Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/323830343a323262633a3a2f33322d313238203d3e20323634313139.roa
File:                     323830343a323262633a3a2f33322d313238203d3e20323634313139.roa (raw, json)
Hash identifier:          BkYNTRkUWASgZ9KOr1ERGcyoQ51Fq2CTYgA9mIEtVCQ=
Subject key identifier:   C7:1F:3A:05:53:B7:CD:DE:C5:55:28:DC:6B:86:5E:2F:0B:8A:A4:F2
Certificate issuer:       /CN=3492DE65EB92D5FE7D46E9F2771B9852C7110E21
Certificate serial:       1F5C806E965BE2F9B63AEE37F7B0F244D27BDCC5
Authority key identifier: 34:92:DE:65:EB:92:D5:FE:7D:46:E9:F2:77:1B:98:52:C7:11:0E:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/323830343a323262633a3a2f33322d313238203d3e20323634313139.roa
Signing time:             Wed 02 Apr 2025 14:45:33 +0000
ROA not before:           Wed 02 Apr 2025 14:40:33 +0000
ROA not after:            Wed 01 Apr 2026 14:45:33 +0000
asID:                     264119
IP address blocks:        2804:22bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.crl
                          rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5c:80:6e:96:5b:e2:f9:b6:3a:ee:37:f7:b0:f2:44:d2:7b:dc:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3492DE65EB92D5FE7D46E9F2771B9852C7110E21
        Validity
            Not Before: Apr  2 14:40:33 2025 GMT
            Not After : Apr  1 14:45:33 2026 GMT
        Subject: CN=C71F3A0553B7CDDEC55528DC6B865E2F0B8AA4F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:05:d2:d3:92:07:21:c8:81:99:6d:23:df:
                    ed:1b:87:99:6b:02:e4:cd:5b:fc:66:e7:9a:b2:4f:
                    a3:f0:fe:b5:aa:38:d1:9e:b3:5f:b8:01:5f:f0:d1:
                    a7:f8:77:4c:ac:25:8a:75:bf:cd:6d:83:9a:d9:5d:
                    df:e8:4d:aa:00:76:3a:08:aa:06:ac:04:21:f6:d5:
                    1c:cc:6b:44:f8:fb:09:d9:ea:e3:82:dc:b5:28:75:
                    d0:e8:1f:8c:e6:29:3e:8a:f9:1b:fb:4f:36:dd:39:
                    26:5c:be:a0:fb:36:13:47:1c:81:0f:c4:02:5e:d2:
                    d3:e2:a9:9c:38:23:72:f6:2c:66:22:f7:7e:73:9a:
                    0b:f6:57:85:99:18:76:2b:57:86:c6:fa:12:8c:bd:
                    94:53:fe:9a:e4:d6:52:d5:f2:a7:53:0a:de:61:c5:
                    ae:38:96:70:54:5e:e0:0d:9c:e1:a8:9e:87:c4:17:
                    6f:0f:3f:e5:04:e0:15:1b:fb:4b:c6:79:a1:cc:d2:
                    0f:98:75:4f:1d:99:7c:29:95:99:41:f2:b4:4e:c0:
                    95:53:7f:ba:fc:f6:1e:e7:80:01:d5:5e:71:6a:66:
                    35:cb:67:8e:85:c4:c1:9b:89:70:2c:57:b9:bb:26:
                    30:3e:27:e2:34:c8:b8:c9:8f:a1:10:9e:58:25:4c:
                    ea:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:1F:3A:05:53:B7:CD:DE:C5:55:28:DC:6B:86:5E:2F:0B:8A:A4:F2
            X509v3 Authority Key Identifier:
                keyid:34:92:DE:65:EB:92:D5:FE:7D:46:E9:F2:77:1B:98:52:C7:11:0E:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3492DE65EB92D5FE7D46E9F2771B9852C7110E21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G6SYyAxaUbXyCxcYrRCTxyr1LEojnF3vr9egn5CC9Unj/0/323830343a323262633a3a2f33322d313238203d3e20323634313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:9f:f8:ec:53:4d:74:4f:ca:a8:8a:7a:84:14:0d:58:9e:cb:
         31:80:06:db:97:d6:53:e0:63:1c:38:ab:82:cd:70:4b:d1:0f:
         9a:c0:78:73:91:9c:95:fe:b4:01:56:4d:f6:18:a4:f0:d9:99:
         3e:01:ca:76:9b:e7:ad:6a:d5:9f:0f:a6:91:8d:71:ae:6e:c1:
         a1:c6:d0:8b:f0:9a:6c:76:3e:c0:3e:30:ff:71:a2:0a:fa:ac:
         3c:6c:7a:a2:4b:e5:e1:70:76:6f:00:4a:99:b0:a3:5e:4d:2a:
         e8:4f:ed:2b:cd:8d:8e:c5:c3:bc:b5:a7:1a:17:8d:46:00:37:
         2e:f9:73:6c:13:ef:ef:0e:e6:15:bb:1c:1b:02:d8:2f:ff:c8:
         9c:11:82:63:35:06:27:2a:46:6d:a4:76:f0:f9:d8:d0:a6:3c:
         ef:a5:76:fc:95:6e:9f:16:7f:1e:ac:46:50:88:c2:74:b4:aa:
         99:cf:63:cb:18:1d:f1:0f:e7:b4:9a:32:6a:be:49:50:20:51:
         6a:60:ee:e4:cd:56:43:55:bf:de:5c:01:81:44:1c:de:3a:96:
         7c:db:15:9f:b2:18:33:02:9f:4e:a3:34:a6:08:33:ff:22:05:
         f8:05:32:42:df:05:a8:2d:f4:a1:29:ea:77:8e:55:b0:ef:53:
         d2:01:65:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:33:27 2025 by rpki-client