Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa (raw, json)
Hash identifier:          t0fkFQQy4adCgUPFt81PlGnLSYlPmbsCupbsDBMlBCk=
Subject key identifier:   76:B8:C4:D5:6A:BD:44:59:3B:F7:C1:7D:4B:4C:A0:5F:DA:7E:42:BA
Certificate issuer:       /CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
Certificate serial:       1EFBF3C5046EED24B2EAA8509A5676EA5966FD15
Authority key identifier: 2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa
Signing time:             Thu 20 Mar 2025 12:36:10 +0000
ROA not before:           Thu 20 Mar 2025 12:31:10 +0000
ROA not after:            Thu 19 Mar 2026 12:36:10 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 22:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fb:f3:c5:04:6e:ed:24:b2:ea:a8:50:9a:56:76:ea:59:66:fd:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E8459987E9776F5848158AEADDA7C12BA642F8E
        Validity
            Not Before: Mar 20 12:31:10 2025 GMT
            Not After : Mar 19 12:36:10 2026 GMT
        Subject: CN=76B8C4D56ABD44593BF7C17D4B4CA05FDA7E42BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b9:95:62:9a:97:e9:7d:4f:e9:8b:a1:41:f0:
                    ca:13:e6:9a:57:92:27:fe:4e:f1:70:6b:33:6a:64:
                    ab:02:d6:d0:91:2f:af:96:b8:eb:b4:fc:9a:5b:99:
                    64:55:fe:1b:64:a6:be:15:7d:17:35:9e:7f:84:52:
                    da:c6:b1:8c:a6:a5:52:e5:a2:78:8b:5c:16:42:77:
                    05:1c:24:33:13:a6:58:17:de:4b:63:12:57:90:9e:
                    50:0a:e3:68:32:ca:12:b9:76:04:77:40:4d:56:56:
                    62:7c:04:0a:5d:1c:d2:9d:8c:b5:73:2d:d6:85:35:
                    3f:88:c0:6a:04:04:f4:e3:32:6b:57:7e:0e:e0:c1:
                    e9:8b:45:d5:40:c8:c1:8c:83:6e:dc:ad:f6:fa:60:
                    86:bb:9e:5d:f4:bc:ce:14:a7:bd:a1:73:03:39:ca:
                    be:d5:7e:9f:e8:7c:65:3f:6f:3a:8e:3a:ab:e9:c1:
                    a7:f4:66:6e:d0:af:5f:1d:4d:7e:b5:a3:fd:38:f3:
                    cb:20:7e:47:14:cf:dc:31:fe:5a:bb:ef:06:4e:24:
                    63:8c:a2:a2:06:8c:8d:e7:80:72:25:bd:8b:27:79:
                    c0:b4:f7:b4:85:a6:11:00:46:3b:a0:a0:2e:69:78:
                    b8:bf:1b:14:17:46:00:24:5f:ca:21:21:c0:b8:78:
                    62:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B8:C4:D5:6A:BD:44:59:3B:F7:C1:7D:4B:4C:A0:5F:DA:7E:42:BA
            X509v3 Authority Key Identifier:
                keyid:2E:84:59:98:7E:97:76:F5:84:81:58:AE:AD:DA:7C:12:BA:64:2F:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/2E8459987E9776F5848158AEADDA7C12BA642F8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E8459987E9776F5848158AEADDA7C12BA642F8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33352d3335203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         97:cc:48:5a:bc:96:29:50:48:29:db:ee:bb:f4:1b:9c:06:0c:
         53:58:6d:48:36:a6:33:e5:80:22:fc:2d:65:91:e4:9f:ed:7a:
         0c:fb:6e:12:c6:23:22:37:20:bd:ea:e8:d4:3a:9a:d4:a6:93:
         8f:94:64:39:27:fe:ec:5e:db:a2:9b:49:80:b0:b8:91:c1:86:
         f5:2e:36:8f:d6:6c:f1:96:0d:4a:7e:da:06:db:70:7b:60:7c:
         3f:aa:b7:6b:60:49:32:ab:6f:57:b5:6f:c4:49:fb:f6:e8:7a:
         6c:c0:74:ab:96:ba:38:16:ee:92:8f:79:7f:e4:58:83:7f:2e:
         63:d2:df:e6:0f:76:62:58:37:8d:6a:65:4c:78:62:0a:62:01:
         db:99:2e:61:d0:c3:be:23:ec:63:ea:0e:2c:ce:c2:d3:d9:45:
         6e:c4:67:0e:ec:1e:fe:62:ff:9b:a7:a9:92:47:ee:6b:de:12:
         91:a9:54:84:90:2e:d6:a9:f6:5f:1a:5d:b5:19:d6:69:91:d4:
         79:fa:9d:67:ae:eb:1a:17:73:8e:13:b7:b7:e7:4d:4f:bd:1a:
         22:de:a0:8e:98:34:33:a0:aa:cb:8c:31:84:5b:1f:de:d8:b1:
         f2:aa:3a:65:6c:6a:37:72:b3:5d:04:e2:44:33:4f:52:69:40:
         d0:e3:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:17:20 2025 by rpki-client