Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa
File:                     323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa (raw, json)
Hash identifier:          Q8iH1xMRVJEkISsJjGFQUjzUjdHNLcy8dPjrcKsSQ9s=
Subject key identifier:   9D:EF:55:59:0E:C9:A4:6E:65:13:54:0C:AE:91:F9:F1:2E:17:EC:D3
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       49E2E90A62AE16964EA0627F07415475F36F0376
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     266320
IP address blocks:        2804:3600:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e2:e9:0a:62:ae:16:96:4e:a0:62:7f:07:41:54:75:f3:6f:03:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=9DEF55590EC9A46E6513540CAE91F9F12E17ECD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:6f:bc:e9:8a:03:3d:a7:41:13:db:bc:10:
                    e8:6a:bd:c9:f2:cc:69:e5:c2:4e:ae:f0:44:d7:c8:
                    fc:11:79:9b:a3:ae:94:a8:ee:fe:c0:c6:c2:10:da:
                    3f:ea:67:8d:29:cc:58:15:df:d7:06:26:63:41:50:
                    c8:3b:74:c7:31:b1:b3:d5:f4:dd:c0:8b:02:ca:ee:
                    37:b7:be:a8:f5:24:4b:ea:cf:03:ee:e3:67:db:0b:
                    60:6b:68:35:66:0e:11:b2:42:ad:9c:fb:34:7f:87:
                    50:d2:ae:9d:b8:5b:d5:a5:87:20:78:0e:7c:0a:5f:
                    27:6d:e6:0e:8c:bf:c6:65:35:61:80:f9:25:1b:b8:
                    64:61:39:33:36:d8:fc:47:ef:29:27:66:23:e5:d3:
                    f4:43:5f:0c:7d:e5:d0:48:0d:22:ae:7a:19:d8:a8:
                    e5:11:a8:9d:a9:87:e6:13:7e:9b:89:7f:a5:b7:02:
                    93:8a:89:ee:e1:34:65:2b:a9:6b:ae:c8:d5:0a:87:
                    a9:80:13:1e:e3:b4:76:fa:b5:64:87:d3:d4:6b:da:
                    81:82:ee:2a:2b:6a:be:97:7b:a0:d5:2a:25:d3:49:
                    fa:9f:1c:ed:c9:8c:b8:19:b5:d1:6c:4e:06:b8:db:
                    7b:ff:8f:53:b5:2c:30:ba:20:d9:11:e6:c4:de:08:
                    e5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EF:55:59:0E:C9:A4:6E:65:13:54:0C:AE:91:F9:F1:2E:17:EC:D3
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a383030303a3a2f33332d3333203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         9f:8c:c2:8f:7f:a7:0c:ea:00:31:e0:7f:83:4e:d9:94:56:96:
         63:66:7f:cf:0e:14:b5:d4:17:f9:af:97:72:85:d4:64:f3:07:
         b8:0f:ea:b9:3f:ab:4a:bf:bb:5a:f2:6f:9f:6d:89:a7:33:b0:
         af:e4:b7:f1:a9:91:47:db:8b:34:02:6c:7e:c1:85:66:69:8e:
         7d:f1:43:71:32:de:77:ef:17:a4:0b:0a:0a:bb:e1:82:7a:44:
         fd:01:5b:d2:33:51:8d:f3:78:c0:ba:ea:1b:db:6f:71:43:8d:
         84:eb:7d:d0:db:25:28:2d:5a:68:6f:2c:ff:cd:cc:16:6e:59:
         a7:75:c9:15:1f:2d:a4:5d:09:b7:03:59:e3:13:d6:bc:93:c5:
         b8:04:2b:8e:29:05:9c:45:c9:ac:72:94:a3:ee:b8:11:22:0b:
         f7:1b:d3:f3:40:89:ad:7c:a2:24:a8:83:bc:dc:7d:c9:49:d6:
         d5:16:de:3b:ee:13:53:db:3e:44:67:4b:14:05:4a:c6:1f:c9:
         b6:b0:4a:82:9c:ca:14:d8:5a:bf:79:b6:45:3e:a3:94:cc:ee:
         51:17:0b:b3:e2:60:b8:52:1a:dc:e5:2e:93:fc:45:25:dc:1c:
         d4:74:af:8b:a2:01:52:37:54:af:fc:b2:86:e3:2a:3c:d1:46:
         66:5a:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:30:32 2025 by rpki-client