Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33322d3337203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33322d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          gLiMnxCc6TUkshWx1SWZnO8igGzE1ammRUff+QtRy2c=
Subject key identifier:   56:7D:67:C9:D2:A0:A5:13:D6:67:B8:CA:64:25:5B:41:DF:D8:25:9A
Certificate issuer:       /CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
Certificate serial:       5CC0FF2462DFC6F9C8CE33B4F4F4A56AE0BFF624
Authority key identifier: A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33322d3337203d3e20323730343430.roa
Signing time:             Mon 11 Aug 2025 14:23:19 +0000
ROA not before:           Mon 11 Aug 2025 14:18:19 +0000
ROA not after:            Mon 10 Aug 2026 14:23:19 +0000
asID:                     270440
IP address blocks:        2804:6c04::/32 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Aug 2025 18:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c0:ff:24:62:df:c6:f9:c8:ce:33:b4:f4:f4:a5:6a:e0:bf:f6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A35B88CF5779B0065EDB77B9499B21C43A3F7C8A
        Validity
            Not Before: Aug 11 14:18:19 2025 GMT
            Not After : Aug 10 14:23:19 2026 GMT
        Subject: CN=567D67C9D2A0A513D667B8CA64255B41DFD8259A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:68:2b:46:fe:c5:6b:40:18:30:b2:42:9f:
                    b4:32:45:cd:3b:45:37:a5:ba:d4:33:a0:1c:6b:7b:
                    ec:a9:fb:a8:c2:4a:f8:b3:b9:72:f6:1a:d6:d2:40:
                    21:1a:1e:6f:e1:a6:cb:78:30:76:82:ec:be:b7:67:
                    60:0c:47:55:48:5d:a1:bb:15:9f:66:ef:94:f1:e5:
                    d2:c2:19:d1:f9:ed:72:a6:fd:17:07:99:bc:7a:a1:
                    3b:09:41:39:77:4e:1e:7a:1d:3a:35:25:64:b6:48:
                    06:72:bf:ba:27:a8:f7:fb:3c:8c:d2:2e:4f:07:be:
                    11:fc:e2:6b:10:76:37:2c:3e:01:46:98:27:29:7c:
                    57:32:10:09:68:ba:40:b8:c4:b7:3f:0a:e9:01:a1:
                    a4:7a:7d:0f:77:40:fc:55:04:c7:dc:bd:e1:a0:68:
                    29:99:fa:05:4a:24:c4:d4:85:27:e5:3d:9c:23:ce:
                    17:df:fb:38:b3:da:1f:56:a0:88:6e:09:9b:17:56:
                    d2:f2:49:e0:1f:a1:99:4d:a3:aa:8b:b6:71:61:82:
                    56:ed:09:ea:74:96:94:39:a3:f7:a6:68:94:2d:ce:
                    3e:46:5f:60:01:9e:45:93:56:10:57:89:ef:40:d3:
                    51:1d:40:19:8f:7e:d2:a3:25:47:0a:53:6e:74:9a:
                    34:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:67:C9:D2:A0:A5:13:D6:67:B8:CA:64:25:5B:41:DF:D8:25:9A
            X509v3 Authority Key Identifier:
                keyid:A3:5B:88:CF:57:79:B0:06:5E:DB:77:B9:49:9B:21:C4:3A:3F:7C:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A35B88CF5779B0065EDB77B9499B21C43A3F7C8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33322d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:6c:22:72:62:22:76:dd:d6:ec:dc:3f:68:6d:0a:5f:95:e4:
         a0:84:7a:4c:3c:41:e0:3e:b6:9f:67:71:53:f7:39:9c:df:f6:
         03:83:59:79:5b:a4:79:5e:4a:35:9f:e9:bb:45:54:39:b2:04:
         62:28:a3:e6:1d:25:67:80:90:40:8e:be:44:77:ad:f2:f4:e5:
         5a:53:2f:96:82:c7:bc:63:a5:c0:13:ba:b2:84:10:1d:e9:7d:
         8f:78:54:61:a9:87:7a:9a:cb:47:5a:5e:28:63:d7:8d:e9:0f:
         67:75:d5:c6:8a:8e:04:5a:1c:3e:47:47:85:a4:5a:cb:27:ec:
         a2:0f:95:2c:77:1c:62:6b:6d:2e:a8:e1:9d:43:9f:5c:3e:68:
         46:04:42:4e:25:28:e4:55:0b:da:2a:a5:83:00:2d:b6:54:40:
         20:f2:35:b8:dc:74:ac:46:ee:31:2f:e8:f3:72:9b:27:df:52:
         51:1b:88:48:71:69:af:74:0a:ac:b0:4f:48:23:b5:76:4e:ff:
         4d:d4:b6:62:0e:66:ae:98:79:b3:9b:0f:39:e0:2b:8a:2a:98:
         a3:a8:c1:16:25:9c:f8:5f:d7:33:a1:a4:7d:cc:7d:bc:17:47:
         9c:4e:96:06:b7:24:b6:33:c3:22:34:b5:1c:4c:bc:ac:81:83:
         ff:79:f3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 14 08:58:08 2025 by rpki-client