Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
File:                     323830343a333536633a3a2f33322d3332203d3e20323636323835.roa (raw, json)
Hash identifier:          QZ+sQae2Cmtdq0s4aoEHcq2cIT9KrgVnuypkqDKkgGo=
Subject key identifier:   43:9E:09:04:50:44:51:4A:F4:14:62:6F:1A:31:9E:92:01:37:FE:DD
Certificate issuer:       /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial:       54544776AE0D24877CFE907C25B340FD6942AACF
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
Signing time:             Wed 04 Dec 2024 11:53:16 +0000
ROA not before:           Wed 04 Dec 2024 11:48:16 +0000
ROA not after:            Wed 03 Dec 2025 11:53:16 +0000
asID:                     266285
IP address blocks:        2804:356c::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
                          rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 23:52:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:54:47:76:ae:0d:24:87:7c:fe:90:7c:25:b3:40:fd:69:42:aa:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
        Validity
            Not Before: Dec  4 11:48:16 2024 GMT
            Not After : Dec  3 11:53:16 2025 GMT
        Subject: CN=439E09045044514AF414626F1A319E920137FEDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e8:4c:d1:99:5d:48:11:d9:38:23:0e:8c:60:
                    46:48:8e:37:7f:ac:9d:c4:e0:db:c2:d0:6a:c6:7e:
                    a0:51:e0:71:84:83:79:1e:35:05:d3:b5:74:5d:93:
                    20:a7:d1:16:40:f6:6a:8f:11:19:31:bd:04:aa:d2:
                    92:19:a0:13:83:e4:7f:92:b6:37:59:0f:fa:76:4d:
                    21:74:96:87:52:32:be:b4:07:7f:a9:af:79:33:3d:
                    9a:7f:d3:c0:9b:43:0e:66:ed:48:6e:ec:83:e8:af:
                    71:76:68:d9:12:57:7a:38:b1:1f:ad:50:52:2a:a2:
                    69:29:24:94:23:67:86:c6:98:17:30:fb:ed:65:11:
                    f6:d8:27:14:ae:40:52:58:f1:d7:63:28:8a:c1:9d:
                    9d:45:7f:f1:ae:68:27:87:d7:5e:df:69:9e:ad:c4:
                    76:f1:77:84:73:e5:f2:17:d8:bc:7e:ff:f0:6e:83:
                    a3:2f:48:72:17:ad:16:2c:fe:26:29:8c:ff:11:5d:
                    ef:54:a9:48:3f:17:00:7a:85:21:9c:6e:27:5f:5a:
                    37:c5:65:b5:7f:fe:16:4e:35:1a:ca:90:7c:78:f1:
                    47:97:92:9d:17:6c:59:28:65:26:92:d5:6b:60:5c:
                    cf:bd:39:83:4d:00:a9:13:fc:e8:76:4e:85:bd:79:
                    7f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9E:09:04:50:44:51:4A:F4:14:62:6F:1A:31:9E:92:01:37:FE:DD
            X509v3 Authority Key Identifier:
                keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:356c::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:8b:cc:bf:8f:4d:25:a2:b5:65:9d:8c:7b:bb:88:7e:29:91:
         cc:f1:ee:4e:4b:42:01:e3:91:ca:45:8a:6f:d0:37:0a:b3:92:
         44:21:63:25:3d:55:e8:51:17:16:45:c6:92:5c:51:94:95:a2:
         c5:e1:37:fd:fa:17:71:c2:38:c8:4d:74:9c:89:74:c3:a5:da:
         fd:ff:f0:55:a2:1e:19:c0:88:5f:54:d0:b3:24:f1:5b:0c:ff:
         1d:a7:42:bc:c7:6c:92:a2:24:f1:2c:af:c5:8a:d0:06:ab:74:
         7b:e7:88:b0:23:9a:96:72:f7:01:25:0d:0e:99:71:9c:7d:de:
         9d:27:d0:fd:0a:f3:77:a4:70:be:ee:7e:aa:4a:57:52:3c:c9:
         03:66:6e:3c:aa:2d:02:4a:7e:ba:ed:a2:99:e3:b2:d2:04:51:
         c3:47:14:c1:9b:ac:08:5d:1f:52:e0:98:7c:ae:26:b5:1c:8c:
         72:66:db:29:2c:2e:7a:4e:cd:0d:37:02:b6:28:93:17:b2:d7:
         ef:21:7f:36:b8:a4:5b:ea:eb:da:49:57:9e:84:75:5a:f4:c3:
         73:d1:40:8e:bb:7a:c5:99:2c:09:b1:da:05:93:52:d1:2b:73:
         9c:1b:b5:21:a2:6a:f3:50:19:4e:c9:46:14:38:10:44:8e:71:
         b7:e6:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:19:58 2025 by rpki-client