Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
File:                     323830343a366330343a3a2f33332d3333203d3e20323730343430.roa (raw, json)
Hash identifier:          oMvoghKVVT5pteqXgUg/Gn5goHsG1bE2SavGn0PcLAY=
Subject key identifier:   02:95:BE:0A:FB:36:6C:35:8C:B4:31:E2:F4:60:97:08:7D:94:C8:79
Certificate issuer:       /CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
Certificate serial:       7582CA1D61011C2CED96785F6D23B90424609C48
Authority key identifier: 2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa
Signing time:             Thu 20 Mar 2025 12:36:13 +0000
ROA not before:           Thu 20 Mar 2025 12:31:13 +0000
ROA not after:            Thu 19 Mar 2026 12:36:13 +0000
asID:                     270440
IP address blocks:        2804:6c04::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:82:ca:1d:61:01:1c:2c:ed:96:78:5f:6d:23:b9:04:24:60:9c:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
        Validity
            Not Before: Mar 20 12:31:13 2025 GMT
            Not After : Mar 19 12:36:13 2026 GMT
        Subject: CN=0295BE0AFB366C358CB431E2F46097087D94C879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:47:53:00:a7:35:7d:c9:52:eb:47:f1:3c:
                    b4:a8:33:61:86:e0:6d:a9:b7:aa:e3:59:2f:3f:e2:
                    8e:8e:ea:3e:35:28:e4:0e:26:98:b2:63:fb:48:5d:
                    a9:66:d7:06:25:df:d9:01:7f:47:b0:f3:0b:b3:ef:
                    a3:81:40:30:82:34:a6:42:c9:d1:c6:da:05:0e:5d:
                    14:a3:f8:50:51:f9:6a:70:fc:55:1f:dd:ec:2a:75:
                    f9:34:f2:b5:f4:88:19:c8:b5:39:7b:83:4b:58:7f:
                    a3:9b:ff:09:be:7d:55:f7:a0:5d:75:6a:bd:0b:f9:
                    9c:1b:b0:5f:4c:31:39:4d:6b:95:8c:97:ef:72:98:
                    6a:d4:d8:8c:6d:b4:85:6b:ea:ee:26:11:15:c3:c2:
                    b6:b2:b7:59:e2:90:43:c6:c0:11:1a:6e:cc:99:1e:
                    eb:e2:31:6a:bd:17:d0:8c:24:9c:1b:08:e1:cb:fb:
                    8b:a2:09:b5:17:f7:d2:2f:00:79:92:e3:2c:90:6f:
                    f7:ee:4a:15:89:05:c4:12:22:05:67:32:e5:82:54:
                    b4:81:1c:74:a0:da:35:4e:3d:bd:7e:01:77:30:e1:
                    ab:99:b4:8e:45:7b:4f:e9:47:2b:6d:15:41:d1:80:
                    ef:2e:02:a4:be:97:b2:2b:38:cd:84:54:5a:f6:38:
                    95:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:95:BE:0A:FB:36:6C:35:8C:B4:31:E2:F4:60:97:08:7D:94:C8:79
            X509v3 Authority Key Identifier:
                keyid:2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a3a2f33332d3333203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04::/33

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:bd:04:be:33:ff:b9:6c:2d:43:8f:b6:62:20:b5:24:db:
         09:f0:1d:07:94:2d:3e:59:f6:38:e7:89:25:d3:89:ea:1d:24:
         4b:b5:3f:d3:3e:bf:e1:2b:d2:0e:eb:f5:55:36:6d:f6:63:e5:
         74:11:14:0e:e7:a0:b7:a8:bb:79:db:7c:41:13:5e:47:47:e9:
         a6:1b:bc:b8:cd:48:8b:7d:28:01:bb:5d:31:05:cc:9a:fd:0a:
         1b:04:cc:94:38:1e:57:27:f2:19:2b:68:60:71:83:cf:83:74:
         97:f2:d2:be:ef:50:fb:06:0e:f9:36:fe:c2:2c:f0:54:01:6e:
         4f:d7:71:9c:ac:85:67:3e:06:ce:d5:2f:6c:b8:b3:a9:41:6a:
         66:8f:8b:cb:0b:11:f5:a7:ed:37:a6:79:bc:cf:f5:d0:d0:65:
         36:00:cd:e0:be:04:2b:97:0e:0f:01:64:b9:60:ef:a2:ec:a5:
         03:68:87:08:e8:ab:e6:e9:77:4b:71:62:bd:f0:3b:78:c7:c1:
         97:41:a5:25:d2:18:50:83:04:51:1f:b7:09:1e:6c:7a:bf:6f:
         9a:8b:c7:71:31:2d:a5:7d:80:bc:3c:bf:47:e7:81:27:cc:3e:
         00:1c:5f:4d:fc:36:07:5f:56:25:c8:62:51:3c:fe:28:93:bb:
         05:05:87:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:17:21 2025 by rpki-client