Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
File:                     323830343a336333343a3a2f33322d3332203d3e20323636313936.roa (raw, json)
Hash identifier:          Nsn2FyEqFo3IJbuYH0bWwLvDJwSBIWTl3EezISZJswU=
Subject key identifier:   0A:2A:AE:F6:C5:F9:6C:11:0F:21:EA:1F:D7:DC:E0:20:96:EC:BE:E0
Certificate issuer:       /CN=8723709C4D690CFE7D7971537037FC3C8E195928
Certificate serial:       794665B0E4C53B1274BEC7753621FD0B7D46578C
Authority key identifier: 87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa
Signing time:             Sun 29 Dec 2024 13:32:38 +0000
ROA not before:           Sun 29 Dec 2024 13:27:38 +0000
ROA not after:            Sun 28 Dec 2025 13:32:38 +0000
asID:                     266196
IP address blocks:        2804:3c34::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl
                          rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:46:65:b0:e4:c5:3b:12:74:be:c7:75:36:21:fd:0b:7d:46:57:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8723709C4D690CFE7D7971537037FC3C8E195928
        Validity
            Not Before: Dec 29 13:27:38 2024 GMT
            Not After : Dec 28 13:32:38 2025 GMT
        Subject: CN=0A2AAEF6C5F96C110F21EA1FD7DCE02096ECBEE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:d7:bc:f4:1a:2c:91:0d:62:8a:69:ee:2b:
                    94:3b:7a:39:01:ec:b4:b9:cb:bf:8a:52:dc:1d:17:
                    19:f0:fe:a8:d0:80:b3:98:68:5c:0f:58:82:8e:ca:
                    e1:16:d9:8a:44:5a:00:59:e0:01:46:40:7c:7f:78:
                    0f:88:1d:f9:cf:34:83:a3:dd:30:bc:a8:35:aa:43:
                    60:39:d8:75:f8:b7:a7:7f:6b:0e:fd:de:3e:34:d1:
                    68:b2:a4:12:cb:75:e3:82:46:6f:1b:a9:67:33:e8:
                    da:0f:01:4b:08:1b:23:de:57:e9:0b:f5:07:91:ef:
                    f9:c8:29:8d:c6:0a:84:fe:b3:15:d4:82:9d:6c:f3:
                    eb:35:cb:1b:fb:77:e0:11:43:bd:a1:2f:a9:4c:a5:
                    bc:7a:52:bd:32:18:c9:cc:b1:f9:16:c0:91:c8:4f:
                    5b:6b:9b:b3:46:20:95:fd:27:d2:41:2b:c2:19:3d:
                    c5:c0:fc:6b:c0:a0:68:24:5b:6c:15:ee:36:20:fa:
                    df:ca:44:f2:58:06:f7:e8:6e:66:d6:c7:8b:38:0f:
                    a0:67:2d:9c:5e:67:1b:61:0c:94:7e:f5:e0:c4:ec:
                    12:c8:2a:c8:52:0b:ae:1f:2c:53:d7:5c:9e:aa:ae:
                    fc:19:4c:75:9a:55:24:39:e1:3b:f5:70:7b:bb:ef:
                    8a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:AE:F6:C5:F9:6C:11:0F:21:EA:1F:D7:DC:E0:20:96:EC:BE:E0
            X509v3 Authority Key Identifier:
                keyid:87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/323830343a336333343a3a2f33322d3332203d3e20323636313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c34::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:da:bb:3b:3f:5b:58:e7:d2:c0:de:ba:ff:a2:9f:d2:36:36:
         53:1a:27:70:e0:3f:b0:e8:c6:bb:e7:25:1c:eb:0a:1f:64:88:
         a0:ef:c2:d2:20:e7:f9:d3:0b:49:e9:c7:f8:c0:87:61:ad:92:
         29:39:4a:17:8b:5e:04:52:dc:a0:eb:8f:db:25:f6:39:86:12:
         40:6d:d1:41:11:01:91:18:56:ca:1e:0e:28:6f:ad:a0:a9:f3:
         2f:1e:46:75:e5:10:d1:f1:8e:c5:14:89:49:1d:ec:25:a4:46:
         49:70:45:00:ed:2a:28:64:0f:df:d6:1f:65:6c:9a:eb:f8:47:
         eb:95:5e:86:f1:42:7b:fb:76:83:76:d8:ba:ee:10:6a:27:e9:
         f3:fc:86:1b:d4:3e:ab:df:ba:7b:8e:0d:c6:c1:1f:f9:94:bd:
         80:f8:a8:ce:fc:e3:2a:03:ae:65:f8:1f:a6:cf:a8:77:f3:af:
         22:5e:4a:9d:31:78:e1:f7:8e:1d:03:40:9d:8d:d4:09:07:1e:
         1e:fc:d5:97:8d:0f:51:bb:d7:ae:fe:bf:45:a8:93:b2:11:a3:
         a2:d9:20:8a:a4:21:9e:1c:86:8e:d1:cd:14:23:1b:67:9b:ea:
         9b:a0:4f:26:66:c6:48:48:1d:bc:bc:92:d9:71:57:0b:33:75:
         fc:b1:9b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:59:29 2025 by rpki-client