Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
File:                     323830343a6531633a3a2f33332d3333203d3e203532353435.roa (raw, json)
Hash identifier:          /Fz05QFoyX0GAuZF9nSOmeWm2MKOS6kWqdUTKUrHzB0=
Subject key identifier:   6A:B0:95:21:86:3F:13:BD:B0:CF:B1:0A:78:D4:A7:E2:22:06:D6:C9
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       2EAED27D98EBDAB8F623C6C6FF5E51168A5F4964
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33332d3333203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:26 +0000
ROA not before:           Thu 06 Mar 2025 02:01:26 +0000
ROA not after:            Thu 05 Mar 2026 02:06:26 +0000
asID:                     52545
IP address blocks:        2804:e1c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:ae:d2:7d:98:eb:da:b8:f6:23:c6:c6:ff:5e:51:16:8a:5f:49:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:26 2025 GMT
            Not After : Mar  5 02:06:26 2026 GMT
        Subject: CN=6AB09521863F13BDB0CFB10A78D4A7E22206D6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:f3:f5:98:84:da:23:65:38:ed:aa:33:4c:
                    90:59:41:7c:d1:81:4b:10:23:d7:f3:ed:00:a0:32:
                    f5:32:8d:5d:f2:2a:4a:49:a0:9e:97:dc:bf:a8:23:
                    3f:0a:fb:64:6f:9b:54:47:60:a2:c9:3b:40:e2:79:
                    61:fa:ba:7d:53:aa:4d:89:50:0d:38:30:72:ad:ad:
                    2e:04:bb:7b:3a:64:b5:66:53:2f:f5:d0:e1:56:dd:
                    59:09:a4:77:51:90:c7:e2:c8:25:71:31:c3:e2:3b:
                    2d:be:70:12:34:25:e1:bd:d9:3f:03:74:09:4e:a8:
                    75:af:0d:c6:be:67:92:9b:65:08:5e:00:14:7b:f7:
                    1b:0d:31:8b:e0:99:7f:b5:14:33:7d:84:b3:6b:94:
                    df:d1:66:99:9e:00:76:f1:3c:4a:08:ad:79:4a:db:
                    44:b5:f2:75:52:02:0a:68:93:74:2d:97:23:7f:f8:
                    6d:50:c1:8b:fb:87:9b:12:a1:ee:11:55:70:81:85:
                    7e:74:4f:b9:47:ab:b4:55:23:17:9b:ca:9f:6c:fc:
                    b3:a4:67:b9:fa:96:82:04:c6:a6:48:b8:be:45:ba:
                    e1:fe:e6:b3:9c:dd:c4:8e:2f:e9:c4:dc:62:d2:19:
                    88:02:49:fa:52:34:16:50:3e:ef:84:45:1f:97:71:
                    9c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:95:21:86:3F:13:BD:B0:CF:B1:0A:78:D4:A7:E2:22:06:D6:C9
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a3a2f33332d3333203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:67:37:52:85:94:c7:b8:17:7e:e0:ef:cc:40:8f:68:fc:ba:
         ee:39:77:a2:bf:9e:2c:a2:9d:88:0d:c7:68:f8:07:83:86:71:
         b7:f1:c7:39:18:33:08:47:d6:e0:f9:68:63:9b:44:2a:66:60:
         ea:00:c5:48:cf:79:59:f9:14:ef:72:76:04:c4:f4:6b:0e:6e:
         55:49:44:a0:15:a3:99:fc:19:80:ef:60:43:b8:14:7c:3f:34:
         d4:1f:dd:d0:2d:38:b8:81:cc:19:7b:ba:48:37:33:e2:43:fd:
         6c:29:24:91:2a:44:ec:ef:a6:97:6d:e9:91:36:11:2f:dc:e2:
         5e:40:06:b9:cd:dd:ff:93:63:1b:48:33:99:a3:ff:68:cb:1e:
         59:ce:e0:47:a4:53:77:c4:51:23:e6:c8:27:c2:ae:c1:98:c3:
         c8:30:d6:af:5b:07:34:45:39:e3:9c:10:9c:c1:50:7b:e2:37:
         26:50:11:8e:75:6e:b8:ac:b8:26:7f:4d:1b:32:4b:9d:1b:33:
         c9:92:82:90:7a:a4:7b:64:5c:79:5b:b7:2e:2e:22:07:88:b8:
         30:9f:3f:a5:ec:33:6d:1a:1d:c6:53:55:3b:dd:7c:61:e7:f4:
         2a:67:ba:04:08:e7:3f:7d:d1:a6:5e:e9:66:9c:8b:cf:a8:b8:
         86:0d:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 05:50:03 2025 by rpki-client