Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa
File:                     323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa (raw, json)
Hash identifier:          3V4hBCDsE/bitDOXjjDYbWyQnOEIpROY76BHiPiNnus=
Subject key identifier:   9E:84:EC:93:48:30:06:F0:97:AE:00:84:1B:C8:A7:90:76:2E:EB:A6
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       3D7FF17CA1CC949143789BA65231EE7812ABEEA2
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:26 +0000
ROA not before:           Thu 06 Mar 2025 02:01:26 +0000
ROA not after:            Thu 05 Mar 2026 02:06:26 +0000
asID:                     52545
IP address blocks:        2804:e1c:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7f:f1:7c:a1:cc:94:91:43:78:9b:a6:52:31:ee:78:12:ab:ee:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:26 2025 GMT
            Not After : Mar  5 02:06:26 2026 GMT
        Subject: CN=9E84EC93483006F097AE00841BC8A790762EEBA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:bc:6c:a7:3e:87:c0:31:a4:97:fb:18:8c:
                    5d:5b:c8:6b:97:e4:5c:8b:7d:6f:b7:20:8a:b9:21:
                    b7:6d:05:9a:98:17:bc:94:a9:73:90:e7:70:21:f7:
                    05:f4:8b:69:4c:ab:2e:70:14:65:f9:40:1e:5c:6e:
                    df:9e:5a:dd:b6:05:67:05:e2:39:e5:38:cb:d1:be:
                    97:7f:de:80:7e:10:e4:c5:cc:ab:0b:57:c2:4e:22:
                    c2:f4:96:c7:e6:25:9e:81:ba:09:ba:19:5f:ec:46:
                    c9:0f:5f:82:bc:20:b8:48:9e:36:85:ec:ec:cf:bb:
                    04:01:40:68:94:7a:0e:c7:27:3a:fb:75:ad:4a:3a:
                    21:a6:61:23:12:30:a9:05:aa:98:cd:d4:fa:96:80:
                    90:a8:7d:ab:33:1e:a0:d5:31:6d:fa:c0:4b:10:b2:
                    b1:87:b2:44:00:66:d8:72:a2:07:a2:df:07:89:7c:
                    6e:13:fe:72:14:90:cb:ed:08:ae:6a:12:ec:9d:ef:
                    89:51:d8:bb:f8:52:6b:c7:7e:50:c7:7c:5c:8a:19:
                    99:95:85:85:ee:6c:c2:d6:90:57:d7:47:90:18:13:
                    0e:cb:a4:ed:79:11:fb:3a:e7:39:fc:68:a8:7a:a0:
                    bb:13:33:f3:13:3d:43:f0:50:f5:e8:bf:c5:e7:2f:
                    04:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:84:EC:93:48:30:06:F0:97:AE:00:84:1B:C8:A7:90:76:2E:EB:A6
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a383030303a3a2f33342d3334203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         67:99:f0:3c:17:1e:df:7b:0e:f9:a4:2c:86:08:f3:44:b4:3c:
         f4:18:75:38:84:20:ab:cf:68:6e:9f:f5:0e:7b:c9:58:a5:45:
         c2:9d:f6:ba:fc:56:1a:67:cf:a1:61:b3:97:52:85:eb:ea:7f:
         48:c7:dd:d0:b2:a5:42:90:82:f9:65:16:57:b6:49:a0:46:49:
         92:4f:df:6d:4d:dc:68:e4:b4:13:86:b4:57:98:bb:f6:dc:65:
         9e:1f:a9:a5:a8:d9:cb:bc:fb:7b:ab:43:69:33:98:06:85:d6:
         11:d5:4e:fd:23:68:05:4f:06:b9:10:90:e2:c8:5f:a6:41:75:
         3a:f2:74:07:51:b5:f2:68:82:9c:cd:7b:ad:21:2b:4d:0d:0e:
         42:55:30:c0:fc:ac:9d:50:d5:40:e8:45:af:dc:4b:e9:b7:d2:
         94:83:96:90:d3:71:ba:59:d9:43:ed:88:09:72:7a:ae:14:8e:
         f2:89:a5:2f:30:dc:bf:24:f3:f1:44:a1:fd:bc:04:88:4b:ef:
         71:62:dd:f1:49:48:0e:0a:ef:b2:7f:36:c2:2d:2a:7a:a5:0e:
         ee:3e:d6:98:44:84:76:12:c2:a7:f7:86:58:90:f6:28:e1:71:
         cb:cd:7a:ff:f0:7a:af:88:2d:a2:e2:7f:f6:08:bf:27:32:c0:
         aa:ce:f0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:31:28 2025 by rpki-client