Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa
File:                     323830343a6636383a3a2f33322d3332203d3e20323633353834.roa (raw, json)
Hash identifier:          tc7UmjXhllFx/oTGgPLpFYtEtn2ddqr2KUYNVvo+9Uo=
Subject key identifier:   7F:78:54:C7:E4:8C:B2:29:1C:57:07:5C:44:A2:97:BC:25:30:6A:9E
Certificate issuer:       /CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
Certificate serial:       756849132DFE8E9B0594FDB1BE7DC5BB320E12CD
Authority key identifier: A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa
Signing time:             Tue 10 Dec 2024 21:57:36 +0000
ROA not before:           Tue 10 Dec 2024 21:52:36 +0000
ROA not after:            Tue 09 Dec 2025 21:57:36 +0000
asID:                     263584
IP address blocks:        2804:f68::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl
                          rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 11 Apr 2025 10:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:68:49:13:2d:fe:8e:9b:05:94:fd:b1:be:7d:c5:bb:32:0e:12:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B
        Validity
            Not Before: Dec 10 21:52:36 2024 GMT
            Not After : Dec  9 21:57:36 2025 GMT
        Subject: CN=7F7854C7E48CB2291C57075C44A297BC25306A9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f0:1c:ae:b9:97:25:e1:38:1a:d0:28:37:cb:
                    f2:c2:ca:e0:fd:76:fe:04:0c:ba:fc:fe:1f:3f:7f:
                    bb:a8:f4:21:7f:b7:b5:a9:e6:62:e4:6e:84:a5:71:
                    42:75:38:c9:48:b8:af:d0:99:21:bc:e0:c6:f2:45:
                    1c:38:6c:f3:09:4e:b3:2f:21:44:dd:8e:a6:91:d9:
                    d2:5c:f7:33:5f:95:e0:60:1a:2d:87:2d:3c:42:c6:
                    47:c7:ef:c2:6b:47:b5:59:fe:56:9a:81:05:28:8c:
                    e7:51:46:a8:78:8f:0d:84:b6:b0:bf:5e:20:0e:68:
                    4b:39:62:89:0f:61:1c:33:58:04:51:e0:5d:00:21:
                    ae:20:4c:54:65:86:7a:3f:84:d4:b6:82:f7:fe:1b:
                    49:d1:db:ef:d6:8f:51:08:02:83:33:ae:95:05:3d:
                    ea:2c:d3:df:6b:9e:1d:54:bf:de:12:bd:fb:bd:7b:
                    a4:7e:14:11:ea:95:8f:fe:c4:10:45:7a:2a:4c:5b:
                    28:6f:8d:a7:5b:2e:7b:10:5e:ce:95:a2:ee:08:cc:
                    72:36:db:c9:1f:94:e9:ba:cb:59:44:e0:b4:12:38:
                    9b:3d:54:ab:82:26:7e:e7:c2:31:62:99:d2:e0:fe:
                    53:7d:1f:9f:1b:8b:e5:27:0d:d9:93:09:85:45:e5:
                    60:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:78:54:C7:E4:8C:B2:29:1C:57:07:5C:44:A2:97:BC:25:30:6A:9E
            X509v3 Authority Key Identifier:
                keyid:A7:CF:6A:D9:57:FD:96:A4:24:FF:83:F6:75:AC:AF:C7:EE:E7:EF:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A7CF6AD957FD96A424FF83F675ACAFC7EEE7EF8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a3a2f33322d3332203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:99:f4:67:3d:e7:85:c7:3c:5a:a5:fc:56:3d:07:ba:72:45:
         05:cc:d6:b1:94:ee:97:76:b4:64:e1:97:7f:ce:9e:9b:b8:2b:
         2e:98:51:cf:ce:d7:f9:10:0a:b8:6c:33:b7:90:a0:0c:04:15:
         d3:14:a6:b9:85:54:5b:da:b6:4a:12:a8:ba:49:be:03:99:47:
         79:c6:7e:7e:fc:3d:93:d4:bc:b8:8a:51:7b:68:07:b3:62:86:
         76:1a:67:ce:4a:e6:3b:74:77:79:4c:25:bb:a6:52:54:2e:a2:
         9e:af:49:f4:98:c1:8f:1a:82:f4:91:44:e3:55:26:c7:2e:a4:
         f9:5c:9a:b9:e3:c5:2a:1a:87:83:c8:fe:14:1b:db:b1:8d:34:
         e1:a6:17:11:87:f4:e4:1b:30:87:48:db:bf:60:eb:3e:4f:34:
         1e:82:bc:84:14:a3:59:f6:d6:ef:76:ec:e6:86:f3:73:92:75:
         d7:6e:f3:dd:c1:c1:f6:eb:0c:be:ee:fa:fd:29:a3:2f:63:d7:
         f4:9a:29:4f:31:02:73:cc:37:b1:8c:51:2f:0d:26:4e:98:1e:
         b4:d1:c0:5b:76:4b:04:7f:c1:44:f4:b7:d3:ed:ea:52:6d:d1:
         98:50:42:a9:2c:65:b3:e9:87:05:65:ba:f5:c1:7a:29:61:5b:
         05:4f:0b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 14:12:24 2025 by rpki-client