Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa
File:                     323830343a323463303a3a2f33322d313238203d3e20323632323930.roa (raw, json)
Hash identifier:          iib8Ej5DM/IZ6Qi660/twgY7+AlM+uG5yZlC1F5qXaU=
Subject key identifier:   FE:E6:3C:E1:DE:E9:3D:E6:16:A9:C1:3C:4D:2A:ED:8B:F2:BC:91:27
Certificate issuer:       /CN=24DA1210F429D91717494C8CC3BF85882918C64A
Certificate serial:       0D56094529070F3ABC1466FB946A16F4E7D4007D
Authority key identifier: 24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa
Signing time:             Mon 01 Sep 2025 15:18:58 +0000
ROA not before:           Mon 01 Sep 2025 15:13:58 +0000
ROA not after:            Mon 31 Aug 2026 15:18:58 +0000
asID:                     262290
IP address blocks:        2804:24c0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl
                          rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 19 Sep 2025 17:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:56:09:45:29:07:0f:3a:bc:14:66:fb:94:6a:16:f4:e7:d4:00:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24DA1210F429D91717494C8CC3BF85882918C64A
        Validity
            Not Before: Sep  1 15:13:58 2025 GMT
            Not After : Aug 31 15:18:58 2026 GMT
        Subject: CN=FEE63CE1DEE93DE616A9C13C4D2AED8BF2BC9127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:99:11:7a:a9:54:2b:11:26:ca:22:fc:5b:ec:
                    80:f7:09:a9:16:d0:aa:d3:93:db:c9:4e:7a:de:4c:
                    64:65:a1:54:b5:c2:24:28:99:d4:33:13:ab:33:e8:
                    82:98:3e:d7:0d:4d:0f:1f:d7:2d:b5:d6:78:63:ab:
                    66:90:e9:a0:5b:e6:e3:5b:13:bf:89:05:cb:7e:bb:
                    f3:d2:cc:26:57:ae:9a:a7:5f:d0:4f:e2:96:d2:a3:
                    0a:f0:3a:f3:43:ef:ad:84:32:67:a2:e9:3a:5a:59:
                    e5:13:34:6e:3b:81:9e:1e:c1:ac:0e:33:84:f2:6d:
                    c4:88:0c:a1:cf:38:76:d9:a2:be:43:82:f9:c1:9a:
                    87:bc:1b:c0:db:f7:b9:9a:f7:c2:aa:41:4b:63:e0:
                    c3:8e:de:23:fc:fb:6c:dc:6d:04:4c:02:66:ea:73:
                    22:37:cd:65:e8:99:49:fb:c3:45:78:75:b5:d8:9c:
                    c8:bc:f8:fb:7b:d1:69:ea:3b:68:1d:fa:8a:93:ac:
                    b4:ea:8a:36:36:a7:4b:ad:65:5f:64:ea:0c:72:8d:
                    10:e3:c5:89:67:09:fe:9d:85:0a:18:4d:32:4e:fa:
                    1b:d2:96:c6:63:62:5e:58:30:de:75:67:d1:4d:72:
                    d4:61:75:e5:d8:49:e8:9e:d7:ef:4b:fc:84:ae:cd:
                    06:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E6:3C:E1:DE:E9:3D:E6:16:A9:C1:3C:4D:2A:ED:8B:F2:BC:91:27
            X509v3 Authority Key Identifier:
                keyid:24:DA:12:10:F4:29:D9:17:17:49:4C:8C:C3:BF:85:88:29:18:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/24DA1210F429D91717494C8CC3BF85882918C64A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24DA1210F429D91717494C8CC3BF85882918C64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GM9UPjWSQRGM81Macbf6t8qTFeT8RGiRQHRuHmpqebpn/0/323830343a323463303a3a2f33322d313238203d3e20323632323930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:80:de:bd:6a:e2:29:d8:31:53:03:dc:7b:2a:91:8c:01:
         e8:a1:44:e9:6c:fd:7e:02:39:d1:69:1b:96:ba:45:bf:92:a7:
         9c:87:f3:9d:43:68:60:67:f8:6d:71:3c:18:53:31:50:e8:91:
         3f:b1:ec:9c:4b:3e:61:9b:02:96:ad:29:0a:64:be:92:62:63:
         8e:ad:0d:e4:51:4d:44:8d:5a:ba:78:9b:52:9d:24:54:8f:6b:
         41:95:ff:a1:25:1a:f8:31:a9:89:ad:4b:6d:48:55:bb:ce:4c:
         b4:24:6b:cd:fb:34:db:21:32:66:80:7e:1b:5e:ed:53:4b:7c:
         8b:d1:c1:39:73:c3:6f:f0:fe:6a:88:49:72:96:99:f1:ff:b9:
         bd:73:00:d2:5b:a5:42:bb:87:51:9e:04:00:74:84:0f:7d:42:
         3a:6c:2f:72:f3:68:a2:f4:f3:aa:63:d5:bc:54:a4:2a:da:f7:
         27:43:e0:e0:93:05:48:58:d2:ef:67:34:d5:1c:2c:64:4a:2a:
         1e:84:91:f3:a4:b5:1f:02:b2:28:4c:fa:91:95:b3:6a:71:8a:
         eb:f9:3f:5c:96:c0:58:a8:7c:f4:bf:80:e0:c6:5c:8f:1b:d0:
         98:d0:ad:77:de:99:46:e4:8e:49:61:c5:f6:2f:ec:88:b0:a8:
         ac:73:e1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:30:16 2025 by rpki-client