Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/323830343a323633343a3a2f33322d3438203d3e20323634333332.roa
File:                     323830343a323633343a3a2f33322d3438203d3e20323634333332.roa (raw, json)
Hash identifier:          Ka+OlyvDYWNhX7z9FvJAz94zf3Wqeaw7Eay01YWxeq4=
Subject key identifier:   6A:02:C4:13:27:68:F3:7E:37:3B:E9:8A:A4:2A:64:0B:C8:F3:63:A9
Certificate issuer:       /CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
Certificate serial:       672384F08D90F35F8288AFC15472CE90AC1C65A3
Authority key identifier: 7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/323830343a323633343a3a2f33322d3438203d3e20323634333332.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     264332
IP address blocks:        2804:2634::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl
                          rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 16:51:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:23:84:f0:8d:90:f3:5f:82:88:af:c1:54:72:ce:90:ac:1c:65:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A509BA48E79904F69690722D65AADB9AD3A47AB
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject: CN=6A02C4132768F37E373BE98AA42A640BC8F363A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:8c:a1:79:44:fd:f6:2d:7b:06:73:10:7e:
                    2d:92:da:2f:17:95:f7:b3:b6:73:ca:7f:bd:61:0b:
                    90:26:a8:5f:91:b0:9d:c1:48:28:49:0f:72:0b:15:
                    1b:82:6e:da:13:3b:ae:46:b4:5c:0e:b7:0d:61:e8:
                    cc:4c:d7:26:c2:31:95:a9:5e:a7:d3:ad:1e:97:20:
                    7f:44:51:e0:1b:4f:78:cc:33:9a:34:a0:bd:54:7a:
                    2d:fc:84:6f:d2:0a:4f:a0:4c:8d:5b:ae:d5:f7:91:
                    ac:f4:bc:11:48:48:92:1b:0b:56:88:19:e7:e0:31:
                    68:e8:7f:21:64:ee:1a:37:a8:96:5a:bf:e4:d1:a0:
                    8e:24:a5:99:23:64:0b:17:67:02:c1:e8:1f:12:a1:
                    18:7d:dd:08:c2:11:ba:44:7d:1d:04:19:4f:19:03:
                    48:5a:17:58:bb:f1:97:82:fb:bf:e4:2c:79:55:eb:
                    f1:55:95:02:57:d3:7a:72:fe:7c:28:62:13:65:eb:
                    2e:3d:49:15:c9:b9:ea:1b:b7:70:b9:75:85:8c:21:
                    dc:0d:6c:3a:ba:5a:6c:d1:87:f9:6e:f6:da:ea:70:
                    41:65:c4:b8:a9:10:ba:1f:0a:ab:89:85:fb:b8:b9:
                    3c:ab:b0:c6:a4:94:24:6b:2f:9a:9c:11:5b:bd:b8:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:02:C4:13:27:68:F3:7E:37:3B:E9:8A:A4:2A:64:0B:C8:F3:63:A9
            X509v3 Authority Key Identifier:
                keyid:7A:50:9B:A4:8E:79:90:4F:69:69:07:22:D6:5A:AD:B9:AD:3A:47:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A509BA48E79904F69690722D65AADB9AD3A47AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/1/323830343a323633343a3a2f33322d3438203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2634::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:d6:6d:ad:7f:c8:fc:03:29:6a:fe:aa:e6:3c:1d:f0:4d:f6:
         29:e6:fd:6f:b0:5d:d3:d4:e4:7b:9f:21:f6:12:d0:a5:fc:08:
         a3:af:cb:88:d9:34:83:c9:a8:e5:e9:85:fe:67:7e:8d:dc:7c:
         08:5c:e0:25:35:db:c4:94:12:4a:7a:3e:99:3a:de:23:66:77:
         b7:68:54:92:ad:49:f0:42:a4:0e:6a:91:23:bf:1e:3d:a3:09:
         d4:53:21:7e:51:11:42:6d:60:fa:a8:ca:8c:c1:d0:3d:2d:84:
         ef:42:d2:66:c7:54:50:3d:74:09:ee:6a:3b:8a:7d:11:f2:30:
         8f:3d:38:a3:8e:9a:a1:1b:1c:8c:c5:07:62:37:3f:12:6d:50:
         1f:fb:4d:22:e5:74:fc:09:31:97:5c:72:a2:bf:2a:42:eb:a6:
         90:7c:79:e0:46:4f:82:09:25:50:5b:22:27:23:1b:fe:5d:99:
         af:d2:19:7d:d3:a8:5f:59:47:2d:ef:d0:af:1e:07:ea:99:84:
         57:35:e1:46:ca:c2:bc:23:4d:36:a2:bd:e8:ea:65:e6:cb:ef:
         a7:81:b5:0d:91:f5:d7:b5:eb:99:f8:f3:6d:e8:e7:c1:a0:63:
         ef:0c:e9:d8:0f:10:07:b9:b6:a0:53:86:b6:2b:56:80:95:01:
         71:56:7c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:42:25 2025 by rpki-client