Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/323830343a316534383a3a2f33322d3438203d3e203233373634.roa
File:                     323830343a316534383a3a2f33322d3438203d3e203233373634.roa (raw, json)
Hash identifier:          X/NFDWnUCeEKHEz5zDz3+RepsVSjFnDPNrcuwP+weDQ=
Subject key identifier:   A0:09:19:54:C1:FD:C8:08:AA:EF:80:57:5A:D4:7B:31:49:39:02:FB
Certificate issuer:       /CN=213D61EA584763705A7243F87D26327EC5CA63B0
Certificate serial:       52963CBDA7FE64EB7CB4B9ED0CC1B0FC81360A9C
Authority key identifier: 21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/323830343a316534383a3a2f33322d3438203d3e203233373634.roa
Signing time:             Wed 22 Oct 2025 19:02:23 +0000
ROA not before:           Wed 22 Oct 2025 18:57:23 +0000
ROA not after:            Wed 21 Oct 2026 19:02:23 +0000
asID:                     23764
IP address blocks:        2804:1e48::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl
                          rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 05 Nov 2025 15:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:96:3c:bd:a7:fe:64:eb:7c:b4:b9:ed:0c:c1:b0:fc:81:36:0a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213D61EA584763705A7243F87D26327EC5CA63B0
        Validity
            Not Before: Oct 22 18:57:23 2025 GMT
            Not After : Oct 21 19:02:23 2026 GMT
        Subject: CN=A0091954C1FDC808AAEF80575AD47B31493902FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:fd:b9:1c:ad:46:a5:b3:4d:2c:91:21:da:
                    8b:1a:c2:a7:03:0d:b0:df:7a:85:aa:66:18:3a:22:
                    89:a4:13:4e:9f:c3:98:9c:af:17:1d:8a:7b:28:49:
                    49:9a:5f:4c:6e:d5:a8:02:dc:dc:f4:a8:f6:ad:02:
                    b0:ef:d1:e0:aa:ad:c8:80:24:94:b4:af:9a:b6:0e:
                    1d:ea:f9:f5:a2:7c:51:d3:c6:d2:51:8d:5f:f7:e1:
                    6e:09:b3:38:1b:98:f6:02:6c:bc:4d:0f:5b:72:97:
                    89:64:6c:32:24:83:2e:21:26:d0:5d:90:8e:26:6e:
                    63:a2:e6:ff:ed:a8:da:f3:8f:36:36:6c:c4:43:53:
                    ad:cc:b7:b1:89:06:88:dc:38:e8:8a:a2:41:27:99:
                    22:18:64:d7:95:39:e6:3a:f0:e5:9d:66:1c:75:05:
                    a1:0f:d8:b2:3e:98:19:cf:91:de:01:3b:ed:70:83:
                    3f:02:05:13:61:48:b3:6c:6e:98:30:d4:30:78:f7:
                    de:6f:37:9c:b9:75:0b:1c:70:f5:b2:a2:8f:08:db:
                    fd:c8:27:36:8c:a6:ca:66:ea:e3:50:5d:ad:2b:cb:
                    4a:22:70:20:e2:94:7b:c5:ec:e9:70:5a:76:62:43:
                    d3:26:63:a8:66:b7:f7:65:ea:a6:ea:38:54:60:57:
                    7f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:19:54:C1:FD:C8:08:AA:EF:80:57:5A:D4:7B:31:49:39:02:FB
            X509v3 Authority Key Identifier:
                keyid:21:3D:61:EA:58:47:63:70:5A:72:43:F8:7D:26:32:7E:C5:CA:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/213D61EA584763705A7243F87D26327EC5CA63B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/213D61EA584763705A7243F87D26327EC5CA63B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GaHcpdMaNL7Yqe6cVbLW6kBm58E2kJfgPPoyx9RDu5VX/0/323830343a316534383a3a2f33322d3438203d3e203233373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e48::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:6b:03:14:dc:e2:e5:c1:cb:38:15:36:b6:b2:fa:43:df:98:
         10:f4:51:06:1f:dc:0b:41:f3:49:b3:a7:c4:6c:0c:37:eb:52:
         37:98:1c:5b:a1:4b:f1:23:85:96:77:20:1d:45:15:d6:3f:6e:
         9b:72:57:4e:bc:b5:c0:84:c3:56:93:1f:72:7c:a9:e1:02:3f:
         f9:28:5a:21:9e:15:9b:0d:52:b0:7e:38:cc:7d:b0:60:6b:dc:
         50:c0:40:9f:b5:e0:54:2c:70:60:7b:52:de:6c:db:d2:aa:c9:
         8c:49:0a:06:82:5e:e6:66:5a:8b:65:85:a9:81:99:04:24:ed:
         7b:20:72:c6:dd:d9:ab:96:ab:ee:bc:10:3c:db:9f:db:ff:8d:
         47:c4:52:1e:10:d1:11:d5:0f:21:e1:b7:f8:e4:6c:cc:03:9a:
         ca:af:4c:0d:30:b7:55:9b:c6:cf:d6:44:ed:78:d5:5a:d5:47:
         55:be:3e:cd:e1:82:6a:1b:1b:a8:33:c0:93:e8:c7:be:49:81:
         2f:de:47:f4:d2:2d:69:57:4d:cb:2a:8a:33:1d:17:a8:2d:4f:
         9f:dd:b7:07:a4:a0:7f:da:26:47:ea:a6:58:b4:48:3d:0b:a5:
         84:d3:75:5d:18:91:d7:6d:9e:f8:76:2b:a8:b3:f3:c5:cc:fa:
         d4:16:2f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:11:33 2025 by rpki-client