Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a383030303a3a2f33332d313238203d3e20323731343739.roa
File:                     323830343a376332383a383030303a3a2f33332d313238203d3e20323731343739.roa (raw, json)
Hash identifier:          /CyWVwcTBAiMKN2+u0+L26CUBHHyGMAAHA37qPvhCmg=
Subject key identifier:   AB:8F:E6:19:9A:B0:D1:AC:94:B4:75:35:DB:69:41:3C:8F:74:8B:21
Certificate issuer:       /CN=F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713
Certificate serial:       1B124C932BF42F5899F803D941F1F49F0F5CC504
Authority key identifier: F2:BC:DE:E2:7F:CE:80:9F:BB:2C:BD:31:8E:D1:6F:50:77:F2:E7:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a383030303a3a2f33332d313238203d3e20323731343739.roa
Signing time:             Thu 24 Jul 2025 03:37:30 +0000
ROA not before:           Thu 24 Jul 2025 03:32:30 +0000
ROA not after:            Thu 23 Jul 2026 03:37:30 +0000
asID:                     271479
IP address blocks:        2804:7c28:8000::/33 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.crl
                          rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 18:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:12:4c:93:2b:f4:2f:58:99:f8:03:d9:41:f1:f4:9f:0f:5c:c5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713
        Validity
            Not Before: Jul 24 03:32:30 2025 GMT
            Not After : Jul 23 03:37:30 2026 GMT
        Subject: CN=AB8FE6199AB0D1AC94B47535DB69413C8F748B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:48:d6:1e:ab:6a:61:c4:1a:46:c7:8b:66:42:
                    48:11:c4:b5:b0:ea:91:63:ac:2e:8a:7e:f6:8e:43:
                    63:b7:87:64:64:76:77:f8:d3:26:80:b9:82:dd:7b:
                    9f:4c:c4:52:70:fb:eb:17:f3:9f:f7:b6:a7:ea:31:
                    7b:eb:4e:f3:4f:bd:76:c0:ce:8d:83:3a:89:91:58:
                    60:5d:7d:5d:11:2c:2c:9e:5d:ef:c7:78:2e:58:16:
                    ea:ef:41:2b:07:c5:b0:f0:81:6e:0c:e9:fa:6a:72:
                    7e:dc:cc:e7:ca:93:e5:50:36:4e:6e:64:d2:2a:ac:
                    81:95:8c:27:11:40:49:b6:9b:52:9b:0f:0a:41:2d:
                    90:c1:5e:b1:ac:85:11:cd:9f:1f:45:1b:36:32:8b:
                    2b:c7:1b:12:af:21:28:00:18:57:50:28:4e:87:a1:
                    0a:5d:75:35:03:84:20:b5:40:9b:7d:79:43:2e:9a:
                    a0:ec:e6:f3:44:ae:af:38:fa:bc:27:11:c4:6c:66:
                    cb:1f:71:d8:48:92:4d:b6:a0:e6:4a:cc:4c:db:ba:
                    84:0a:54:06:d4:78:11:eb:14:6e:14:92:ef:17:5a:
                    fa:85:43:cb:eb:96:e3:e0:41:30:de:cf:a8:e1:2e:
                    8b:61:8b:83:12:0f:57:15:bf:62:03:0f:71:33:76:
                    a7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8F:E6:19:9A:B0:D1:AC:94:B4:75:35:DB:69:41:3C:8F:74:8B:21
            X509v3 Authority Key Identifier:
                keyid:F2:BC:DE:E2:7F:CE:80:9F:BB:2C:BD:31:8E:D1:6F:50:77:F2:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F2BCDEE27FCE809FBB2CBD318ED16F5077F2E713.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gp1UdqATaq3Fo9UTJb4Gs2CkH5szopYM4Lxahzo7dYmo/0/323830343a376332383a383030303a3a2f33332d313238203d3e20323731343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         80:f7:23:41:ac:57:ab:db:c9:94:26:80:a8:0f:f0:6a:89:d1:
         6c:ad:7c:68:bd:7d:0c:50:fb:cd:87:67:b3:9c:16:6e:ac:a4:
         25:3c:54:2c:64:64:79:57:10:ee:dc:ac:ab:da:9e:8f:e4:eb:
         5f:dd:e1:84:34:77:fe:a2:b8:60:0a:20:52:34:a6:09:7f:d9:
         80:02:10:9f:54:3f:8a:65:b8:c8:a2:74:60:9d:db:f5:c2:ba:
         30:b2:f5:f5:a4:a2:e5:1b:be:c0:cd:a7:69:3e:0c:62:12:ec:
         30:89:1d:5b:a6:b0:f2:d6:bd:5c:ab:2f:3f:60:58:c3:e8:71:
         6b:0a:68:cd:f3:15:1b:5e:b0:67:20:c8:27:f1:96:d6:ef:8c:
         33:c2:36:14:2b:b6:31:0e:39:c8:67:b2:f3:24:01:23:f6:ea:
         3d:d1:98:f5:ec:7b:01:3a:6a:99:90:70:2a:e8:69:b9:30:a5:
         8a:85:5a:5a:f1:cd:4c:17:b2:2d:51:5c:e6:b2:a1:86:86:eb:
         f4:c3:3c:4e:44:91:90:ca:6a:c1:51:63:12:30:57:20:ed:7a:
         80:13:e8:33:ff:d2:80:06:07:49:20:2e:8b:3d:93:e4:49:01:
         86:4a:37:e5:19:42:ee:f2:79:bb:ef:c3:c9:5c:e4:c0:27:63:
         d3:c0:67:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:50:03 2025 by rpki-client