Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3438203d3e20323639323139.roa
File:                     323830343a363133303a3a2f33322d3438203d3e20323639323139.roa (raw, json)
Hash identifier:          zPxJinKwvct/AZAttrnT/wxghOK4T5pD968fftU/tVA=
Subject key identifier:   CD:3E:17:45:3C:85:F7:69:81:92:BE:05:03:3D:49:20:0C:8A:8A:26
Certificate issuer:       /CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
Certificate serial:       1876D912C1C2A88D046C7A3608F4B3574D657B6E
Authority key identifier: 97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3438203d3e20323639323139.roa
Signing time:             Tue 25 Mar 2025 18:33:44 +0000
ROA not before:           Tue 25 Mar 2025 18:28:44 +0000
ROA not after:            Tue 24 Mar 2026 18:33:44 +0000
asID:                     269219
IP address blocks:        2804:6130::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl
                          rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:46:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:76:d9:12:c1:c2:a8:8d:04:6c:7a:36:08:f4:b3:57:4d:65:7b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9
        Validity
            Not Before: Mar 25 18:28:44 2025 GMT
            Not After : Mar 24 18:33:44 2026 GMT
        Subject: CN=CD3E17453C85F7698192BE05033D49200C8A8A26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c1:c6:56:84:3c:84:2e:39:07:38:ba:72:f9:
                    8f:89:d2:5a:6a:5b:7f:c6:04:c8:21:e5:b5:fb:e7:
                    e3:db:d3:e8:e0:8b:6c:29:80:a7:6b:d1:b1:c3:a0:
                    11:fd:73:a4:07:62:0b:87:d9:51:1d:1d:97:42:9c:
                    f2:51:85:7e:c0:c2:41:74:90:07:b1:0b:01:21:22:
                    7a:58:12:b3:82:ae:94:8c:7b:70:c5:38:13:40:c4:
                    9e:bd:6c:35:9e:43:a7:52:12:54:0a:87:d1:ff:89:
                    e1:76:7a:3f:b9:55:66:4c:c5:7a:e0:ac:85:9c:e5:
                    c0:ab:61:7f:68:01:7c:d0:df:0c:03:c9:d1:57:4e:
                    96:3d:03:10:95:0d:52:27:90:0c:b7:bf:c8:58:8a:
                    ad:74:3d:5a:a3:12:bb:20:27:c5:aa:6f:76:10:93:
                    36:5c:d6:f3:b9:e2:21:89:4b:18:20:f7:96:12:a9:
                    6d:06:3a:3e:5c:a7:9b:a7:00:d7:4e:33:58:89:0e:
                    13:a1:15:41:c0:51:f4:79:3e:15:d9:ac:65:4d:a5:
                    0c:86:6c:54:ee:85:57:74:a4:2c:0c:c1:e4:34:af:
                    e7:81:76:81:52:67:2c:ca:15:96:cc:26:6b:4e:65:
                    a1:a9:a8:72:49:bc:b8:b6:67:65:18:6d:ef:68:4a:
                    ba:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3E:17:45:3C:85:F7:69:81:92:BE:05:03:3D:49:20:0C:8A:8A:26
            X509v3 Authority Key Identifier:
                keyid:97:70:D7:44:DA:56:F9:29:5A:9C:9B:2F:12:AC:CB:9D:CA:B6:7C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9770D744DA56F9295A9C9B2F12ACCB9DCAB67CE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GhWaNHQ2vn85c7jLoDTvgcMkiCx5bptBJB2wbRHE6z6Z/1/323830343a363133303a3a2f33322d3438203d3e20323639323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6130::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:80:38:09:d4:07:a9:66:d2:72:bd:71:84:dc:93:ca:8c:fe:
         8c:a6:bf:4d:1b:13:32:f3:03:86:ca:55:9c:24:80:cf:9a:16:
         99:02:c0:e9:fb:69:1e:22:a7:c6:43:d5:9f:05:3e:12:59:41:
         80:d5:a0:96:a8:eb:1b:2b:39:4d:6b:45:bd:03:47:5f:f4:5e:
         86:ce:f1:0d:78:c2:17:c4:f3:be:b8:cd:0e:a2:4f:47:47:9d:
         72:e0:4e:10:37:b1:67:af:8d:73:48:0d:aa:40:80:f4:2b:2e:
         80:65:99:1d:e6:1e:90:da:62:66:81:7a:9f:2e:4d:8b:59:c5:
         9a:f6:64:c7:fe:08:9b:f7:4b:0f:a6:4d:66:9b:a5:61:ef:63:
         97:2a:6f:2f:43:a3:f2:71:19:0a:90:f0:8a:19:c9:80:03:62:
         1d:be:54:98:14:c8:13:08:49:67:d9:ba:dd:10:8f:7d:a3:e0:
         30:72:28:de:62:54:56:5f:96:2e:c4:02:7d:06:16:f6:a1:d4:
         cc:36:af:73:24:dc:9f:e7:ea:98:7e:ae:4c:d5:ac:f4:20:ae:
         6a:24:f6:a6:82:9e:16:85:9f:88:a9:fc:4a:88:5a:0a:d1:63:
         65:e9:af:b8:fa:85:27:3e:7e:b4:33:9e:25:b0:46:f1:fd:bb:
         b6:3c:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:22:21 2025 by rpki-client