Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/323830343a373566343a3a2f33322d3332203d3e20323731303830.roa
File:                     323830343a373566343a3a2f33322d3332203d3e20323731303830.roa (raw, json)
Hash identifier:          KKo6mEZg+6hrNQFSZNxSdJVJv8IrUPtF9TS32n705fs=
Subject key identifier:   29:32:65:34:3E:10:08:34:46:7E:21:ED:37:A2:FC:46:52:C1:C9:59
Certificate issuer:       /CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
Certificate serial:       058ED9361C3F0022478829E6E0DB1877805F28B5
Authority key identifier: 98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/323830343a373566343a3a2f33322d3332203d3e20323731303830.roa
Signing time:             Sat 01 Feb 2025 19:55:40 +0000
ROA not before:           Sat 01 Feb 2025 19:50:40 +0000
ROA not after:            Sat 31 Jan 2026 19:55:40 +0000
asID:                     271080
IP address blocks:        2804:75f4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl
                          rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 14:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8e:d9:36:1c:3f:00:22:47:88:29:e6:e0:db:18:77:80:5f:28:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4
        Validity
            Not Before: Feb  1 19:50:40 2025 GMT
            Not After : Jan 31 19:55:40 2026 GMT
        Subject: CN=293265343E100834467E21ED37A2FC4652C1C959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:eb:9c:8c:fd:f3:44:c2:d7:fc:e9:3a:05:
                    8e:51:21:ff:38:91:1a:be:b1:4e:b5:c9:28:3b:9b:
                    6d:d9:08:1e:70:ac:31:27:cc:75:ff:0f:21:01:08:
                    7b:56:b1:b4:ae:88:40:42:9f:e3:06:77:63:d6:63:
                    03:e3:06:80:f3:21:f4:ae:7d:32:bc:3e:97:96:d2:
                    2a:b1:94:24:0d:6e:0e:e7:2b:18:44:54:49:23:e3:
                    94:fc:3e:24:ef:22:4d:ed:75:0f:98:73:9d:f8:08:
                    3e:b3:e9:4f:35:e7:18:b7:f5:74:e2:0f:5d:28:91:
                    a6:08:07:66:73:43:3c:0f:dc:af:3b:5e:2a:46:47:
                    26:67:1b:80:40:d7:7d:c6:96:24:aa:86:f0:da:c8:
                    0d:de:7d:3a:87:ab:f9:d7:65:fc:f4:ac:24:aa:eb:
                    d7:52:43:f1:41:9e:57:23:41:2f:72:3a:54:d3:0b:
                    d4:89:da:56:31:12:5f:ee:ca:fb:c2:ec:36:02:bd:
                    fe:9f:cb:a9:9b:4b:bc:34:b0:7e:cf:47:61:0d:ca:
                    a2:02:1a:4e:59:ab:c9:38:a6:ff:53:4d:f8:d7:f9:
                    51:09:0c:d4:f7:a6:98:4b:2c:3d:10:39:c6:11:10:
                    3e:0b:b6:72:c2:58:b3:39:34:4d:c8:c7:7e:de:d8:
                    b4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:65:34:3E:10:08:34:46:7E:21:ED:37:A2:FC:46:52:C1:C9:59
            X509v3 Authority Key Identifier:
                keyid:98:07:BC:62:DD:9B:43:B5:80:5D:89:19:B8:62:6F:3A:8E:D2:F8:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9807BC62DD9B43B5805D8919B8626F3A8ED2F8D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkQk2z4bsF5sYJzb91zB65E8tVsHQAQughZwM24Mb5gQ/1/323830343a373566343a3a2f33322d3332203d3e20323731303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:75f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:0d:11:c8:42:f0:4e:30:6a:87:1e:fb:6c:9b:b1:e4:46:
         23:91:86:2b:8c:dc:51:3c:01:82:de:fa:41:e8:71:69:32:4d:
         1e:fa:d0:3a:a9:28:44:8c:03:65:8f:ea:54:78:de:20:ea:bb:
         ac:69:f3:3b:46:3a:5f:28:cf:39:3a:50:9d:fb:6c:bb:4d:3d:
         fa:33:99:6c:d2:6f:91:7c:1f:3d:f3:62:1f:07:ec:35:85:08:
         f0:77:53:85:7f:2f:0b:a8:77:f9:3a:c2:b1:9d:b2:0f:a1:d9:
         c1:d8:11:64:12:35:0b:7e:e4:5b:9b:f0:a2:57:cc:42:4f:f9:
         3d:38:de:13:f4:f7:3e:b9:59:49:5c:4b:1d:93:c8:ae:78:fa:
         f5:fa:fb:0f:b2:68:ed:5c:32:82:92:57:61:f8:a4:2b:b4:3b:
         7d:ef:d2:f5:0a:bf:f5:c5:2a:6b:2a:43:a4:6d:68:f8:33:86:
         0c:96:f8:20:65:55:31:95:e8:97:0d:3a:0c:01:45:1f:ab:16:
         1a:37:af:ba:43:1c:8c:c1:e2:26:14:50:fc:e3:3e:08:01:f2:
         18:7f:0c:c5:44:84:94:4c:63:d8:9f:8c:d3:32:cc:4d:16:8d:
         bf:8a:ac:af:f1:0e:3d:b1:03:20:cb:87:45:07:48:68:ad:66:
         85:ad:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:47 2025 by rpki-client