Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33332d3338203d3e20323639343633.roa
File:                     323830343a363530343a3a2f33332d3338203d3e20323639343633.roa (raw, json)
Hash identifier:          M7Ho3UeRjw7AHd0YxIw3yw1Nt6cF/gyEVDxQPIJvaYs=
Subject key identifier:   A2:87:59:64:1F:36:AD:EB:31:0B:28:08:20:31:7D:F0:F5:E9:D7:CC
Certificate issuer:       /CN=0BAA958EF789368FEFA40DA3630D88B921AC75F3
Certificate serial:       5D71E84EB11E6B71E6C8BCB270929A20777D2CA0
Authority key identifier: 0B:AA:95:8E:F7:89:36:8F:EF:A4:0D:A3:63:0D:88:B9:21:AC:75:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33332d3338203d3e20323639343633.roa
Signing time:             Wed 28 May 2025 20:38:57 +0000
ROA not before:           Wed 28 May 2025 20:33:57 +0000
ROA not after:            Wed 27 May 2026 20:38:57 +0000
asID:                     269463
IP address blocks:        2804:6504::/33 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.crl
                          rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 21:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:71:e8:4e:b1:1e:6b:71:e6:c8:bc:b2:70:92:9a:20:77:7d:2c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BAA958EF789368FEFA40DA3630D88B921AC75F3
        Validity
            Not Before: May 28 20:33:57 2025 GMT
            Not After : May 27 20:38:57 2026 GMT
        Subject: CN=A28759641F36ADEB310B280820317DF0F5E9D7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:15:8f:02:b5:4f:3b:96:7a:99:4c:b3:94:
                    38:65:39:a2:12:28:49:03:86:de:0d:21:78:95:ee:
                    c9:7d:c0:82:be:6d:41:36:c5:a1:54:18:ec:8d:f1:
                    99:a3:82:ed:48:c3:d1:db:ba:5c:df:2e:42:be:14:
                    da:8b:f3:d9:a8:5c:41:1e:9a:27:43:89:c1:7f:7a:
                    58:e9:12:bb:9c:d3:38:0c:55:a5:bd:ec:1e:0e:62:
                    a6:ee:43:0a:d0:a0:58:6e:af:7c:80:71:9b:7d:a8:
                    1a:39:55:34:24:a0:53:21:af:d8:82:46:ce:da:78:
                    40:64:9b:83:34:33:4c:e7:43:32:e5:33:34:49:95:
                    6a:0c:4a:0d:a8:dc:1b:19:50:92:4d:cc:1f:c9:9a:
                    86:ba:e8:c4:2c:c3:58:d1:a8:b0:2d:b7:00:1f:da:
                    e4:a9:a3:11:c8:03:07:ac:12:b6:48:3d:07:df:14:
                    67:3c:b7:2f:b8:de:27:9f:ce:d5:94:6a:bb:39:a6:
                    bb:a5:0f:27:07:70:c2:be:b0:5a:c2:82:28:d1:8b:
                    13:7e:d2:f1:b8:e1:3c:ab:e0:5d:df:79:e2:64:b7:
                    06:dc:70:9a:07:77:d7:0d:58:a8:12:b3:bf:88:41:
                    17:58:c7:49:51:03:53:00:39:f8:72:8e:24:b6:85:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:87:59:64:1F:36:AD:EB:31:0B:28:08:20:31:7D:F0:F5:E9:D7:CC
            X509v3 Authority Key Identifier:
                keyid:0B:AA:95:8E:F7:89:36:8F:EF:A4:0D:A3:63:0D:88:B9:21:AC:75:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/0BAA958EF789368FEFA40DA3630D88B921AC75F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0BAA958EF789368FEFA40DA3630D88B921AC75F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a3a2f33332d3338203d3e20323639343633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6504::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:6a:59:7f:ea:dd:85:c0:1c:df:84:5e:bc:18:4a:4a:c1:8f:
         1c:2e:c2:ea:ab:f7:26:7b:a8:72:89:72:e0:33:62:a9:a2:db:
         62:64:49:41:0d:89:0f:ba:95:b0:66:ca:9d:ec:63:5f:78:78:
         fe:d1:04:fd:38:bb:44:3d:e7:b6:15:2f:3d:7d:e0:55:98:84:
         48:36:41:43:ca:a2:ec:e3:99:f8:cd:3c:46:a9:9f:0b:55:11:
         32:e5:0f:28:b1:f3:1e:e0:ec:5e:4d:35:92:b1:bd:ec:95:e8:
         c2:06:3d:23:f4:25:49:6f:60:ee:aa:36:4a:95:fe:f0:b3:50:
         3a:e9:71:c2:31:27:30:ae:c3:09:fc:52:f8:9e:ee:9a:57:b6:
         8d:fd:ab:47:c0:6e:9e:8d:38:1d:5a:61:bc:6e:14:67:48:2b:
         2f:b3:d2:81:a0:4c:c1:16:19:6c:f3:42:9c:03:da:18:a3:81:
         50:79:4b:8e:ce:77:df:9f:bb:1d:4b:03:dd:53:a1:7f:7b:68:
         4a:ea:b6:f2:dd:d5:f0:0b:8e:8d:34:a5:11:3f:18:63:ac:1f:
         aa:d1:f4:dc:69:ed:39:72:ff:e6:0d:60:49:de:d6:8d:79:4e:
         d2:b6:64:e1:91:d0:a4:eb:5e:e7:8f:5a:f8:36:07:cd:8d:85:
         7e:a8:50:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:59:34 2025 by rpki-client