Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GAAfZfovbUzrrJz3obBV99aAkmuCjxqNmW9Y2g5zVkPb/0/323830343a393039383a3a2f33322d3332203d3e20323733353632.roa
File:                     323830343a393039383a3a2f33322d3332203d3e20323733353632.roa (raw, json)
Hash identifier:          3T/kyiAGMZBK2eWnDqGON+z09H3RFD8WaU8OMN3IV2A=
Subject key identifier:   9E:61:30:55:A7:DF:01:9B:C0:3B:BC:26:78:D5:59:6B:7B:64:AC:B6
Certificate issuer:       /CN=91573A066BEEB43445BA8F2312889F29F68C87C7
Certificate serial:       10157046DE21358739AAD1B183146325DF5A8618
Authority key identifier: 91:57:3A:06:6B:EE:B4:34:45:BA:8F:23:12:88:9F:29:F6:8C:87:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91573A066BEEB43445BA8F2312889F29F68C87C7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GAAfZfovbUzrrJz3obBV99aAkmuCjxqNmW9Y2g5zVkPb/0/323830343a393039383a3a2f33322d3332203d3e20323733353632.roa
Signing time:             Sun 16 Feb 2025 12:41:27 +0000
ROA not before:           Sun 16 Feb 2025 12:36:27 +0000
ROA not after:            Sun 15 Feb 2026 12:41:27 +0000
asID:                     273562
IP address blocks:        2804:9098::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GAAfZfovbUzrrJz3obBV99aAkmuCjxqNmW9Y2g5zVkPb/0/91573A066BEEB43445BA8F2312889F29F68C87C7.crl
                          rsync://rpki-repo.registro.br/repo/GAAfZfovbUzrrJz3obBV99aAkmuCjxqNmW9Y2g5zVkPb/0/91573A066BEEB43445BA8F2312889F29F68C87C7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91573A066BEEB43445BA8F2312889F29F68C87C7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 15:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:15:70:46:de:21:35:87:39:aa:d1:b1:83:14:63:25:df:5a:86:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91573A066BEEB43445BA8F2312889F29F68C87C7
        Validity
            Not Before: Feb 16 12:36:27 2025 GMT
            Not After : Feb 15 12:41:27 2026 GMT
        Subject: CN=9E613055A7DF019BC03BBC2678D5596B7B64ACB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:d6:fd:3d:8d:dc:76:10:2f:dd:30:48:de:
                    0e:10:95:73:f1:7f:a0:62:06:ba:21:65:e0:d7:7b:
                    75:cc:15:68:f9:ff:6b:fb:96:1a:c6:79:e5:84:88:
                    88:d8:87:d3:6a:f9:ec:f6:d1:02:b5:c6:ff:c1:73:
                    33:01:79:11:72:05:13:3b:f0:44:f0:83:e5:5b:b0:
                    5e:11:97:24:4b:10:bb:e5:62:a4:71:2e:bf:5c:ac:
                    62:07:c9:47:c4:f7:a4:c0:db:d0:cf:2b:e3:5d:8e:
                    59:4f:88:a9:26:1c:80:9b:f2:cd:a0:fe:18:4b:4b:
                    9f:27:7c:6c:19:6e:36:7f:5a:1a:f1:d6:ae:41:80:
                    3d:e1:28:40:ca:95:5c:0a:cb:40:23:e6:c9:b4:c3:
                    f4:41:23:5a:d5:a8:9f:7a:b2:3a:bb:4d:fb:5b:fe:
                    0c:e4:98:6e:b2:7b:e6:48:fd:17:b0:f0:c0:41:29:
                    a8:dc:8a:27:45:12:ff:18:e3:52:4e:f5:fe:ac:97:
                    b7:bc:bf:a4:b5:47:de:23:db:dc:8a:b2:48:93:21:
                    ba:24:40:a0:a5:6a:86:e6:cf:42:88:28:f3:9d:13:
                    f6:2c:cc:12:be:07:c0:96:1e:61:92:3f:a4:f6:c6:
                    b9:73:de:42:c9:78:86:d8:2d:24:db:23:77:53:e3:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:61:30:55:A7:DF:01:9B:C0:3B:BC:26:78:D5:59:6B:7B:64:AC:B6
            X509v3 Authority Key Identifier:
                keyid:91:57:3A:06:6B:EE:B4:34:45:BA:8F:23:12:88:9F:29:F6:8C:87:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GAAfZfovbUzrrJz3obBV99aAkmuCjxqNmW9Y2g5zVkPb/0/91573A066BEEB43445BA8F2312889F29F68C87C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91573A066BEEB43445BA8F2312889F29F68C87C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GAAfZfovbUzrrJz3obBV99aAkmuCjxqNmW9Y2g5zVkPb/0/323830343a393039383a3a2f33322d3332203d3e20323733353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9098::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:ca:21:9b:b1:8f:b1:a7:72:a7:3f:0a:eb:6e:12:95:58:
         69:9d:56:a0:2b:1d:0c:02:b3:b8:1a:85:e7:41:fa:89:fb:0c:
         d7:a3:cb:c0:68:e0:1c:ff:8a:13:0c:41:e2:35:c5:b6:d2:31:
         c4:80:2d:6b:82:ec:ba:7e:29:f8:7e:e5:f2:05:9a:6d:b2:ce:
         6e:98:fe:06:8d:4d:28:0c:70:87:72:b2:5e:60:d2:e6:1e:1a:
         bc:e3:3a:92:ea:47:6d:5f:17:a4:e8:a3:7a:77:3e:cd:ca:0c:
         02:93:50:d4:39:c0:0c:7d:ba:0d:90:53:c8:59:e5:61:fe:68:
         a6:1e:f6:12:5d:12:8c:7d:aa:5f:f0:4f:e9:74:02:31:57:44:
         e7:8f:3e:19:e5:8f:13:c9:0a:7d:1d:d5:42:32:c1:d2:e9:b9:
         bf:70:0b:13:54:94:9e:94:59:ab:05:db:56:04:1d:41:9c:c5:
         cc:25:40:01:89:ee:e8:4f:55:1c:02:71:58:73:76:cc:94:ab:
         79:d6:27:dd:f3:74:7f:fd:33:bf:05:26:fc:a8:59:72:cc:7c:
         df:d9:74:62:9c:7f:50:1f:62:72:7a:c5:3a:7f:62:40:b7:65:
         5c:22:03:1d:f2:08:60:2a:92:51:0e:45:70:e2:c1:61:7f:f3:
         f8:90:14:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:29 2025 by rpki-client