Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/323830343a366337343a3a2f33322d3334203d3e20323730343639.roa
File:                     323830343a366337343a3a2f33322d3334203d3e20323730343639.roa (raw, json)
Hash identifier:          WkR9mi+FA8zElYBQCquG0bLrHgyPrFdPTwSlyS/QSqU=
Subject key identifier:   DD:5D:EA:07:E3:BB:B0:D8:76:7D:10:C0:1E:50:BA:BC:39:CF:4A:29
Certificate issuer:       /CN=BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B
Certificate serial:       1CE2E372FFF4968441A33823A8883C90F77CA335
Authority key identifier: BC:6B:7E:4B:33:BE:67:CD:AB:CC:AB:2A:5C:7F:6F:F7:E0:77:21:2B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/323830343a366337343a3a2f33322d3334203d3e20323730343639.roa
Signing time:             Wed 05 Mar 2025 23:13:42 +0000
ROA not before:           Wed 05 Mar 2025 23:08:42 +0000
ROA not after:            Wed 04 Mar 2026 23:13:42 +0000
asID:                     270469
IP address blocks:        2804:6c74::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.crl
                          rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 06:20:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e2:e3:72:ff:f4:96:84:41:a3:38:23:a8:88:3c:90:f7:7c:a3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B
        Validity
            Not Before: Mar  5 23:08:42 2025 GMT
            Not After : Mar  4 23:13:42 2026 GMT
        Subject: CN=DD5DEA07E3BBB0D8767D10C01E50BABC39CF4A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cc:cc:b1:45:a1:85:05:93:ad:06:be:9c:96:
                    b7:15:d8:a6:cd:9b:49:93:d3:02:49:0e:aa:a4:d9:
                    04:a1:4d:43:a8:f1:f5:66:2b:a7:b4:43:2e:f9:d4:
                    94:6d:38:b6:da:1f:6f:35:b5:c0:ae:01:af:f3:8e:
                    39:f3:47:24:29:ed:6a:07:99:df:41:60:65:4a:b7:
                    6d:f0:00:cf:14:8f:f6:61:60:be:e5:a3:b0:72:a8:
                    0e:de:c5:da:b2:0c:8a:55:42:29:24:2e:75:1c:f0:
                    87:7c:e2:e3:92:c6:11:b2:cf:79:db:6d:36:b5:47:
                    6d:8e:8e:0f:35:79:6e:15:44:61:ca:c7:f7:f3:81:
                    94:9f:73:0c:25:47:21:3f:a2:9b:68:c3:1b:6e:b7:
                    48:4b:25:09:2a:d1:fc:34:dc:4b:9e:1b:79:e5:20:
                    99:76:e3:b7:93:99:13:5e:3e:04:d4:e4:44:3e:3e:
                    57:be:a4:1e:a1:32:b3:0d:be:a8:62:55:b7:75:d6:
                    de:e9:08:68:38:07:61:c6:0f:64:ee:e2:d4:5a:4e:
                    c0:17:97:d5:a4:b6:38:89:15:48:c6:b1:28:4d:53:
                    97:06:4f:b0:69:14:62:2e:dd:19:98:e0:4f:54:9f:
                    63:1c:e2:9c:9b:3c:d8:31:8a:39:f0:d9:b0:e3:4c:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:5D:EA:07:E3:BB:B0:D8:76:7D:10:C0:1E:50:BA:BC:39:CF:4A:29
            X509v3 Authority Key Identifier:
                keyid:BC:6B:7E:4B:33:BE:67:CD:AB:CC:AB:2A:5C:7F:6F:F7:E0:77:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC6B7E4B33BE67CDABCCAB2A5C7F6FF7E077212B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWytw7jNaDhj9kWweakmhV98KEwNyumLgafLKf1sZUXp/1/323830343a366337343a3a2f33322d3334203d3e20323730343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c74::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:d9:65:29:b7:22:d2:50:27:a6:a6:ab:c7:6d:a8:84:2c:af:
         37:6b:dd:f4:1e:d2:e2:1c:89:3c:fc:e9:56:84:cb:64:2b:79:
         55:ba:db:2a:df:ae:2a:d7:75:9d:76:a7:8f:45:76:59:9b:f9:
         98:4d:0f:83:7e:78:19:33:8f:8f:f2:91:e1:5f:61:91:8e:42:
         fa:3f:b0:39:c6:04:fb:9a:7a:8b:d4:c2:76:21:76:e9:24:03:
         b3:5c:d5:63:a8:a4:15:6e:4d:a6:d9:85:e0:8b:39:e6:ac:98:
         22:ec:da:2d:af:5f:e5:19:fd:24:99:8c:a1:d6:72:4f:33:95:
         ab:67:22:5c:ac:1e:e0:b1:a7:05:c8:4f:5d:b4:15:e1:92:11:
         be:3a:97:4c:62:34:75:d4:36:f3:90:a2:8a:82:2b:be:b5:7b:
         a7:fa:b8:3f:d0:91:5e:8d:93:f2:ca:60:70:ea:cb:bc:8b:be:
         07:bd:74:07:d2:6a:0b:76:c8:96:ca:eb:3a:fd:ad:23:1d:c5:
         da:cc:9a:ec:32:7c:b1:05:c9:a1:ea:40:88:61:2c:81:4f:ae:
         0e:c7:35:30:79:f0:f4:e1:58:da:ac:aa:fb:84:97:c6:e4:50:
         b5:32:06:72:e3:49:2e:28:0d:3e:98:44:a2:83:0f:cc:80:37:
         9c:a9:a6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:45:00 2025 by rpki-client