:e0:55:6c:ea:f1:24:9b:c8:28:de:95:c8:
         22:a6:5e:a4:72:f1:3f:38:a7:c7:24:45:4d:4a:08:c7:31:20:
         5a:d5:81:15:62:f9:03:35:70:9a:12:f5:93:6b:b7:df:ce:c2:
         6f:d6:16:c4:34:32:8e:ce:af:18:14:b2:ef:a5:a5:6d:9d:51:
         e3:fc:38:70:8d:b1:62:d4:3b:6f:c5:7a:dd:14:a7:8c:b0:7f:
         db:19:2b:cd:32:87:3c:b7:a8:0f:22:46:4e:f2:74:da:80:a8:
         11:cd:f2:4b:c3:e1:ab:34:c4:ff:a3:a4:a5:70:9d:4d:5e:d5:
         fd:64:b8:b1:bd:e0:6b:3e:f8:b9:dd:1e:18:ae:54:9a:09:db:
         f3:80:c0:6b:f7:e9:06:03:d8:1d:4c:20:90:18:a2:90:3b:f4:
         43:a2:1e:72:cc:7f:9d:87:45:84:b2:9c:13:e0:5a:1b:05:2d:
         8c:06:1c:41:43:54:82:7c:e5:df:52:c5:22:1e:5b:28:e2:0d:
         e8:ed:c7:7b:f8:59:0c:b6:ff:70:be:0d:2f:07:4a:65:79:3c:
         6a:71:63:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 01:07:29 2025 by rpki-client