Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33332d3333203d3e20323636333230.roa
File:                     323830343a333630303a3a2f33332d3333203d3e20323636333230.roa (raw, json)
Hash identifier:          BcGC+epgztA5VoQ71kOh3HFEznh+rgeBpjdNDogMNyo=
Subject key identifier:   DA:AF:9F:B4:F3:5C:D9:ED:DF:78:44:9A:A1:DC:D0:92:72:87:DF:C0
Certificate issuer:       /CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
Certificate serial:       6194632FA838E5C536AA46C99EBF86CCD58ED1C6
Authority key identifier: 1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33332d3333203d3e20323636333230.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     266320
IP address blocks:        2804:3600::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl
                          rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:94:63:2f:a8:38:e5:c5:36:aa:46:c9:9e:bf:86:cc:d5:8e:d1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject: CN=DAAF9FB4F35CD9EDDF78449AA1DCD0927287DFC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:15:a7:70:1d:86:5c:fe:57:5d:62:f5:b8:16:
                    c9:70:9e:65:00:0e:b3:a2:51:54:6d:cb:b0:88:d3:
                    4f:05:01:14:28:06:d0:41:93:55:e2:70:01:c1:b7:
                    01:68:c4:42:36:ed:14:c3:42:54:08:2f:d9:49:00:
                    ee:00:73:ff:2b:28:33:86:fb:1e:ec:59:03:eb:73:
                    ca:28:f5:e8:e0:4f:9c:ba:9b:fd:b5:46:8d:45:05:
                    0a:03:df:bc:9e:6b:be:47:c1:fa:51:b8:bd:98:d9:
                    30:ed:b9:1a:b0:10:06:46:1e:43:21:71:83:d4:cb:
                    63:10:f9:f4:2f:1c:b0:67:aa:08:6e:c1:65:e1:9b:
                    c3:6b:4f:dc:e7:ba:a5:d8:02:0c:9c:76:3d:7d:a9:
                    0d:89:3f:6b:c3:d0:ae:3e:b9:77:4f:ab:29:c4:e3:
                    6c:10:49:e9:60:a2:96:be:26:51:c3:63:44:fd:a2:
                    26:4f:98:22:38:ba:c3:0a:1a:9c:ca:35:52:39:57:
                    ef:39:85:f2:2e:da:fd:0e:c2:9b:88:6f:29:58:89:
                    b9:82:e8:c3:75:94:74:5e:8a:9d:d1:38:10:f4:95:
                    dc:2f:ea:e5:d2:0d:4f:a7:0b:eb:c5:61:78:98:92:
                    77:79:60:a0:64:7d:4b:2a:e1:f8:18:98:cc:a7:6b:
                    54:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AF:9F:B4:F3:5C:D9:ED:DF:78:44:9A:A1:DC:D0:92:72:87:DF:C0
            X509v3 Authority Key Identifier:
                keyid:1C:7D:83:8F:1B:59:89:9D:44:B4:FC:40:0F:BC:1D:DA:3C:0B:3D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C7D838F1B59899D44B4FC400FBC1DDA3C0B3D30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6RNyVjiqZHQJs4xe99Pni55Zwc36arWatzDTR33B58W/1/323830343a333630303a3a2f33332d3333203d3e20323636333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3600::/33

    Signature Algorithm: sha256WithRSAEncryption
         76:10:31:0b:c7:d1:f2:83:0b:4f:87:eb:e7:88:81:5d:91:cd:
         98:fa:54:5f:42:7a:05:85:06:5e:42:3f:0a:d0:d3:5f:77:ef:
         d7:ff:be:2a:fd:09:73:08:4d:a0:34:34:eb:8d:af:38:cb:89:
         41:9c:51:56:9f:77:fe:d5:79:26:15:d4:c8:c0:c8:37:68:b9:
         04:06:ce:cc:92:64:0c:6c:bd:08:6f:c4:29:01:9f:f0:5e:f4:
         a8:eb:1d:78:2a:d1:e1:98:63:3d:1a:a2:25:7f:0c:bd:50:73:
         5e:dc:12:30:90:ea:d7:ba:1e:67:90:53:74:a3:7d:56:38:90:
         cb:19:0d:e6:43:b2:a0:9e:60:c2:49:88:ca:4a:a4:08:48:2f:
         44:ed:d2:ce:66:66:70:96:c6:4d:74:0d:05:f8:dc:42:6f:5f:
         df:b6:de:39:a3:a2:02:70:8a:0a:30:40:5f:98:18:14:3c:93:
         e6:d7:b5:d8:dd:6a:9f:e8:63:93:f3:c4:7a:d4:10:dd:84:32:
         49:dc:fa:05:53:51:2c:9b:52:e0:4e:54:0b:1d:32:7a:33:1f:
         87:46:de:54:01:73:ed:9b:90:3c:7f:22:f6:5d:40:0d:c7:5e:
         b0:10:fa:fa:e7:d7:cc:e6:e8:1c:3e:a2:21:34:08:9c:50:9d:
         ec:4d:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:09:48 2025 by rpki-client