Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/323830343a376535633a3a2f33322d313238203d3e20323731363139.roa
File:                     323830343a376535633a3a2f33322d313238203d3e20323731363139.roa (raw, json)
Hash identifier:          CmOjX6Nf7KGBffUUwNgAPLDDW5nEnDSg95UxY1maNGM=
Subject key identifier:   66:49:C2:B0:7F:F9:B6:1B:9B:EE:00:A0:E1:E3:F4:FB:65:53:44:0F
Certificate issuer:       /CN=0580FCB80D10C913EE92386D442A6DCD904C68FD
Certificate serial:       4A9CDD1D791B070126A6B0EFA698D245843F1150
Authority key identifier: 05:80:FC:B8:0D:10:C9:13:EE:92:38:6D:44:2A:6D:CD:90:4C:68:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0580FCB80D10C913EE92386D442A6DCD904C68FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/323830343a376535633a3a2f33322d313238203d3e20323731363139.roa
Signing time:             Mon 14 Jul 2025 13:47:41 +0000
ROA not before:           Mon 14 Jul 2025 13:42:41 +0000
ROA not after:            Mon 13 Jul 2026 13:47:41 +0000
asID:                     271619
IP address blocks:        2804:7e5c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/0580FCB80D10C913EE92386D442A6DCD904C68FD.crl
                          rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/0580FCB80D10C913EE92386D442A6DCD904C68FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0580FCB80D10C913EE92386D442A6DCD904C68FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 09:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:9c:dd:1d:79:1b:07:01:26:a6:b0:ef:a6:98:d2:45:84:3f:11:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0580FCB80D10C913EE92386D442A6DCD904C68FD
        Validity
            Not Before: Jul 14 13:42:41 2025 GMT
            Not After : Jul 13 13:47:41 2026 GMT
        Subject: CN=6649C2B07FF9B61B9BEE00A0E1E3F4FB6553440F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:04:ab:31:3b:41:e2:53:b4:45:43:24:ca:1f:
                    34:07:cb:46:12:d5:88:e8:ae:07:4a:8f:02:50:b4:
                    a5:6c:a0:a6:9e:35:c8:7e:de:c0:78:28:85:de:e4:
                    78:3b:33:0d:cf:e5:34:22:33:b3:c4:91:9e:18:a9:
                    ef:be:ac:4e:dd:3d:ff:46:f8:f3:62:7c:e4:9f:a0:
                    8f:53:67:b0:02:8c:71:b6:be:45:66:a2:96:0c:b9:
                    26:55:e9:be:58:8a:a2:5c:3c:82:69:ee:b3:4b:af:
                    ee:05:1d:48:33:6d:e1:22:e9:d2:45:98:f4:32:98:
                    cd:46:68:86:97:15:a6:d0:97:83:e3:33:26:c4:a2:
                    17:e9:c2:1a:b9:96:39:f6:b1:d3:7d:91:94:6f:b0:
                    8d:b8:09:1e:44:ff:7a:04:4a:c0:a7:ee:a4:12:9e:
                    2a:6e:02:1e:58:e2:61:a6:86:89:98:74:41:11:4c:
                    b6:02:63:14:80:f8:04:24:83:b0:c3:9b:1a:34:4b:
                    00:79:77:47:d7:a6:fd:93:8d:d3:86:da:03:2b:19:
                    59:43:12:e6:e4:fe:ee:b1:a4:f1:f6:50:86:f7:18:
                    a0:94:9d:87:b6:a3:08:a5:d1:0d:ed:bc:4a:16:10:
                    f1:8d:e7:46:2b:2d:32:da:0c:69:45:3e:d9:f1:21:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:49:C2:B0:7F:F9:B6:1B:9B:EE:00:A0:E1:E3:F4:FB:65:53:44:0F
            X509v3 Authority Key Identifier:
                keyid:05:80:FC:B8:0D:10:C9:13:EE:92:38:6D:44:2A:6D:CD:90:4C:68:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/0580FCB80D10C913EE92386D442A6DCD904C68FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0580FCB80D10C913EE92386D442A6DCD904C68FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gs83JRfBrE2TkmX5UkYhfGbYi9MeHKhrkqpE7E8yRXEL/0/323830343a376535633a3a2f33322d313238203d3e20323731363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:6c:e0:2c:ab:88:bf:45:fb:23:9f:f7:bd:67:a6:73:3b:d7:
         d8:82:84:a3:9d:43:a0:0f:dc:1a:90:d1:f1:d4:c8:8c:14:0f:
         06:58:5e:1a:41:25:12:32:fe:b1:a2:ea:00:47:fe:4d:08:37:
         b2:e8:da:35:4d:ee:77:c7:96:e9:23:74:98:b7:97:91:7b:eb:
         2a:d4:8f:f4:85:af:7e:32:70:ff:44:53:79:5b:72:18:98:fb:
         80:15:90:00:24:5c:7b:c6:69:95:54:e0:45:bb:7c:1e:7a:9c:
         bd:48:ca:96:c8:73:a8:9a:23:06:22:84:da:ab:78:77:1e:c1:
         a7:60:1c:37:a7:5c:76:b8:00:fa:d7:3b:0d:04:2b:ca:b3:0e:
         81:82:1a:2a:e6:48:f7:54:c6:a8:d5:8e:9e:9f:23:23:2a:34:
         b2:52:a5:20:69:06:8a:9a:f4:67:7b:27:f5:bf:3f:94:bf:1f:
         27:f3:4c:5f:86:13:dc:35:f8:0c:b8:24:2c:60:e5:65:65:52:
         f6:19:19:7b:46:d0:93:29:6c:13:7f:61:e9:18:1c:bc:fd:5a:
         7b:1a:05:35:50:d7:09:54:ab:e4:19:7a:be:34:8d:2d:fc:b6:
         de:97:0e:d0:7d:03:5c:4f:6e:66:27:af:ca:93:0d:d8:dd:e3:
         cd:eb:b0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:25:55 2025 by rpki-client