Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa
File:                     323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa (raw, json)
Hash identifier:          KaDD1B9L/1YgiBrcyRisFVWHKeCqMc0d/T1zrCbZrlk=
Subject key identifier:   0A:17:56:11:FC:F8:9A:4B:B3:29:D4:C0:7C:C9:D1:8F:72:34:60:2D
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       73D71713FE8273934CAAB8923B82B3D9AE0A67E0
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa
Signing time:             Thu 06 Mar 2025 04:00:14 +0000
ROA not before:           Thu 06 Mar 2025 03:55:14 +0000
ROA not after:            Thu 05 Mar 2026 04:00:14 +0000
asID:                     270899
IP address blocks:        2804:7328:1000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d7:17:13:fe:82:73:93:4c:aa:b8:92:3b:82:b3:d9:ae:0a:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Mar  6 03:55:14 2025 GMT
            Not After : Mar  5 04:00:14 2026 GMT
        Subject: CN=0A175611FCF89A4BB329D4C07CC9D18F7234602D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:eb:8c:d2:4f:a3:79:73:c6:f3:7a:42:1d:f7:
                    37:01:46:d8:cf:62:f0:72:fe:a5:e5:7d:d6:fc:9f:
                    1f:0e:c4:f6:f6:ad:24:ee:a1:71:2a:16:4a:de:39:
                    82:ff:cd:5e:7a:c6:06:b3:4a:47:1b:42:95:9a:3b:
                    f6:51:f8:67:3f:eb:61:aa:8d:4d:46:1a:76:5a:a2:
                    e0:a1:b4:b8:af:04:5f:0c:94:f5:bb:99:16:6c:7b:
                    dd:6d:bf:7c:89:9e:fd:bb:ea:a9:7c:dc:e7:bf:d9:
                    a3:84:08:6e:28:39:8c:5d:b7:a6:45:b5:86:5f:ed:
                    87:ae:31:6c:80:b9:ac:71:11:6a:18:a6:44:02:3d:
                    73:37:0b:7c:d0:e2:d9:6d:0f:ae:22:99:22:ab:95:
                    d2:d2:c6:65:84:e2:ca:71:5c:5d:bd:cb:99:de:ec:
                    05:41:57:85:4a:71:18:12:8f:1d:ff:71:ee:12:ff:
                    55:37:fb:cc:32:03:9f:f5:d5:4e:21:9e:63:4b:d5:
                    27:cb:b6:21:cf:91:eb:7b:90:78:58:f8:30:6f:3d:
                    ea:9f:e3:5d:f7:39:9a:32:62:16:5b:31:0f:04:f4:
                    75:61:5e:40:0a:1d:93:d4:d6:71:c1:2f:ea:62:40:
                    4a:e6:74:33:ab:10:a8:49:0a:e7:45:31:48:1f:7a:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:17:56:11:FC:F8:9A:4B:B3:29:D4:C0:7C:C9:D1:8F:72:34:60:2D
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a313030303a3a2f33362d3336203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7328:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         87:92:bf:21:38:83:93:e4:e7:0d:e3:83:32:cf:5b:f9:07:10:
         2b:65:79:60:f4:3d:e0:0f:41:86:05:f8:4d:64:7c:69:54:41:
         51:a1:63:2d:46:7d:62:e8:3d:57:89:48:82:3b:81:89:8c:61:
         1e:8b:16:19:97:08:9f:d7:e3:ae:74:66:80:c7:bd:6a:dc:e4:
         54:62:09:fc:f7:93:35:9a:90:26:d9:6a:f1:26:02:0f:83:7c:
         95:3a:3b:16:16:14:21:f0:03:d6:10:54:0a:46:b4:bb:98:5a:
         04:a2:86:1a:68:37:76:18:d2:16:86:54:3c:44:5c:ca:7b:8f:
         10:e2:65:0b:01:54:26:26:3e:1d:a4:9c:95:41:34:d0:75:e0:
         5b:2f:99:b3:3d:2d:6a:16:55:92:c0:95:7a:1e:fb:9c:aa:ce:
         2e:3e:86:01:40:aa:2b:a3:0f:06:28:ff:5a:b2:eb:6f:8d:0f:
         80:e9:42:60:eb:4d:fe:fc:3c:23:65:6a:a4:6b:02:4a:41:2c:
         09:45:75:d8:17:1d:0f:55:e9:fa:e1:78:96:d2:f8:79:81:f7:
         2c:90:2d:cb:16:25:4c:b9:e9:3d:f3:76:70:61:73:96:e5:b4:
         e9:0f:b0:d6:84:39:d0:80:49:81:5d:59:b9:e5:75:bd:e8:fd:
         f0:aa:12:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:22:37 2025 by rpki-client