Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d313238203d3e20323733343739.roa
File:                     323830343a386634303a3a2f33322d313238203d3e20323733343739.roa (raw, json)
Hash identifier:          VCErsSZThPUVsGJe/Pbw7W3ugX3FTu/rxKkN0R0NxYE=
Subject key identifier:   18:B1:D3:0C:01:DD:1B:32:7E:2D:01:50:6F:28:B1:B2:8C:EF:C5:B1
Certificate issuer:       /CN=0759A3DDB910E3FA1D8156E6874683CEF51A5364
Certificate serial:       7EF24C069BEDC346E5779D3DD543C346C595AACF
Authority key identifier: 07:59:A3:DD:B9:10:E3:FA:1D:81:56:E6:87:46:83:CE:F5:1A:53:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0759A3DDB910E3FA1D8156E6874683CEF51A5364.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d313238203d3e20323733343739.roa
Signing time:             Fri 15 Aug 2025 17:21:18 +0000
ROA not before:           Fri 15 Aug 2025 17:16:18 +0000
ROA not after:            Fri 14 Aug 2026 17:21:18 +0000
asID:                     273479
IP address blocks:        2804:8f40::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/0759A3DDB910E3FA1D8156E6874683CEF51A5364.crl
                          rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/0759A3DDB910E3FA1D8156E6874683CEF51A5364.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0759A3DDB910E3FA1D8156E6874683CEF51A5364.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Aug 2025 06:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:f2:4c:06:9b:ed:c3:46:e5:77:9d:3d:d5:43:c3:46:c5:95:aa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0759A3DDB910E3FA1D8156E6874683CEF51A5364
        Validity
            Not Before: Aug 15 17:16:18 2025 GMT
            Not After : Aug 14 17:21:18 2026 GMT
        Subject: CN=18B1D30C01DD1B327E2D01506F28B1B28CEFC5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:cc:09:b1:e9:fd:c7:a4:1a:e6:7a:08:e7:18:
                    67:92:e0:f4:de:fb:fc:c9:fc:44:79:25:c4:83:39:
                    fc:ae:e0:1f:67:8f:9f:c5:ff:7e:f0:c2:13:24:c7:
                    ef:ea:0b:b5:26:fe:bd:d2:c1:f6:24:a2:5a:9f:05:
                    65:cc:de:e3:86:53:f7:c9:1f:0f:b4:c5:92:8b:7e:
                    bd:dc:f1:01:be:94:d9:86:3c:98:44:45:a1:7b:66:
                    85:fa:ec:43:03:b0:62:53:6c:88:30:3e:8a:9d:26:
                    b0:0f:d4:8b:21:b0:40:ae:2b:f1:36:e3:aa:30:c0:
                    29:d4:f0:33:b0:8a:bb:86:7e:5a:2c:30:59:8b:5a:
                    d0:7d:0e:28:87:93:7f:05:97:0f:d7:44:43:55:29:
                    e4:0b:62:ac:71:97:9c:f7:0e:61:7f:14:1b:03:c9:
                    16:ca:07:43:72:f5:12:e3:8d:6b:88:5f:96:48:ba:
                    17:20:fa:00:4d:94:c4:2d:b5:c5:24:5f:8e:4d:70:
                    36:36:f9:44:4d:23:b3:ca:18:21:57:8f:15:ef:d7:
                    95:46:fb:c1:b5:77:59:27:03:4d:06:a9:37:d4:d5:
                    6a:db:e5:eb:da:0d:38:55:f8:82:a7:b6:4d:e7:44:
                    ec:e9:76:86:c5:fc:0b:c7:49:67:2b:5c:6c:d8:99:
                    55:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:D3:0C:01:DD:1B:32:7E:2D:01:50:6F:28:B1:B2:8C:EF:C5:B1
            X509v3 Authority Key Identifier:
                keyid:07:59:A3:DD:B9:10:E3:FA:1D:81:56:E6:87:46:83:CE:F5:1A:53:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/0759A3DDB910E3FA1D8156E6874683CEF51A5364.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0759A3DDB910E3FA1D8156E6874683CEF51A5364.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GU4J52NhgRktwYN2aeknBJEkbvViNkKfZPy3QKo7f7iM/0/323830343a386634303a3a2f33322d313238203d3e20323733343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:e6:c3:e7:16:02:82:12:c5:b6:9f:47:25:8f:e3:e6:08:
         e4:d8:68:b0:82:3a:5b:d1:f2:a8:8b:67:c7:21:9e:c7:5a:b9:
         b8:99:4e:f4:15:22:2d:f4:57:a6:b7:89:21:59:99:39:de:57:
         26:52:c0:e7:7e:37:d6:d6:e0:0d:27:55:73:e6:45:fe:09:00:
         83:76:7f:6b:86:c0:69:86:b0:ea:36:4e:ed:70:62:1a:45:c6:
         d5:77:17:df:31:05:bc:d8:82:b7:f0:79:e6:ce:df:85:31:c3:
         26:7b:e4:3c:dd:6e:9d:c9:74:33:e1:87:7a:53:6a:6b:58:3c:
         cd:f7:21:d3:f1:95:6b:35:74:e4:8f:53:ce:04:81:03:1b:58:
         1e:9c:4f:6a:0a:a0:a0:2a:56:82:57:65:7d:39:9b:27:4e:e9:
         eb:b1:7e:93:d5:f2:eb:62:58:7a:84:28:21:7f:a0:ce:6b:2f:
         32:6a:98:6c:a9:c8:53:bc:a6:b5:4b:9f:1a:35:a8:d9:22:30:
         00:55:a5:ee:72:51:13:a7:fc:f5:1b:3f:0f:15:03:f7:a0:bb:
         28:40:18:a2:9d:42:f9:2c:39:c0:b5:6a:8a:8b:c0:bc:4a:84:
         49:26:ad:41:fe:ce:e6:e8:b8:aa:60:75:48:f5:0c:e1:16:5b:
         f8:5e:81:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:32 2025 by rpki-client