Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33332d3333203d3e20323637393633.roa
File:                     323830343a353565343a3a2f33332d3333203d3e20323637393633.roa (raw, json)
Hash identifier:          JlmdDybcSZa1n0c/vQ2GA267GHCiA3aeGiLOdez/g8Y=
Subject key identifier:   38:FC:7F:6A:05:8F:98:BB:75:FE:BA:FB:6A:18:91:5D:BA:52:C0:82
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       0991148B467F3698A67E6F14C7200463079504C0
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33332d3333203d3e20323637393633.roa
Signing time:             Mon 03 Feb 2025 13:05:19 +0000
ROA not before:           Mon 03 Feb 2025 13:00:19 +0000
ROA not after:            Mon 02 Feb 2026 13:05:19 +0000
asID:                     267963
IP address blocks:        2804:55e4::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 00:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:91:14:8b:46:7f:36:98:a6:7e:6f:14:c7:20:04:63:07:95:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Feb  3 13:00:19 2025 GMT
            Not After : Feb  2 13:05:19 2026 GMT
        Subject: CN=38FC7F6A058F98BB75FEBAFB6A18915DBA52C082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:26:50:10:74:6b:5e:af:eb:a3:b2:d9:78:
                    1e:f8:c6:62:6a:98:41:17:21:0b:da:ce:79:2b:23:
                    10:3f:d0:ba:ad:33:fe:6d:e7:36:0e:97:48:1a:9c:
                    39:6b:c2:5d:4e:e6:2d:71:01:d9:9b:6f:06:dd:d2:
                    e6:1d:e9:ea:7d:d5:46:e0:a8:6b:87:f3:ca:68:8d:
                    00:63:96:37:6f:8c:ef:4f:c0:fc:a2:65:e5:41:85:
                    93:b8:54:1d:6f:9b:c0:47:ea:fb:81:ce:98:bf:b9:
                    e8:04:59:c8:24:bf:3c:93:2d:97:5e:87:92:c8:e2:
                    4a:1c:ab:0c:70:77:3b:44:f8:ea:10:0e:8a:63:32:
                    88:5b:63:c6:a0:ff:5d:7f:5c:3f:f9:a6:7a:38:d1:
                    19:35:35:58:c0:95:d6:9c:8f:9f:17:2b:3e:90:62:
                    e8:0a:28:fa:3d:08:91:63:bb:9b:ec:93:57:0f:52:
                    e4:c5:70:65:62:f3:dc:f9:4c:ba:c0:ce:d1:27:fd:
                    d7:ef:00:14:f8:51:af:1b:69:9e:72:a2:36:6a:59:
                    e6:17:e3:3f:e3:3a:46:94:fd:2a:8f:b1:87:1c:09:
                    ce:20:a5:43:2f:79:85:45:39:1c:75:de:f3:aa:3b:
                    87:9f:42:9a:03:06:9d:cc:63:70:fa:b6:e7:ee:2d:
                    de:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FC:7F:6A:05:8F:98:BB:75:FE:BA:FB:6A:18:91:5D:BA:52:C0:82
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a3a2f33332d3333203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e4::/33

    Signature Algorithm: sha256WithRSAEncryption
         c4:34:1e:47:23:32:2b:e0:fb:1f:70:fd:ad:0c:49:2a:26:fb:
         5c:32:e0:77:80:54:39:77:87:1a:d6:3c:25:f7:d0:fd:d7:b7:
         e9:aa:07:13:ce:aa:63:87:1f:6c:2f:ab:dd:b3:d2:1c:eb:19:
         ec:fe:6a:20:4b:2e:da:52:dd:f5:dc:a9:89:28:17:7a:79:92:
         6c:8a:a2:8a:9c:3f:60:43:75:bc:0b:9b:20:96:fc:e3:03:03:
         ae:9c:29:b8:94:71:74:66:72:9c:60:35:73:ab:47:b4:84:10:
         08:37:2b:46:a2:57:9e:fa:64:93:d7:d9:71:ec:88:23:34:cb:
         db:66:e7:51:52:f8:af:e7:e1:22:0d:4c:28:04:69:93:e4:5b:
         72:18:15:5d:95:13:41:3a:9c:59:b7:c1:a0:d5:b8:b7:c2:ee:
         db:cc:88:4c:98:38:c9:46:83:a7:26:f1:a7:80:55:2f:0c:09:
         75:01:cf:84:2c:67:ad:34:c9:b7:80:02:4c:3e:27:aa:8b:bf:
         db:f6:98:b2:cd:f2:02:cc:e8:21:ae:f1:ca:dd:24:f8:2b:fa:
         ff:59:d1:19:48:a0:d2:8b:73:57:d2:1c:ee:25:83:9a:54:c8:
         8f:f6:f7:89:51:db:8a:ce:73:d4:f1:d9:89:ef:c4:8f:37:8b:
         2e:9e:f1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:05:00 2025 by rpki-client