Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a3a2f33332d3438203d3e20323730383838.roa
File:                     323830343a373266633a3a2f33332d3438203d3e20323730383838.roa (raw, json)
Hash identifier:          Fx4/J/MqE9BRJ4Sq52LysZLWf5WyvTX4Otl3HqF/CM8=
Subject key identifier:   9F:DC:C1:91:57:2E:F8:E2:FD:7B:F5:60:B4:F7:41:4F:5E:4F:8E:07
Certificate issuer:       /CN=2CE7EAA613A389D3132F70754E25E343490494C5
Certificate serial:       06CA18A5D19295E1B95F59D9BA09B141A3394B4E
Authority key identifier: 2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a3a2f33332d3438203d3e20323730383838.roa
Signing time:             Wed 07 May 2025 17:00:57 +0000
ROA not before:           Wed 07 May 2025 16:55:57 +0000
ROA not after:            Wed 06 May 2026 17:00:57 +0000
asID:                     270888
IP address blocks:        2804:72fc::/33 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl
                          rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 10:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:18:a5:d1:92:95:e1:b9:5f:59:d9:ba:09:b1:41:a3:39:4b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CE7EAA613A389D3132F70754E25E343490494C5
        Validity
            Not Before: May  7 16:55:57 2025 GMT
            Not After : May  6 17:00:57 2026 GMT
        Subject: CN=9FDCC191572EF8E2FD7BF560B4F7414F5E4F8E07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:dc:75:d9:18:c4:a9:e8:0d:a9:dc:34:e1:46:
                    ea:8b:77:c3:81:fd:89:64:93:26:b9:bc:18:a1:f1:
                    f4:a5:15:42:07:39:b2:e3:b1:7f:3f:3e:c0:01:13:
                    bd:91:78:88:93:dc:29:ce:b7:73:20:26:0b:97:ce:
                    68:6e:f1:e0:9f:cf:5d:8c:54:9f:68:a4:e3:64:5a:
                    ac:40:db:f1:f8:63:32:31:47:8a:35:10:3b:ab:fe:
                    47:79:e1:63:d8:6e:f2:37:aa:b6:58:ef:75:9e:b9:
                    f0:76:1b:a6:5b:5a:13:63:1f:f9:88:80:2a:45:01:
                    f4:4c:d2:20:6d:c7:2c:d8:37:c6:12:a8:24:10:7e:
                    ce:b9:27:b6:a0:7b:5f:c8:68:d1:83:11:06:53:e1:
                    8a:b6:45:11:ae:f4:f6:79:82:d7:62:c2:c1:20:05:
                    15:68:6f:18:ed:41:4a:dd:2e:26:c4:ff:d2:40:6e:
                    bb:b1:06:37:da:44:2e:1f:fa:6a:22:d1:52:92:c5:
                    d9:1f:e7:49:aa:f5:be:42:b9:cd:d2:42:03:68:aa:
                    83:4b:48:b6:46:44:f8:4d:ee:81:d3:14:74:9e:ca:
                    72:b2:a4:87:de:4a:d9:6b:a2:5e:d8:87:e1:8a:1c:
                    df:a7:30:3c:00:53:01:dc:7a:5a:39:6a:ed:cf:3e:
                    09:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:DC:C1:91:57:2E:F8:E2:FD:7B:F5:60:B4:F7:41:4F:5E:4F:8E:07
            X509v3 Authority Key Identifier:
                keyid:2C:E7:EA:A6:13:A3:89:D3:13:2F:70:75:4E:25:E3:43:49:04:94:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/2CE7EAA613A389D3132F70754E25E343490494C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CE7EAA613A389D3132F70754E25E343490494C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvfhAciEXy2cQjTUjcXgMzoVpnf3AdscpYYhxuh2rwfT/0/323830343a373266633a3a2f33332d3438203d3e20323730383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72fc::/33

    Signature Algorithm: sha256WithRSAEncryption
         93:8c:3c:5e:97:b7:b8:9f:3b:84:d5:05:50:71:35:63:23:58:
         f1:99:0d:f7:a7:aa:32:c8:61:51:f6:5e:af:d8:ce:b5:fa:a3:
         7e:66:e9:1e:cb:7a:fb:7d:66:96:29:b1:1f:dc:13:43:8c:93:
         1a:91:b2:0a:84:de:0e:4b:26:98:0e:5f:2e:cd:15:de:54:6b:
         af:d0:69:c1:f1:85:ad:60:8d:31:04:bd:ce:35:e0:de:3f:e1:
         0d:9a:09:8e:9c:24:b5:bc:f5:79:60:cf:b7:c0:6d:e5:61:91:
         3d:f0:13:87:8d:06:e7:91:0f:07:72:6f:ac:e2:c5:7e:97:33:
         04:a7:dc:25:97:eb:96:d2:68:79:e8:c6:d8:3c:0a:82:62:6f:
         ac:d7:b9:2f:6c:f1:8d:47:38:39:ab:f0:07:96:b7:94:91:7e:
         cd:06:01:0f:13:cd:0b:48:27:2a:eb:50:36:b8:33:ab:35:6b:
         02:ed:a8:01:ff:07:29:a3:62:a4:46:4b:47:c6:0e:39:ab:59:
         98:89:a0:39:26:c9:41:25:5f:41:48:b8:da:ce:86:85:8a:15:
         8c:98:ec:05:c2:41:32:3d:0e:64:6c:7e:0c:a4:31:71:ae:1d:
         fb:af:0b:d9:3c:6d:c8:f9:40:ac:56:9d:21:3e:01:e0:6f:e1:
         86:17:27:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 15:09:25 2025 by rpki-client