Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/323830343a353732343a3a2f33322d3336203d3e20323638303437.roa
File:                     323830343a353732343a3a2f33322d3336203d3e20323638303437.roa (raw, json)
Hash identifier:          bS0EDSrlbAZcWG1rvjA0+JsqNWCcI809tyBR46XAMpE=
Subject key identifier:   0E:9F:2F:20:6F:50:72:B2:11:C6:AF:DB:30:0A:24:04:CD:E0:14:7F
Certificate issuer:       /CN=B8A101F9ED0E552416B8664F419072D7A54C9F15
Certificate serial:       35328668682CBD189BD27F6709C2323B4482D9F2
Authority key identifier: B8:A1:01:F9:ED:0E:55:24:16:B8:66:4F:41:90:72:D7:A5:4C:9F:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8A101F9ED0E552416B8664F419072D7A54C9F15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/323830343a353732343a3a2f33322d3336203d3e20323638303437.roa
Signing time:             Fri 07 Mar 2025 05:03:02 +0000
ROA not before:           Fri 07 Mar 2025 04:58:02 +0000
ROA not after:            Fri 06 Mar 2026 05:03:02 +0000
asID:                     268047
IP address blocks:        2804:5724::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/B8A101F9ED0E552416B8664F419072D7A54C9F15.crl
                          rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/B8A101F9ED0E552416B8664F419072D7A54C9F15.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8A101F9ED0E552416B8664F419072D7A54C9F15.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:18:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:32:86:68:68:2c:bd:18:9b:d2:7f:67:09:c2:32:3b:44:82:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8A101F9ED0E552416B8664F419072D7A54C9F15
        Validity
            Not Before: Mar  7 04:58:02 2025 GMT
            Not After : Mar  6 05:03:02 2026 GMT
        Subject: CN=0E9F2F206F5072B211C6AFDB300A2404CDE0147F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:fa:a2:22:cf:74:4c:d0:38:b8:92:a4:59:
                    7b:3c:9c:b4:36:f5:12:59:08:88:56:84:b7:da:34:
                    d3:8f:0d:50:19:2f:a5:90:a6:a7:7a:d7:90:de:0d:
                    7f:5f:45:84:15:7e:0a:fa:39:02:a3:cc:a2:cd:45:
                    ed:ca:11:54:01:9a:6f:93:8f:51:79:b6:9d:88:ac:
                    58:03:52:01:88:02:60:8b:02:37:1c:71:73:4d:f8:
                    02:5b:fd:97:4e:56:2f:9a:98:f5:63:24:81:30:bf:
                    70:9e:4d:83:4d:9d:09:44:02:40:26:62:06:c7:59:
                    e9:42:1d:4e:cd:9e:5a:1d:60:06:d7:4f:36:d3:53:
                    be:b0:31:01:c7:5d:23:86:70:5b:a1:77:07:07:37:
                    48:77:16:fd:5c:5f:82:2e:00:f3:9d:80:b8:e6:aa:
                    73:2d:c9:bf:0b:21:67:4e:b7:be:46:2c:a5:3f:0e:
                    d9:8f:e3:69:b2:5f:55:ee:51:4b:3b:a7:73:66:f8:
                    75:13:b5:ae:c6:35:58:02:b7:5e:d0:e9:fe:39:a1:
                    1e:27:a6:aa:48:2c:de:db:70:c7:bd:d3:3e:0d:c2:
                    1c:c9:c1:5f:84:f1:2c:29:dd:59:1e:80:6d:da:a3:
                    5c:e0:0b:a0:32:ae:b1:1d:27:51:37:02:00:e6:de:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9F:2F:20:6F:50:72:B2:11:C6:AF:DB:30:0A:24:04:CD:E0:14:7F
            X509v3 Authority Key Identifier:
                keyid:B8:A1:01:F9:ED:0E:55:24:16:B8:66:4F:41:90:72:D7:A5:4C:9F:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/B8A101F9ED0E552416B8664F419072D7A54C9F15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8A101F9ED0E552416B8664F419072D7A54C9F15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiYTvMdkdPNFSx2W6hWVCmP6EvuqQnkCW4hgzHRSQBLC/0/323830343a353732343a3a2f33322d3336203d3e20323638303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5724::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:98:54:dd:f9:ed:f6:9e:9b:35:88:a9:3d:5e:ed:44:46:ac:
         be:22:f8:8e:47:f1:98:50:db:16:0b:45:e2:aa:4b:df:11:40:
         95:50:0e:6a:f8:ca:96:9c:a0:b6:ca:73:c3:53:61:01:78:ee:
         f7:8a:c6:95:26:87:0d:5f:b9:a1:af:58:a9:fa:d3:48:c3:16:
         71:ff:fa:65:55:ec:25:e6:c6:71:4f:f6:c0:9e:52:46:a1:44:
         55:b6:0f:6e:1b:f4:c3:7a:d2:f0:7c:f0:42:71:01:9a:c7:08:
         9c:33:2a:6a:3d:aa:c7:a8:a7:8f:4f:1e:53:39:96:34:02:1e:
         22:89:7c:6f:a9:80:08:94:9f:32:ce:a4:bd:6d:67:14:15:b1:
         cc:0c:16:a2:a7:83:39:ad:20:6e:81:01:47:80:4e:fe:21:f2:
         9a:3e:c0:7a:cd:90:2e:f7:75:85:e0:2d:01:5d:6f:5f:1e:c6:
         59:61:08:ec:32:18:8c:7e:09:d4:c0:c9:b7:ec:e0:c6:48:31:
         2a:4c:a5:a7:bc:1a:52:50:25:19:57:04:e3:08:c8:3b:fb:24:
         de:34:42:e9:70:00:31:3e:76:4e:fe:18:64:2d:79:83:1c:63:
         89:6e:51:cd:8f:74:b3:73:eb:0e:5f:56:8b:5e:5c:1f:14:97:
         4a:1e:6a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:28:15 2025 by rpki-client