Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a383030303a3a2f33332d3333203d3e203533303133.roa
File:                     323830343a3537343a383030303a3a2f33332d3333203d3e203533303133.roa (raw, json)
Hash identifier:          bVIFDqtB/GAiuy+AxOQsOOaV/abH2HJon/Tpe0IAb/k=
Subject key identifier:   47:E9:B2:53:F4:26:17:B5:BC:87:3B:D7:2D:95:7E:DE:BC:74:8D:32
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       081A3A7A907BF0945F0BC8064EE73DF6CCDFC3E3
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a383030303a3a2f33332d3333203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:06:11 +0000
ROA not before:           Wed 18 Jun 2025 16:01:11 +0000
ROA not after:            Wed 17 Jun 2026 16:06:11 +0000
asID:                     53013
IP address blocks:        2804:574:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:1a:3a:7a:90:7b:f0:94:5f:0b:c8:06:4e:e7:3d:f6:cc:df:c3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 16:01:11 2025 GMT
            Not After : Jun 17 16:06:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bd:42:92:6e:b5:9c:49:11:cb:42:d7:44:73:
                    4a:e5:7b:72:6f:38:4b:e3:34:09:c3:89:5e:67:73:
                    32:91:d8:43:0f:90:00:73:a4:bd:c5:cf:8a:0a:2f:
                    5c:7a:6c:5b:2c:7f:57:41:a6:74:97:64:de:83:fd:
                    07:76:8a:6e:3b:5c:3f:31:a8:38:6e:62:91:7c:ca:
                    8d:59:5a:bd:71:75:d4:c4:81:31:0d:97:08:c0:c1:
                    28:9d:1c:6e:6e:4e:ce:36:c3:0b:00:b2:ad:f1:79:
                    c2:b1:be:62:a1:78:59:13:5e:ae:c9:1c:61:3b:c1:
                    a8:2e:f0:90:c0:59:9c:ea:83:92:e1:d1:5b:15:f3:
                    bf:d8:83:86:49:c4:ce:a4:4c:8f:75:c6:d4:c2:69:
                    86:ee:93:4e:ff:31:e6:5a:12:0e:a9:ee:cd:9d:6e:
                    29:43:10:f1:27:97:c8:a9:cc:af:b6:14:60:30:11:
                    89:19:34:6a:01:d0:fe:ba:2c:31:0e:83:2f:07:e6:
                    bc:53:49:9d:d6:85:f7:55:fa:d3:b0:4b:30:37:1f:
                    20:bf:eb:2d:dc:c9:24:7e:05:9d:b3:a7:e8:dd:2b:
                    20:5a:c1:bb:d6:a5:3c:f9:a7:1b:06:34:a0:1e:13:
                    0a:ef:ec:52:97:a5:2f:d0:c6:f0:dd:c9:54:e5:e3:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E9:B2:53:F4:26:17:B5:BC:87:3B:D7:2D:95:7E:DE:BC:74:8D:32
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a383030303a3a2f33332d3333203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:a0:c7:6e:4a:ff:23:2b:e7:3a:20:38:b8:ee:78:5f:de:
         c8:55:e2:fc:0c:a5:5b:0c:10:cf:f1:5d:6d:2b:48:4c:fb:3e:
         2a:af:f2:69:41:a4:84:03:c6:d2:5e:f4:11:9c:0d:56:07:2d:
         e9:bd:bc:6b:4f:6b:2d:a0:9e:64:ba:95:4f:2b:ef:05:35:cb:
         8e:a6:35:84:72:df:3f:ac:ea:c6:9e:a9:ce:5e:2d:a9:1e:fd:
         a5:2b:fe:4b:c2:59:3c:28:fe:21:75:34:16:5f:7a:63:42:2f:
         6b:cb:6d:82:5d:ef:37:ce:d9:af:67:af:66:d7:6c:a5:92:7f:
         0b:b0:da:49:40:13:e0:64:50:26:b7:e5:de:95:9a:a1:e3:51:
         9f:af:06:06:68:aa:39:39:14:77:5f:4d:80:53:f5:91:32:42:
         8c:57:18:f5:35:b2:86:ab:c7:cd:5f:a8:bd:2b:6e:d9:02:3f:
         df:e3:fe:26:6b:36:08:45:26:6c:3c:fb:ee:ac:cf:01:30:9c:
         55:6e:00:72:b3:96:a7:78:07:93:7e:e7:da:3f:1e:39:0f:cb:
         48:53:0c:46:ca:5c:02:8d:17:a5:f5:59:e4:17:b7:7a:c0:40:
         b8:ff:31:36:fb:e6:8c:87:1d:54:f2:6e:fc:23:04:d6:bc:87:
         9a:4b:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:17:43 2025 by rpki-client