Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa
File:                     323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa (raw, json)
Hash identifier:          epNHybac0zM1D8F/FWeKSUIvWMZS/fdVCCf12+X+9g8=
Subject key identifier:   BF:AD:0A:0C:A2:9C:53:2B:E1:82:47:A7:74:B0:F8:83:A1:52:0D:6F
Certificate issuer:       /CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
Certificate serial:       4AE3D625ECE3158906D1B5558E0C291A52C31C14
Authority key identifier: 47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa
Signing time:             Mon 30 Jun 2025 17:40:30 +0000
ROA not before:           Mon 30 Jun 2025 17:35:30 +0000
ROA not after:            Mon 29 Jun 2026 17:40:30 +0000
asID:                     269144
IP address blocks:        2804:6014:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl
                          rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 01:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:d6:25:ec:e3:15:89:06:d1:b5:55:8e:0c:29:1a:52:c3:1c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=474E4FE6C0585832935E6E5D9A67EE410B274CCB
        Validity
            Not Before: Jun 30 17:35:30 2025 GMT
            Not After : Jun 29 17:40:30 2026 GMT
        Subject: CN=BFAD0A0CA29C532BE18247A774B0F883A1520D6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:eb:ab:2f:ed:72:ca:6c:01:07:9a:12:c4:
                    14:88:ad:0c:12:7a:63:d0:20:ef:73:46:b3:83:a2:
                    52:d7:7b:6c:14:88:01:be:06:2a:5b:34:b8:e6:b6:
                    5c:42:e2:09:fe:d6:3b:95:31:18:50:21:84:13:57:
                    aa:75:9a:7a:4a:66:cf:f8:04:55:43:2f:9d:ef:d7:
                    db:50:ac:0b:b1:61:a0:9c:e2:e0:7f:ba:79:e4:7c:
                    0f:b0:e1:f7:8c:d3:a2:b4:2a:09:eb:49:87:7c:25:
                    ba:40:85:90:01:a7:dd:a9:0b:ad:3e:e8:db:a2:c2:
                    05:e0:1f:ec:32:9e:30:f2:13:e7:72:74:88:01:30:
                    76:91:81:fd:7a:da:64:6b:69:a2:35:e8:fd:ca:f8:
                    31:76:02:47:0e:15:9b:94:f6:44:f5:56:f3:25:6f:
                    33:36:6e:09:7c:d6:b7:a1:a9:50:62:19:54:24:13:
                    e5:75:e9:f3:da:f4:2a:92:1a:f6:04:35:82:f9:2f:
                    ad:fe:31:ea:ca:bc:40:b0:78:66:a5:63:94:90:29:
                    91:57:ef:97:52:7b:2e:c1:4e:e7:c0:2a:56:e8:1f:
                    c6:70:81:1d:e7:e0:53:36:9e:1d:50:5c:d2:2d:e6:
                    64:30:ad:fe:15:d7:92:ea:22:16:25:9c:46:d7:db:
                    36:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AD:0A:0C:A2:9C:53:2B:E1:82:47:A7:74:B0:F8:83:A1:52:0D:6F
            X509v3 Authority Key Identifier:
                keyid:47:4E:4F:E6:C0:58:58:32:93:5E:6E:5D:9A:67:EE:41:0B:27:4C:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/474E4FE6C0585832935E6E5D9A67EE410B274CCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/474E4FE6C0585832935E6E5D9A67EE410B274CCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZVko5uF2VBMxWUzpr6BYYXqsciF6NN1zzXW8TsJz4Ky/0/323830343a363031343a3330303a3a2f34302d3430203d3e20323639313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6014:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:c8:d7:80:6b:7a:d7:b1:00:8e:fa:88:df:91:2b:63:5c:0c:
