Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
File:                     323830343a6531633a3a2f33322d3438203d3e203532353435.roa (raw, json)
Hash identifier:          1VqC7tOwiCjsSS1K4bUpPIhl+XZkmIm9aQWRvFzeBG0=
Subject key identifier:   43:63:25:C6:CA:B1:5D:D4:D1:88:17:B4:AB:C9:2A:56:19:20:97:A1
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       78171E235AA62FC62997AA0EFED81F723776B71F
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33322d3438203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:27 +0000
ROA not before:           Thu 06 Mar 2025 02:01:27 +0000
ROA not after:            Thu 05 Mar 2026 02:06:27 +0000
asID:                     52545
IP address blocks:        2804:e1c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 22:19:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:17:1e:23:5a:a6:2f:c6:29:97:aa:0e:fe:d8:1f:72:37:76:b7:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:27 2025 GMT
            Not After : Mar  5 02:06:27 2026 GMT
        Subject: CN=436325C6CAB15DD4D18817B4ABC92A56192097A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f3:28:77:7d:22:ca:01:36:49:fb:1d:46:9f:
                    71:63:44:10:cf:99:73:4a:cb:5a:e8:4e:3c:d8:27:
                    7b:bf:33:c0:90:f6:d4:a7:b2:a5:59:d3:79:76:49:
                    61:12:bf:a4:80:30:bf:ae:3f:94:17:4a:fa:9b:0f:
                    46:c0:a9:ed:f6:98:12:e6:cb:10:0a:5f:d8:7a:95:
                    2c:f0:41:11:5f:34:1b:2b:a4:23:b4:9d:ae:5b:54:
                    94:72:46:06:ec:a2:2c:1b:6f:9d:98:c0:85:6e:74:
                    aa:ad:f5:db:47:73:64:2c:05:c2:27:bb:e0:9b:77:
                    32:10:b0:71:ad:06:b1:d1:98:1a:85:45:18:92:87:
                    11:97:2c:af:c5:bd:b4:cf:34:e0:d9:3d:5f:d2:d9:
                    14:ed:3e:af:22:20:fa:0a:f4:47:b9:49:18:f2:c1:
                    6f:88:b5:47:dc:45:90:ab:c5:87:05:d5:d1:19:f1:
                    ca:83:28:bb:2a:c0:24:c9:ca:6b:a0:18:4a:7b:1f:
                    02:36:33:da:53:ef:b5:2e:c8:32:bc:a4:e3:21:9c:
                    e8:29:21:0a:56:73:8c:b2:09:55:21:73:ad:59:a6:
                    1f:56:40:82:d6:cf:0a:62:00:c9:9f:e8:14:dc:30:
                    eb:85:95:fa:5e:9a:0f:45:0b:4d:40:28:2b:88:c9:
                    96:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:63:25:C6:CA:B1:5D:D4:D1:88:17:B4:AB:C9:2A:56:19:20:97:A1
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33322d3438203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:46:c8:91:7b:35:c4:15:2c:00:02:da:83:39:14:2f:88:4b:
         11:8d:a4:ff:07:53:23:0b:f3:f9:30:3d:21:55:f2:7a:a8:cf:
         5a:36:4d:ae:f2:48:fa:7c:e3:c8:72:d5:99:b7:2a:e4:5a:03:
         94:d8:fc:a6:4c:0f:d9:85:89:e3:29:85:b7:4d:8d:db:4b:c4:
         42:cf:3a:f6:a7:ab:f9:51:a4:66:31:1e:ca:1e:26:e2:a8:cc:
         72:ed:21:78:13:8f:45:2c:e4:88:63:34:b1:ae:18:34:5d:72:
         21:85:bb:db:04:2a:e3:57:11:79:66:55:df:0b:35:af:6f:02:
         42:07:95:54:de:a4:5a:ba:02:ef:86:74:94:09:01:1c:7f:4b:
         cb:a9:12:ea:e9:77:6b:49:26:a2:2f:bd:bd:28:79:d6:42:c3:
         da:fc:c5:ed:c9:93:09:c6:91:2a:81:a4:1a:ab:2b:80:09:48:
         4c:fb:a5:2f:10:2b:18:40:22:28:06:e8:fe:b2:5a:83:14:dd:
         bc:cc:c2:42:54:96:ae:31:fa:12:c1:42:80:d2:61:2f:38:30:
         4b:e9:40:0a:9b:e5:eb:fc:91:7b:4f:db:a7:f6:8b:1d:8b:f8:
         d4:38:da:28:24:45:a6:b2:bb:82:5f:b7:2f:24:10:11:ac:ff:
         d3:37:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:02:33 2025 by rpki-client