Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/323830343a373065383a3a2f33322d313238203d3e20323730373535.roa
File:                     323830343a373065383a3a2f33322d313238203d3e20323730373535.roa (raw, json)
Hash identifier:          pP3tMIO0lYZ9cO0CHQwseqRc4t3Eao0q0Lqmwj64abY=
Subject key identifier:   02:36:67:FA:05:9D:41:48:FE:DB:0F:FE:EC:8F:35:17:0A:DA:3B:FC
Certificate issuer:       /CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
Certificate serial:       098464675D821A7BE66D2F970CD9F114B7AD2AD6
Authority key identifier: 7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/323830343a373065383a3a2f33322d313238203d3e20323730373535.roa
Signing time:             Sat 21 Dec 2024 14:39:08 +0000
ROA not before:           Sat 21 Dec 2024 14:34:08 +0000
ROA not after:            Sat 20 Dec 2025 14:39:08 +0000
asID:                     270755
IP address blocks:        2804:70e8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl
                          rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 13:27:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:84:64:67:5d:82:1a:7b:e6:6d:2f:97:0c:d9:f1:14:b7:ad:2a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37
        Validity
            Not Before: Dec 21 14:34:08 2024 GMT
            Not After : Dec 20 14:39:08 2025 GMT
        Subject: CN=023667FA059D4148FEDB0FFEEC8F35170ADA3BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:aa:84:56:54:c2:7a:6c:c8:6e:92:6d:e4:20:
                    8c:11:eb:f7:ee:ed:cb:3e:a9:cb:f6:58:99:de:bd:
                    81:94:c2:5f:8d:49:26:99:7b:e7:b5:25:df:11:09:
                    46:c5:e6:cb:5e:37:93:63:f4:bf:cb:7a:fd:b0:3c:
                    d6:e1:7f:3a:87:ef:61:15:20:13:ac:fb:3b:97:09:
                    67:76:f2:65:63:b5:7b:6e:97:92:51:6c:b3:d6:fa:
                    63:49:c9:7b:60:f0:57:86:f3:10:87:3b:ca:d9:48:
                    2d:87:0c:1a:b1:0a:c3:10:ba:d3:ed:09:a6:98:b3:
                    bc:67:d3:fe:83:e6:a5:d2:81:93:ec:72:c3:40:a6:
                    fe:4d:c9:60:2e:85:b5:15:54:3b:d6:ea:fb:32:06:
                    df:61:48:82:fc:4f:df:2c:62:ef:d4:11:e3:ec:73:
                    a0:82:75:1e:3c:50:3d:14:a5:4a:31:dc:44:e4:ef:
                    4d:3b:42:a6:8f:6a:82:0f:b7:1a:3c:2f:d3:5c:c8:
                    2b:48:2f:4a:ed:22:19:36:aa:f2:f5:cf:2e:d3:b2:
                    9f:5d:84:41:b6:1c:a4:0e:e8:0b:60:72:f1:22:80:
                    07:77:0b:9d:ee:04:ce:70:40:72:3f:63:4f:56:f6:
                    df:86:a2:fe:47:1b:63:a2:cc:8a:27:63:42:6f:25:
                    39:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:36:67:FA:05:9D:41:48:FE:DB:0F:FE:EC:8F:35:17:0A:DA:3B:FC
            X509v3 Authority Key Identifier:
                keyid:7F:7C:D1:E5:D0:C1:63:1E:A3:C9:58:47:8C:77:82:D0:4E:B7:FB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F7CD1E5D0C1631EA3C958478C7782D04EB7FB37.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vwycgqeiNnGbSd9XBHKmtt3hwyzJG8q4pGCYcMiRcCS/0/323830343a373065383a3a2f33322d313238203d3e20323730373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:70e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:98:2e:ef:ca:d7:86:a6:1a:98:a5:78:10:a4:5f:4c:3f:4c:
         02:05:bf:6c:aa:d6:cc:e7:c9:db:a3:f6:fb:ee:2a:1f:0d:6e:
         97:d3:09:a3:a0:b6:a9:b8:da:a6:13:64:ce:dc:bf:28:41:ce:
         b2:1d:db:68:f0:07:a9:80:2c:4e:ee:ec:3e:72:77:87:f7:87:
         3d:ad:b3:6e:32:50:a8:5b:d2:b3:2c:7e:ee:9d:16:fc:79:6b:
         4e:74:e0:59:1a:29:03:9d:45:d7:8f:2d:11:b4:78:34:00:38:
         57:10:36:45:f5:e7:7e:ef:b0:1a:2a:0e:8d:8a:fd:19:0a:51:
         09:67:71:a9:b1:ac:c4:5b:62:81:5c:70:82:34:3e:f2:d0:f2:
         7d:c5:fb:f7:4d:39:91:f2:43:b4:7f:3d:33:88:cb:27:a2:0b:
         0c:0d:87:17:01:60:0f:03:0a:63:ba:58:ba:7a:49:01:27:8e:
         71:0f:a4:b2:76:ba:59:63:ab:62:36:fd:f3:25:73:cb:3b:58:
         6f:d7:4c:11:d8:1a:5f:cb:05:f2:cf:6a:44:c6:14:7f:d4:24:
         98:d4:c2:7d:96:7e:c6:14:ba:aa:92:8f:4b:a6:10:a0:9d:56:
         ef:81:f8:34:15:5a:d3:a6:d4:36:9b:df:5f:d8:60:ac:2d:87:
         49:04:80:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:50:29 2025 by rpki-client