         a1:3b:1a:1e:05:22:87:0e:45:80:41:89:fb:cc:4a:67:d0:84:
         16:5c:c8:58:93:be:2d:7d:9a:54:b8:7c:59:2f:35:a1:cb:64:
         6f:d7:4f:64:85:98:c1:73:bf:c6:a6:de:50:a5:c7:d2:89:cf:
         bc:07:39:5a:85:28:a4:40:38:ff:47:9b:b6:e6:79:b8:58:b4:
         e1:a8:2a:1f:c5:c7:9f:d5:c5:52:15:2a:9b:13:55:2e:2d:16:
         2a:b8:55:20:53:b5:f2:70:5e:8a:3c:6a:9d:a5:58:5e:74:f9:
         76:10:1e:a6:d1:6b:77:16:5e:06:3d:69:b6:d4:29:99:bb:9b:
         6e:7c:2c:4e:9b:e4:f2:65:da:6b:27:ec:55:44:f8:50:2b:79:
         a7:52:55:6a:2a:76:a7:69:38:4e:d7:bb:40:e2:2b:97:14:26:
         15:48:aa:5f:10:cb:61:45:bc:d8:27:8f:55:98:6c:7d:42:d2:
         6a:91:83:c5:30:68:2d:46:c0:9c:cb:0f:1e:3a:68:6e:82:a9:
         7b:13:8d:02:34:aa:74:c2:f2:b5:74:f7:69:e7:5d:21:7b:27:
         aa:43:1a:ec:26:61:29:87:31:5b:4b:31:c4:a8:1f:5d:93:a2:
         5a:3f:ed:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUSuPWJezjFYkG0bVVjgwpGlLDHBQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc0RTRGRTZDMDU4NTgzMjkzNUU2RTVEOUE2N0VFNDEw
QjI3NENDQjAeFw0yNTA2MzAxNzM1MzBaFw0yNjA2MjkxNzQwMzBaMDMxMTAvBgNV
BAMTKEJGQUQwQTBDQTI5QzUzMkJFMTgyNDdBNzc0QjBGODgzQTE1MjBENkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8X+urL+1yymwBB5oSxBSIrQwS
emPQIO9zRrODolLXe2wUiAG+BipbNLjmtlxC4gn+1juVMRhQIYQTV6p1mnpKZs/4
BFVDL53v19tQrAuxYaCc4uB/unnkfA+w4feM06K0KgnrSYd8JbpAhZABp92pC60+
6NuiwgXgH+wynjDyE+dydIgBMHaRgf162mRraaI16P3K+DF2AkcOFZuU9kT1VvMl
bzM2bgl81rehqVBiGVQkE+V16fPa9CqSGvYENYL5L63+MerKvECweGalY5SQKZFX
75dSey7BTufAKlboH8ZwgR3n4FM2nh1QXNIt5mQwrf4V15LqIhYlnEbX2zazAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUv60KDKKcUyvhgkendLD4g6FSDW8wHwYDVR0j
BBgwFoAUR05P5sBYWDKTXm5dmmfuQQsnTMswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pWa281dUYyVkJNeFdVenByNkJZWVhxc2NpRjZOTjF6elhXOFRzSno0
S3kvMC80NzRFNEZFNkMwNTg1ODMyOTM1RTZFNUQ5QTY3RUU0MTBCMjc0Q0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ3NEU0RkU2QzA1ODU4MzI5
MzVFNkU1RDlBNjdFRTQxMEIyNzRDQ0IuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daVmtvNXVGMlZCTXhXVXpwcjZCWVlYcXNjaUY2Tk4xenpYVzhUc0p6NEt5LzAv
MzIzODMwMzQzYTM2MzAzMTM0M2EzMzMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNl
MjAzMjM2MzkzMTM0MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAoBGAUAzANBgkqhkiG9w0BAQsFAAOC
AQEAXsjXgGt617EAjvqI35ErY1wMoTsaHgUihw5FgEGJ+8xKZ9CEFlzIWJO+LX2a
VLh8WS81octkb9dPZIWYwXO/xqbeUKXH0onPvAc5WoUopEA4/0ebtuZ5uFi04agq
H8XHn9XFUhUqmxNVLi0WKrhVIFO18nBeijxqnaVYXnT5dhAeptFrdxZeBj1pttQp
mbubbnwsTpvk8mXaayfsVUT4UCt5p1JVaip2p2k4Tte7QOIrlxQmFUiqXxDLYUW8
2CePVZhsfULSapGDxTBoLUbAnMsPHjpoboKpexONAjSqdMLytXT3aeddIXsnqkMa
7CZhKYcxW0sxxKgfXZOiWj/t/g==
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:26:57 2025 by rpki-client