Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
File:                     323830343a383039383a3a2f33322d3438203d3e20323731373631.roa (raw, json)
Hash identifier:          CLGpGZDv4m+pojiniwfua1TP6KJbVQ6BK7vU/fvZ1K8=
Subject key identifier:   21:FF:04:82:8D:99:D1:CB:77:01:A3:D8:9B:02:09:50:5B:A5:72:91
Certificate issuer:       /CN=3063696774AF70B4C4AD74E6ECFFA375F9E4930E
Certificate serial:       23F8C62F08388A6175DCD86168E4F61BF9B3F450
Authority key identifier: 30:63:69:67:74:AF:70:B4:C4:AD:74:E6:EC:FF:A3:75:F9:E4:93:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa
Signing time:             Tue 08 Apr 2025 13:23:53 +0000
ROA not before:           Tue 08 Apr 2025 13:18:53 +0000
ROA not after:            Tue 07 Apr 2026 13:23:53 +0000
asID:                     271761
IP address blocks:        2804:8098::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.crl
                          rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 16:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f8:c6:2f:08:38:8a:61:75:dc:d8:61:68:e4:f6:1b:f9:b3:f4:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3063696774AF70B4C4AD74E6ECFFA375F9E4930E
        Validity
            Not Before: Apr  8 13:18:53 2025 GMT
            Not After : Apr  7 13:23:53 2026 GMT
        Subject: CN=21FF04828D99D1CB7701A3D89B0209505BA57291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:15:f4:c0:8b:9a:1c:db:aa:2d:28:c4:43:80:
                    2b:a6:66:a7:e0:b8:b5:98:66:a3:7d:1a:d6:e6:0f:
                    f1:0f:07:1b:e6:dc:bf:94:a5:38:8e:c5:64:c5:65:
                    94:2b:e9:a8:d3:f4:21:1e:66:ae:42:5f:5d:27:e5:
                    e2:ec:fe:96:1d:b4:78:7d:03:78:d3:0a:9a:51:3a:
                    7e:0b:89:68:0a:66:e2:d2:40:a4:4b:f1:8d:ad:e3:
                    08:e9:86:b7:c0:b4:3e:a8:dd:81:cc:6c:76:bb:84:
                    92:29:3f:3a:ec:4d:1b:23:4b:63:6a:d2:3a:38:ff:
                    4b:ea:63:da:89:d0:c3:15:65:cf:cb:9f:1f:14:6f:
                    04:03:0a:b6:f4:b7:b7:71:14:06:d9:5c:d9:52:58:
                    83:67:6f:a7:a9:ca:00:97:fe:85:2f:7d:90:07:88:
                    4c:41:97:55:c5:35:ae:55:6b:0a:47:9d:7e:ff:4a:
                    d0:22:31:56:a6:d9:41:77:59:4a:18:cc:2c:c3:f9:
                    1c:9c:17:fc:b8:02:61:0d:3f:b1:6d:4d:91:cb:09:
                    81:a4:1c:6e:7b:db:6d:44:a0:45:65:b4:c6:8b:1d:
                    a9:d9:20:6c:15:0a:76:1d:33:19:95:54:7a:39:44:
                    89:0b:39:9b:b7:db:f5:2e:ff:d1:64:6b:e3:e6:57:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:04:82:8D:99:D1:CB:77:01:A3:D8:9B:02:09:50:5B:A5:72:91
            X509v3 Authority Key Identifier:
                keyid:30:63:69:67:74:AF:70:B4:C4:AD:74:E6:EC:FF:A3:75:F9:E4:93:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3063696774AF70B4C4AD74E6ECFFA375F9E4930E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G89gJgZeyhfjANknxDvMdhkyXhQf6VreXRWReDzbAjg/0/323830343a383039383a3a2f33322d3438203d3e20323731373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8098::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:40:88:37:2f:fd:31:40:1d:62:bb:bf:0a:73:fc:14:ce:e0:
         97:df:95:e7:c5:6d:a8:d5:39:ec:57:a1:0e:95:d9:02:49:15:
         7f:4a:e8:55:44:9a:37:d7:68:9c:a5:77:db:f2:0a:ac:0e:c2:
         59:a7:cd:0c:1c:1e:3f:2d:dd:fa:c6:1c:9e:4b:f4:26:dd:e9:
         75:eb:e3:d3:1c:65:01:61:c5:ef:d0:6e:3b:c7:5a:39:1c:db:
         91:05:8f:9e:55:1a:7a:47:b1:05:92:ac:6c:8c:7d:90:08:de:
         94:69:e6:b5:bd:66:7b:90:9b:62:ca:a6:8f:9f:0e:7b:39:11:
         df:7c:63:3a:98:32:c6:62:70:65:33:4c:8c:2a:94:aa:90:13:
         38:ba:ca:de:21:cf:09:17:b1:e9:ee:c3:b1:db:5a:98:33:f1:
         85:40:32:5f:82:39:a9:10:70:ec:3d:57:60:b3:09:e2:82:ac:
         50:d1:62:0a:b7:e0:33:d9:a0:4e:89:44:a8:1c:de:cd:8b:db:
         06:25:f9:07:37:e9:e9:da:fd:5a:c6:12:e2:d1:ac:ae:31:e8:
         69:a8:35:4e:5d:d3:d6:a0:ce:62:aa:e7:75:04:16:4f:82:51:
         49:5b:f8:ae:e0:2d:23:8c:c0:dd:f8:48:b6:b7:87:34:92:6f:
         94:b2:3c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:14:39 2025 by rpki-client