Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          XM8wPEwxcpjUxGw1q3SjHt1fQDUs7Bs05p93zcAbtwk=
Subject key identifier:   94:E9:63:DE:B5:00:B9:C3:65:54:EA:92:2E:70:F4:0A:32:A4:B3:CD
Certificate issuer:       /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial:       4F737FCE0337FE58C06E0335B2BE67635EFDC4DF
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 28 Jan 2025 18:18:51 +0000
ROA not before:           Tue 28 Jan 2025 18:13:51 +0000
ROA not after:            Tue 27 Jan 2026 18:18:51 +0000
asID:                     270440
IP address blocks:        2804:6c04:c000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:7f:ce:03:37:fe:58:c0:6e:03:35:b2:be:67:63:5e:fd:c4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
        Validity
            Not Before: Jan 28 18:13:51 2025 GMT
            Not After : Jan 27 18:18:51 2026 GMT
        Subject: CN=94E963DEB500B9C36554EA922E70F40A32A4B3CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:66:5d:c9:f1:9d:db:85:ad:55:20:53:0b:33:
                    94:de:de:af:40:03:43:f7:a7:96:95:f4:36:10:e7:
                    5f:07:6a:5e:c9:09:f7:53:9a:c7:a4:4d:aa:8c:40:
                    6a:ff:06:92:da:4d:11:f5:b1:fb:bc:d6:ab:a6:c9:
                    14:45:71:0a:9f:d4:4e:6d:06:0a:d0:0e:7b:7f:67:
                    75:51:35:e8:fb:07:ba:71:69:9c:ce:f6:6a:33:5c:
                    8a:22:e2:6c:9d:10:ac:99:0b:bb:e1:2e:ab:b2:b5:
                    47:30:67:ca:bf:9b:83:db:2a:ea:ea:75:4a:bb:21:
                    57:b3:df:15:31:f2:61:81:79:4d:61:fc:76:6c:51:
                    7b:81:c0:2c:db:35:7c:82:b2:e4:00:fb:a0:22:d7:
                    92:39:07:1b:ea:d7:26:e1:2a:b9:a3:5b:ea:d1:32:
                    b7:53:60:b6:a3:2c:3b:ba:a4:d0:33:2b:72:62:04:
                    c5:58:e4:c8:2a:84:aa:3e:e7:4a:ad:a0:52:3f:e0:
                    fa:d6:f2:68:ce:e8:56:76:a0:5d:51:0f:2d:6b:ef:
                    e9:4b:39:7f:ae:0a:26:b4:47:7d:96:f7:a1:75:f8:
                    b2:2f:f0:21:10:9b:b4:9d:e6:6a:03:34:17:6d:e9:
                    58:51:4d:df:36:b3:16:dc:e9:86:a3:5a:2e:d5:84:
                    72:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:63:DE:B5:00:B9:C3:65:54:EA:92:2E:70:F4:0A:32:A4:B3:CD
            X509v3 Authority Key Identifier:
                keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a633030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:c000::/37

    Signature Algorithm: sha256WithRSAEncryption
         12:48:c7:29:38:2c:ba:ad:4e:9b:7b:55:f3:43:ba:5b:d5:07:
         b6:02:c6:26:1c:e6:2f:23:ef:75:e6:27:d7:32:fe:66:e6:a5:
         e9:68:93:fe:1f:b2:57:c3:ed:43:94:6c:8a:40:c3:05:35:14:
         48:85:64:c9:64:b5:7e:55:79:5d:a7:1a:7b:1f:5e:fb:53:2b:
         7a:d0:88:23:40:18:82:56:31:4d:45:ab:f9:42:3d:64:5d:3e:
         c5:1b:5a:df:d5:1b:9e:4b:c4:1b:d8:7b:e6:49:5c:b1:52:98:
         42:4f:cb:e7:aa:2e:65:8e:5a:5b:34:65:ac:aa:60:a7:c8:c0:
         18:ad:fe:3c:28:52:5a:fa:0c:5d:2e:9f:c0:1f:6c:89:3f:8b:
         23:9e:ed:72:d5:ae:9d:db:1d:41:7c:92:1a:7e:1e:fa:fb:19:
         51:9e:b2:89:a1:06:38:64:dc:aa:ea:d2:bd:a5:1c:9c:12:d0:
         b5:58:89:e0:e0:5f:6a:e7:f5:ab:63:37:2c:a8:1e:cb:73:9b:
         36:1b:b1:86:8a:66:4f:4c:2f:8e:7d:6c:ab:4e:05:c4:f3:69:
         5d:84:c8:7c:a0:4b:39:66:7e:52:c3:28:25:16:fe:90:4c:0a:
         20:bb:c5:21:0d:03:52:a3:b0:a0:e3:44:26:98:71:4f:12:50:
         eb:74:d0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:22 2025 by rpki-client