Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33362d3336203d3e20323730383939.roa
File:                     323830343a373332383a3a2f33362d3336203d3e20323730383939.roa (raw, json)
Hash identifier:          Hgb0YznLAEtDoYv49I8u6RBseazG2W8a4vF0eGCxlqM=
Subject key identifier:   95:B1:45:F3:28:5D:EB:C0:01:95:55:86:93:52:1F:1F:B0:4C:7B:1C
Certificate issuer:       /CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
Certificate serial:       0385644165ECCFE435D955E82E7408BED783691A
Authority key identifier: 9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33362d3336203d3e20323730383939.roa
Signing time:             Thu 06 Mar 2025 04:00:14 +0000
ROA not before:           Thu 06 Mar 2025 03:55:14 +0000
ROA not after:            Thu 05 Mar 2026 04:00:14 +0000
asID:                     270899
IP address blocks:        2804:7328::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl
                          rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 08:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:85:64:41:65:ec:cf:e4:35:d9:55:e8:2e:74:08:be:d7:83:69:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB99B4A1CD56B1C7C104FA25EFDE518596FD221
        Validity
            Not Before: Mar  6 03:55:14 2025 GMT
            Not After : Mar  5 04:00:14 2026 GMT
        Subject: CN=95B145F3285DEBC00195558693521F1FB04C7B1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:18:59:07:7b:79:fa:19:38:14:f6:44:0b:
                    bc:ea:b6:c9:22:b9:4f:f0:d0:92:03:e0:76:05:9d:
                    d3:e3:98:cd:82:7f:85:10:7b:7a:3b:65:ca:c8:7b:
                    75:94:4e:a1:da:c7:f3:1f:50:38:4a:ce:86:58:3e:
                    96:9f:40:ac:f7:10:78:90:c0:46:a0:70:39:3d:f2:
                    b6:ef:c5:16:81:85:55:4d:a7:a4:0d:c8:f1:19:4d:
                    bf:fb:2f:4d:2f:a8:e3:ef:09:d4:b8:ed:d1:a4:92:
                    2d:c3:60:7e:12:01:fc:3e:28:94:f1:16:01:c5:af:
                    c5:8a:e5:2a:0c:52:12:6f:44:0c:4b:d0:9b:7f:3a:
                    af:98:06:95:73:0d:23:5d:12:2e:49:18:f1:e2:b5:
                    c2:c1:6f:27:81:1d:3b:3f:2f:ab:6d:40:93:a8:c6:
                    c1:a8:c2:22:16:35:ce:5f:ea:29:f1:b5:0d:5d:b4:
                    aa:78:4b:9d:c7:68:31:86:cc:df:7e:f8:f8:78:0c:
                    c1:f6:07:a1:37:bb:35:5c:53:5e:97:79:f0:23:fc:
                    02:88:d0:b7:e7:dc:8e:b6:85:c3:10:bb:64:7a:85:
                    5b:fb:8a:76:88:76:5b:07:74:85:b2:3c:68:63:0f:
                    92:2d:ad:1b:f7:14:85:14:df:37:52:88:50:77:1d:
                    e3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B1:45:F3:28:5D:EB:C0:01:95:55:86:93:52:1F:1F:B0:4C:7B:1C
            X509v3 Authority Key Identifier:
                keyid:9D:B9:9B:4A:1C:D5:6B:1C:7C:10:4F:A2:5E:FD:E5:18:59:6F:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9DB99B4A1CD56B1C7C104FA25EFDE518596FD221.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVwMEp5EnJSK7TaCjbu5DqHYSTZWa8Rwqar9AcACJj7s/1/323830343a373332383a3a2f33362d3336203d3e20323730383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7328::/36

    Signature Algorithm: sha256WithRSAEncryption
         a7:51:ce:3d:dd:ad:b9:63:c9:c4:0d:e4:13:07:e9:4b:d8:65:
         38:ff:0d:72:cd:73:d9:c9:5f:ef:4f:70:ff:ac:ab:9e:b7:90:
         06:b4:f1:9f:f6:31:47:8b:53:4a:aa:fb:f5:34:d4:49:d2:1c:
         f9:80:63:bf:df:30:9c:83:2e:d2:d7:2c:d1:65:1c:64:6d:58:
         40:96:df:67:92:83:d0:52:55:d6:37:ae:27:a7:b9:61:f2:fc:
         a8:a8:8c:bc:49:4b:58:a5:f4:f5:3c:60:59:da:24:88:b9:d4:
         b7:3e:fc:9a:e4:c3:41:1b:94:3f:da:80:38:6c:83:65:00:98:
         50:2e:bd:b6:50:f1:c1:61:c1:8a:0e:d8:83:b4:f5:94:65:69:
         05:65:b0:34:41:61:57:e1:8d:5f:79:f2:c3:57:cf:4f:79:03:
         d0:03:07:c6:34:7a:54:da:47:65:2a:d8:32:52:65:71:97:eb:
         c7:0a:09:55:92:99:22:fc:43:03:30:8f:15:30:7d:45:6d:55:
         fb:76:f4:3d:97:d4:f3:ac:97:46:71:c4:c8:57:8e:38:26:84:
         91:b6:41:f6:29:19:c6:7d:65:e8:3c:62:85:29:d3:54:e2:5e:
         2d:45:ad:53:4a:b1:3e:9a:c0:01:81:9e:5e:6f:6a:bc:10:92:
         eb:88:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:20:22 2025 by rpki-client