Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa
File:                     323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa (raw, json)
Hash identifier:          ULp1+CFbdFs72QwNNFEQ9iS0Xs3pchI0YiwFB5sHTTc=
Subject key identifier:   AC:46:AE:14:21:D9:46:31:32:28:8D:69:E7:E8:4B:45:52:56:68:13
Certificate issuer:       /CN=972E69522EA7E06655376241FB13ED39AF30B19D
Certificate serial:       1C13804724E0880A64378149BB7E0FA6B34304A8
Authority key identifier: 97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa
Signing time:             Tue 28 Jan 2025 18:18:54 +0000
ROA not before:           Tue 28 Jan 2025 18:13:54 +0000
ROA not after:            Tue 27 Jan 2026 18:18:54 +0000
asID:                     270440
IP address blocks:        2804:6c04:d000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl
                          rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 14:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:13:80:47:24:e0:88:0a:64:37:81:49:bb:7e:0f:a6:b3:43:04:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=972E69522EA7E06655376241FB13ED39AF30B19D
        Validity
            Not Before: Jan 28 18:13:54 2025 GMT
            Not After : Jan 27 18:18:54 2026 GMT
        Subject: CN=AC46AE1421D9463132288D69E7E84B4552566813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:56:9f:78:68:11:f2:86:77:60:58:f0:4f:
                    10:b0:fd:6e:a5:86:1b:82:fa:81:bc:10:59:50:a4:
                    1a:91:38:55:cc:4f:d0:20:2c:bc:2b:90:0e:a4:97:
                    f8:c0:79:03:06:79:42:ae:d6:29:6a:27:c3:4a:fb:
                    3c:ea:30:29:d9:c7:9e:63:c3:dd:4d:4c:96:94:2e:
                    ee:90:f6:ea:99:c0:04:dc:94:42:e6:4f:ed:84:6d:
                    25:2b:c9:1b:8a:88:91:59:b2:52:d5:73:a1:12:2b:
                    e1:c1:3c:08:4c:10:55:e0:61:6a:9f:25:02:3f:db:
                    b8:8b:25:cf:60:1c:d5:12:e2:6b:fe:83:cb:8f:a9:
                    1f:56:29:2c:b7:35:cb:e8:8d:31:19:06:09:7f:65:
                    d4:5e:25:3b:df:8c:96:93:73:fa:02:75:6d:d7:56:
                    cc:f4:fd:f2:3b:69:0f:c5:59:f1:d6:7c:fa:4e:a4:
                    ca:9f:88:e5:99:8a:65:b4:62:7f:38:a6:51:4d:45:
                    11:14:80:f3:15:0a:e7:b4:dc:d4:a2:87:e8:57:b3:
                    40:f1:fe:c7:7d:88:d0:8e:be:c2:20:85:59:8c:60:
                    42:43:fa:2d:c0:2e:d3:7f:be:81:4a:65:00:ff:d0:
                    28:41:8f:5c:e5:d5:b9:5f:0b:11:64:2c:26:f3:03:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:46:AE:14:21:D9:46:31:32:28:8D:69:E7:E8:4B:45:52:56:68:13
            X509v3 Authority Key Identifier:
                keyid:97:2E:69:52:2E:A7:E0:66:55:37:62:41:FB:13:ED:39:AF:30:B1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/972E69522EA7E06655376241FB13ED39AF30B19D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/972E69522EA7E06655376241FB13ED39AF30B19D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgE4fWojNBXaimcLWVLRqv4j59hvgc9866PtoTPtGkJ2/0/323830343a366330343a643030303a3a2f33372d3337203d3e20323730343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c04:d000::/37

    Signature Algorithm: sha256WithRSAEncryption
         5e:14:18:bc:96:db:94:f0:47:df:e1:be:b5:92:b0:04:c6:fb:
         cb:7b:57:57:c5:ce:12:41:ee:74:1a:31:19:e8:82:0b:55:eb:
         8b:40:a1:d9:e4:f1:b5:a2:46:75:95:78:37:aa:d3:53:29:b1:
         07:61:19:a2:46:26:6a:e5:fb:ac:30:02:aa:8f:f2:f8:b0:6b:
         02:f8:ef:1b:ef:4a:2a:3b:5c:d6:4a:1a:63:e0:03:01:c5:90:
         de:8f:f5:ea:66:e4:12:ad:4c:1f:eb:da:3f:10:7d:a0:a5:5f:
         9c:ce:e0:e2:98:4d:9b:cb:d2:84:da:d6:72:a1:56:a3:a7:59:
         72:78:19:da:77:b9:a7:53:eb:e1:f3:d6:a2:a7:d6:e0:29:dd:
         72:6f:61:8a:ea:84:4d:64:5d:01:77:e7:3f:1d:ee:f9:9a:6c:
         b8:be:9e:57:5d:f8:10:17:8a:1f:a4:6e:20:ff:4a:95:b6:94:
         35:4d:2d:04:60:bb:fd:bc:00:63:91:7e:c0:9a:2f:71:88:8b:
         82:55:e6:37:45:fe:a7:be:6a:32:7b:7c:53:25:c2:8d:43:26:
         b6:c2:10:37:a7:41:0b:46:ca:f5:01:c4:c3:3e:62:2e:38:f5:
         69:b7:ae:f5:2d:71:d4:89:c2:e7:c2:05:aa:ff:42:ac:41:5d:
         a2:44:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:35:03 2025 by rpki-client