Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a3a2f33322d3332203d3e203631363039.roa
File:                     323830343a383762633a3a2f33322d3332203d3e203631363039.roa (raw, json)
Hash identifier:          M2XTCkzV4J6fIq7iIdaeKBTXuartvjEF9442F6Cmysw=
Subject key identifier:   F7:47:74:A4:B0:96:4A:3B:F3:D0:8F:48:90:A6:54:F5:DF:69:92:93
Certificate issuer:       /CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
Certificate serial:       49D6FB1AD1F7C12AF9A019B700367EE174EB6F5B
Authority key identifier: B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a3a2f33322d3332203d3e203631363039.roa
Signing time:             Thu 06 Mar 2025 17:17:01 +0000
ROA not before:           Thu 06 Mar 2025 17:12:01 +0000
ROA not after:            Thu 05 Mar 2026 17:17:01 +0000
asID:                     61609
IP address blocks:        2804:87bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.crl
                          rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:d6:fb:1a:d1:f7:c1:2a:f9:a0:19:b7:00:36:7e:e1:74:eb:6f:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3766E21D786D36B5EDF132F06FAC1FA6C934B63
        Validity
            Not Before: Mar  6 17:12:01 2025 GMT
            Not After : Mar  5 17:17:01 2026 GMT
        Subject: CN=F74774A4B0964A3BF3D08F4890A654F5DF699293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7b:6f:f2:ba:2c:74:98:f0:84:f9:1e:e4:e4:
                    8a:49:55:7c:0e:f8:97:a0:c2:89:8c:79:21:0c:15:
                    96:a5:2d:fb:e3:f5:3f:2a:a2:b0:e2:d1:97:68:1c:
                    35:1f:de:3c:ac:d2:d9:c2:d2:f9:b1:09:b0:96:4e:
                    df:3e:50:de:90:ba:3b:4f:b2:bd:87:4b:8b:9f:10:
                    36:e2:02:fb:4d:e2:b6:97:41:8a:af:03:b1:a3:b5:
                    5f:cf:75:8a:be:a3:15:0d:46:dd:db:da:15:71:fc:
                    d9:46:ad:58:bf:a6:7d:71:b1:fb:e4:1e:f4:5f:5e:
                    79:5d:e2:08:b5:b5:63:40:4e:84:ec:72:a5:0b:d9:
                    6f:f0:9a:a4:53:54:af:8d:bd:dd:cc:81:98:5b:25:
                    44:be:c0:47:4a:54:34:1f:be:a6:3d:1e:8f:24:59:
                    7a:14:c7:62:54:13:7a:52:c6:cf:9e:f9:44:bc:ae:
                    5e:b0:8c:f8:0a:27:ce:d3:8d:c3:62:44:6d:9f:85:
                    9b:63:a8:10:b6:6f:e5:1c:cd:c9:6f:c2:95:ba:a9:
                    eb:96:54:f3:0d:23:d4:52:8e:1c:9f:ea:13:51:33:
                    f2:eb:c9:58:7b:7d:b5:61:af:ac:bc:fa:76:a9:31:
                    79:5a:b7:97:28:7f:7b:b5:2a:c2:2a:e7:06:ed:73:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:74:A4:B0:96:4A:3B:F3:D0:8F:48:90:A6:54:F5:DF:69:92:93
            X509v3 Authority Key Identifier:
                keyid:B3:76:6E:21:D7:86:D3:6B:5E:DF:13:2F:06:FA:C1:FA:6C:93:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3766E21D786D36B5EDF132F06FAC1FA6C934B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GATSJoj84kbVvE8AWPDPoyJq2uGpoL6inN98yY3jfhcE/2/323830343a383762633a3a2f33322d3332203d3e203631363039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:87bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:99:7f:63:bb:49:54:08:aa:c2:71:3f:ff:fe:48:cd:52:8b:
         3f:26:9b:cc:1d:3c:cc:53:c1:cc:01:18:8e:35:71:b8:eb:c4:
         95:c4:af:80:72:8b:96:13:eb:13:d2:93:4f:d8:73:2d:fc:9e:
         48:cd:83:b9:30:25:f9:18:ac:15:cf:65:d5:53:4c:06:4f:7e:
         9c:8d:2a:f6:6e:a9:ea:7f:5a:c8:a7:98:93:96:b7:1e:ce:e6:
         3d:46:ad:d8:9f:f6:6c:86:80:87:c6:9b:60:69:c0:68:f3:fd:
         9d:cf:74:9b:f6:f4:57:3c:6c:df:41:f4:37:fe:79:ce:d6:b3:
         7d:06:71:bd:9c:97:49:a6:d1:48:61:17:c3:38:a5:ee:b5:3e:
         f3:a9:57:37:93:7d:3e:95:73:61:e2:b5:26:14:3d:cd:c5:b7:
         dc:2d:a0:88:c0:6b:b7:b2:3f:73:b0:49:90:a9:1d:0a:32:ac:
         10:00:99:a8:33:f9:67:36:db:b5:8f:7c:f6:47:55:cd:df:67:
         6e:16:dd:c9:f7:6e:bc:1b:9a:2c:d5:2f:d3:b8:e2:c9:8d:a6:
         b8:b6:4d:0e:18:f8:04:a7:f8:fd:f2:53:f6:37:f9:d7:75:8a:
         b8:87:2f:f6:9a:4d:b7:59:33:87:07:7f:62:25:35:41:2d:8f:
         dd:fc:ac:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:55 2025 by rpki-client