Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a373a3a2f34382d3438203d3e203533303133.roa
File:                     323830343a3537343a373a3a2f34382d3438203d3e203533303133.roa (raw, json)
Hash identifier:          0ROqJkQT3iWSTroxCIU1SNO4OwL++nFel+at8s4Pa58=
Subject key identifier:   57:D3:91:A8:0A:5C:38:B2:EF:D9:A8:A4:D7:34:27:F3:C9:A6:D8:74
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       7E0850AFC73CC94A41A60B7E8D086ADC693D9F4A
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a373a3a2f34382d3438203d3e203533303133.roa
Signing time:             Fri 20 Jun 2025 19:00:53 +0000
ROA not before:           Fri 20 Jun 2025 18:55:53 +0000
ROA not after:            Fri 19 Jun 2026 19:00:53 +0000
asID:                     53013
IP address blocks:        2804:574:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:08:50:af:c7:3c:c9:4a:41:a6:0b:7e:8d:08:6a:dc:69:3d:9f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 20 18:55:53 2025 GMT
            Not After : Jun 19 19:00:53 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:06:ac:2f:03:0d:be:91:15:f4:58:a3:54:
                    6c:3f:23:35:06:37:08:0a:96:24:ce:6e:89:72:5c:
                    f7:c9:8f:6f:b3:a5:51:06:94:da:7e:67:01:30:9a:
                    69:e4:c7:6c:8e:9c:ab:09:4b:39:4b:df:aa:c4:3f:
                    6d:53:9d:6f:c6:e6:49:ee:8e:9f:72:72:c3:5f:16:
                    81:3d:83:82:91:62:a7:d1:84:e0:37:9e:4f:d8:c1:
                    ab:1e:31:58:f8:b2:eb:c8:2b:72:85:f7:78:33:db:
                    5a:f6:20:fa:98:03:87:7a:91:8b:3b:fd:72:d8:89:
                    fe:9d:05:a8:5d:ab:e5:3a:f1:17:83:6a:c1:51:c6:
                    ce:ef:db:4e:3b:c6:6d:da:ca:24:50:90:9d:7f:01:
                    9d:d9:75:17:4b:3a:80:1b:96:e4:c6:f5:d7:27:8b:
                    38:55:81:a2:ff:ec:7d:aa:42:68:61:02:90:08:ef:
                    36:0b:48:df:e9:57:6c:55:35:8b:7a:89:d2:1b:7b:
                    1b:d0:6c:a8:04:37:71:93:e7:c3:83:70:a7:b2:80:
                    8c:c5:cc:c2:fb:76:fe:81:d8:f7:c0:65:85:dc:57:
                    77:67:c7:98:18:55:b3:85:c4:f9:d0:18:ec:9a:cb:
                    ae:9e:79:9f:2c:d7:06:67:88:84:e2:3e:8a:15:e7:
                    c5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D3:91:A8:0A:5C:38:B2:EF:D9:A8:A4:D7:34:27:F3:C9:A6:D8:74
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a373a3a2f34382d3438203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:7::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:f1:96:fc:fa:81:8e:ab:da:13:5a:59:27:86:94:1b:a2:8f:
         aa:23:2b:f4:26:ac:8a:6b:cb:cc:4f:80:d0:b8:89:00:8b:b0:
         c1:b8:2e:49:2d:58:1a:1c:92:93:fc:71:cf:b5:a8:ad:22:98:
         c6:10:fa:64:9a:44:03:99:8f:f5:d0:f0:44:6e:52:56:82:57:
         a2:1f:0e:bc:36:8c:74:46:58:4a:99:7e:4f:81:ab:12:72:1d:
         d7:6e:39:e5:47:6c:ea:5d:be:91:a4:10:4f:d5:49:07:5d:7f:
         d0:75:01:9e:fb:b5:93:e4:f8:14:32:39:7d:e1:55:3e:2f:82:
         dd:c8:3a:a0:dd:2f:9e:47:3a:11:c6:72:3d:06:08:24:08:27:
         a5:01:b1:50:9f:fa:30:1c:a9:93:a8:b6:d1:50:22:4d:08:dc:
         3f:94:f0:3d:98:ec:0d:aa:56:05:1c:86:2b:d2:be:b5:3c:44:
         f7:f2:ba:39:72:77:f5:bb:c2:d5:9e:54:b6:0f:6c:59:c9:8d:
         b6:d5:f5:70:dd:15:21:b3:88:98:16:76:48:8f:1b:c5:07:f4:
         fb:9c:c3:d0:a7:c4:f4:c2:aa:2b:9c:f0:65:71:47:30:96:bb:
         af:4f:a2:f8:01:85:d9:93:6f:0f:75:8c:bb:d0:7e:9f:1e:61:
         2c:b6:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 00:52:23 2025 by rpki-client