Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa
File:                     323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa (raw, json)
Hash identifier:          hiLWLPz+Q0WehzSlWDIOVAdx/Z6HtXePArAie2p3beE=
Subject key identifier:   9D:2F:30:AC:60:32:D6:83:BD:27:97:84:58:41:49:8A:FC:21:49:B9
Certificate issuer:       /CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
Certificate serial:       7861857EA35A947F062E5CF0F4BE1CB2F9D2781C
Authority key identifier: 4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     267220
IP address blocks:        2804:4a20:8060::/43 maxlen: 43
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl
                          rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 03:20:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:61:85:7e:a3:5a:94:7f:06:2e:5c:f0:f4:be:1c:b2:f9:d2:78:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:70:05:2d:25:82:86:9d:f4:84:90:d3:38:80:
                    af:aa:c2:cd:3c:21:d2:4e:c2:c9:37:dc:8c:54:a6:
                    b2:b3:f3:2c:0b:c1:50:2a:a2:12:c6:e7:a4:f5:7a:
                    47:3d:5a:ff:ab:c0:cb:f7:d7:a9:57:ab:01:30:a4:
                    b3:1c:f6:2f:f9:cf:06:66:41:4e:62:a8:b2:7b:83:
                    7d:b6:2d:ff:cf:db:50:06:20:9d:3c:bf:d9:fd:35:
                    c4:10:c0:06:b8:79:f0:5a:84:87:ec:5f:b5:0b:b5:
                    5f:c2:bc:00:41:18:fb:2e:57:91:bf:01:ca:e2:bf:
                    5c:e6:a1:f5:6f:19:96:d8:bd:5b:91:5b:2a:ed:cf:
                    fc:e9:c7:dc:53:0c:63:05:79:20:8c:63:2f:04:c8:
                    6b:6b:69:d7:87:2f:e4:10:20:b2:f7:33:89:f2:da:
                    17:ab:5a:db:8f:e1:6a:4e:20:e1:82:71:32:b5:5f:
                    0a:6a:96:6e:5c:81:4f:c3:d3:bd:1b:47:bb:8d:25:
                    fc:d8:d8:56:3a:ff:5a:25:44:3b:78:42:6b:a7:60:
                    13:06:73:80:95:b1:9e:f2:e4:30:80:70:37:ca:71:
                    50:46:f9:e6:1f:70:d1:77:d5:3e:9e:ea:02:13:fa:
                    68:53:d9:c7:0a:6c:57:84:f3:fd:b2:41:0a:9c:21:
                    87:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2F:30:AC:60:32:D6:83:BD:27:97:84:58:41:49:8A:FC:21:49:B9
            X509v3 Authority Key Identifier:
                keyid:4D:9B:A8:D9:03:F5:A0:A3:D6:92:C9:F2:DC:D1:EE:5C:C0:8A:21:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D9BA8D903F5A0A3D692C9F2DCD1EE5CC08A213B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GDMjbPiBB3msVq2CJVm61nxXGUWdJa2orP3FWWnVsGRo/1/323830343a346132303a383036303a3a2f34332d3433203d3e20323637323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a20:8060::/43

    Signature Algorithm: sha256WithRSAEncryption
         4a:55:86:ef:a6:ad:3f:30:bf:28:42:40:a1:26:0d:50:42:89:
         ad:20:d2:d0:3d:a6:64:3d:ab:bb:0e:8a:34:42:d6:f4:a7:9f:
         b2:10:5e:62:99:52:d8:37:e9:a8:c6:14:b7:9a:95:a0:62:94:
         69:14:bc:1f:00:a2:f0:a3:d0:1f:a9:cf:9f:29:af:69:93:2e:
         8d:a5:7e:63:21:59:82:d1:6b:b2:0f:3b:ee:30:e5:55:a9:bd:
         2e:27:ad:79:65:dc:61:e0:c3:59:79:73:48:d1:11:f6:2c:e4:
         15:ab:89:54:7f:c2:f1:98:93:f0:11:6c:1f:d8:40:d2:9f:9c:
         22:cc:11:15:f2:8d:a9:d3:f3:9f:42:04:83:b6:0e:78:ce:ba:
         4c:8e:c1:0c:8f:a0:1f:ef:83:ba:73:e2:70:58:e7:33:4d:0f:
         9f:70:c7:1b:ce:31:db:54:fb:c0:55:26:78:c1:b5:8b:95:8d:
         54:b7:ba:96:68:e6:57:af:2f:16:a4:ec:67:8f:31:10:63:de:
         83:b9:00:de:16:f0:ce:2b:3e:49:53:c5:5f:85:97:7a:da:4b:
         de:cc:3d:49:35:12:5a:44:ee:85:4d:d4:83:ce:8d:e0:d9:04:
         de:06:6a:18:5e:9d:d9:c4:c1:bc:85:c8:09:c2:65:cb:a2:de:
         bc:14:ce:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:55 2025 by rpki-client