Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
File:                     323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa (raw, json)
Hash identifier:          zvXxE9oGjVi2hFTZ+IDtCkmEHLzuXowuRdpVmSUL7+w=
Subject key identifier:   8A:1E:15:F0:DC:5E:A5:92:17:17:87:C4:A1:7C:E9:91:3C:CD:AE:01
Certificate issuer:       /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial:       5074D16C67BEDB81B62AF89DC1D9089773E40A98
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa
Signing time:             Thu 06 Mar 2025 02:06:27 +0000
ROA not before:           Thu 06 Mar 2025 02:01:27 +0000
ROA not after:            Thu 05 Mar 2026 02:06:27 +0000
asID:                     52545
IP address blocks:        2804:e1c:fb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
                          rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 21:11:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:d1:6c:67:be:db:81:b6:2a:f8:9d:c1:d9:08:97:73:e4:0a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
        Validity
            Not Before: Mar  6 02:01:27 2025 GMT
            Not After : Mar  5 02:06:27 2026 GMT
        Subject: CN=8A1E15F0DC5EA592171787C4A17CE9913CCDAE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:47:7d:a0:53:f2:ea:a2:a0:0a:47:1f:ca:ff:
                    b0:d1:db:77:32:bf:1e:c7:84:f6:a6:30:8e:77:18:
                    7a:1b:29:6d:60:f0:7b:d6:34:6d:0a:8e:46:49:ff:
                    c0:8e:42:d9:aa:52:d9:3e:87:bc:f9:83:59:37:ea:
                    d0:1d:12:7a:3e:27:e2:76:21:03:1f:cf:cb:0b:c4:
                    4b:79:d6:7c:7f:87:94:2f:5c:ed:e5:0c:45:50:89:
                    a4:5e:1a:d7:b5:c2:ee:f7:c1:9e:1e:c5:bb:79:ab:
                    9c:f6:3a:a9:83:7a:33:b5:25:2a:b4:f6:f2:47:79:
                    a6:cf:3c:2c:8c:5a:b1:30:f8:c6:0a:9d:92:37:4d:
                    0a:47:e4:a7:7a:5d:da:6b:0c:1a:5c:2c:e7:fe:f4:
                    7f:ea:ca:aa:65:70:8f:df:29:96:0c:66:b3:29:40:
                    02:12:d6:99:78:8c:c7:f2:0a:ca:c9:c1:b6:63:d3:
                    86:91:ff:8d:08:06:b2:9f:1e:aa:ba:1b:36:74:76:
                    28:8a:c1:22:98:33:bf:2b:74:bc:d5:bb:eb:75:40:
                    ce:2a:d2:03:c8:c5:74:84:c8:97:42:a7:2f:a9:5f:
                    5a:35:2e:54:52:27:a7:2a:7b:ec:38:d4:01:a4:70:
                    9e:9a:90:d4:de:ae:71:01:a8:09:1a:2d:9c:73:bb:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1E:15:F0:DC:5E:A5:92:17:17:87:C4:A1:7C:E9:91:3C:CD:AE:01
            X509v3 Authority Key Identifier:
                keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/323830343a6531633a666230303a3a2f34302d3430203d3e203532353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e1c:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:61:c7:93:c6:55:8f:fb:b1:19:45:cb:05:14:ab:a9:ea:
         95:b8:5d:5b:86:26:41:03:35:64:8d:3a:63:54:20:99:f3:15:
         74:d0:2f:43:f2:53:49:8d:fd:cc:eb:5b:68:a7:eb:50:8c:49:
         3a:26:8c:66:66:74:bc:b2:b2:7d:48:e0:a3:ea:fe:43:3e:73:
         8b:31:a0:e4:53:c2:34:78:3e:95:bb:e6:dd:02:22:b1:30:25:
         b7:01:4a:16:05:66:9b:39:35:09:b9:10:af:6e:4f:71:a4:97:
         5d:98:6b:d6:64:a6:db:e7:0b:37:e0:c2:0c:a9:cc:f6:d8:3b:
         11:19:d7:cd:fd:39:96:d2:b4:1e:7c:e0:b4:96:ec:8a:41:da:
         f2:7b:86:2d:c9:09:fb:7f:87:27:0f:48:99:5e:31:17:d9:61:
         4f:fd:b5:cd:b5:f0:69:25:79:f5:eb:bb:c9:2f:9b:a2:6b:78:
         86:33:12:da:a6:2b:9b:b2:c1:e8:6a:da:be:fc:9c:a8:31:b3:
         75:25:c8:64:bd:27:fb:59:59:03:85:1b:29:dc:7b:31:87:82:
         c8:63:2e:19:1b:f7:7d:e0:a8:1b:eb:be:86:3b:e2:6b:bd:84:
         72:52:b4:3f:20:96:e6:6e:a6:45:3e:b3:57:9f:06:8c:d5:15:
         42:08:c6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:30:18 2025 by rpki-client