Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa
File:                     323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (raw, json)
Hash identifier:          PVq+hF7vsW69/LZUNpWq+A3qzKDzP7Q3cU3sANu0X9Q=
Subject key identifier:   0E:E2:CE:0D:0F:D7:D4:5D:1A:76:F2:CC:C9:41:E7:9C:67:84:C0:0E
Certificate issuer:       /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial:       20B63CB1A0246C84A0B610CF6B5AEAF75CBCFD52
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa
Signing time:             Fri 31 Jan 2025 18:37:20 +0000
ROA not before:           Fri 31 Jan 2025 18:32:20 +0000
ROA not after:            Fri 30 Jan 2026 18:37:20 +0000
asID:                     270577
IP address blocks:        2804:6e20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
                          rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 19:18:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b6:3c:b1:a0:24:6c:84:a0:b6:10:cf:6b:5a:ea:f7:5c:bc:fd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
        Validity
            Not Before: Jan 31 18:32:20 2025 GMT
            Not After : Jan 30 18:37:20 2026 GMT
        Subject: CN=0EE2CE0D0FD7D45D1A76F2CCC941E79C6784C00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:65:25:01:d5:25:2a:fb:7b:af:b3:f7:1b:92:
                    b2:32:f7:2e:d7:ab:52:9d:05:ad:b9:8f:d2:8f:80:
                    ec:e9:27:80:d3:87:49:5c:61:ae:cb:0f:07:bb:f4:
                    c9:b0:36:60:07:92:e6:44:d4:d9:08:d1:d5:7e:06:
                    94:5e:0b:60:a9:5e:0f:5c:35:47:30:cd:8a:c5:96:
                    c0:4b:68:71:69:07:a0:97:ec:d3:33:34:78:9a:66:
                    c5:05:80:4a:a5:2a:5a:bd:ca:db:ba:6e:40:ec:3a:
                    6e:21:a1:01:c9:8f:86:7b:d5:a0:5f:d6:c0:5f:f5:
                    9f:64:24:5b:3c:fe:7d:b4:45:22:1d:7c:6b:0f:bb:
                    d0:5e:73:b0:13:e5:86:f2:b9:5b:47:8f:08:bb:db:
                    11:c1:09:e1:84:67:d9:87:eb:7b:4f:95:fc:fb:b0:
                    e1:b0:ce:e5:66:bc:5a:d1:fd:c3:e5:ff:47:7f:db:
                    ab:dc:5b:fc:71:7b:cc:a7:74:d6:c3:6c:5a:5b:e9:
                    d6:da:fc:2e:a8:66:10:1d:e2:b1:62:a4:0a:e4:26:
                    95:67:32:bb:d5:05:b9:ca:25:83:7e:dc:b2:51:76:
                    c4:a6:5a:74:f3:fd:2c:35:d0:01:77:02:2e:4e:34:
                    cf:26:b4:b7:d6:fe:66:2b:22:a4:05:db:ea:49:39:
                    e6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E2:CE:0D:0F:D7:D4:5D:1A:76:F2:CC:C9:41:E7:9C:67:84:C0:0E
            X509v3 Authority Key Identifier:
                keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:85:11:60:76:a7:56:8f:69:cc:10:97:8d:40:87:cf:c5:
         f0:a0:33:02:01:3b:00:d6:4b:65:86:41:09:59:89:2f:c4:21:
         91:4e:8c:c5:a9:1c:86:67:ea:70:70:96:02:c7:76:a0:9a:9d:
         02:20:62:4d:46:7d:59:68:5b:21:c0:e7:8a:1a:b9:de:5b:33:
         82:bf:a3:be:a2:13:17:d5:97:53:6c:09:e4:81:66:13:36:cc:
         c0:38:46:32:cd:5b:6c:65:8b:81:9f:46:30:7c:6b:fa:82:2b:
         9e:ea:98:cb:c2:b4:2f:2b:34:8e:ca:54:b9:67:95:ed:3f:9e:
         d3:4e:67:31:dc:43:2a:7f:5e:54:2f:fd:9f:a9:8f:ce:92:e9:
         ae:36:e5:78:91:00:dd:35:b8:f8:1a:92:b6:b5:c9:10:d1:2a:
         0c:35:39:21:3e:06:fa:37:aa:cc:c0:65:d0:77:df:a3:00:aa:
         70:6e:f1:b2:4c:d4:c8:ed:d7:a9:db:11:3e:0d:48:81:c9:11:
         21:19:0d:ed:a9:82:ed:25:4a:b6:cf:db:9d:da:3c:cc:59:7b:
         da:d9:9b:30:fc:41:3d:36:75:48:dd:82:64:35:fe:eb:22:d2:
         67:f9:b7:02:31:b2:bf:20:4f:9d:43:a9:86:78:7a:e7:d8:12:
         c2:44:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:05:22 2025 by rpki-client