Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/323830343a333230303a3a2f33322d3334203d3e20323635303530.roa
File:                     323830343a333230303a3a2f33322d3334203d3e20323635303530.roa (raw, json)
Hash identifier:          q2IwcgnrbosIAf2+IlnmGTqVlNma5YNsNpHbfRWkML4=
Subject key identifier:   6D:8E:C4:51:BC:60:97:B5:07:4D:B6:13:13:73:1A:D2:C3:FF:9F:05
Certificate issuer:       /CN=CF15C8D7D516810DCF3125064D7826895FDF86CE
Certificate serial:       3A485FE2F25D49FC441D08AC39510C1970AEF0F4
Authority key identifier: CF:15:C8:D7:D5:16:81:0D:CF:31:25:06:4D:78:26:89:5F:DF:86:CE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/323830343a333230303a3a2f33322d3334203d3e20323635303530.roa
Signing time:             Thu 06 Mar 2025 10:25:05 +0000
ROA not before:           Thu 06 Mar 2025 10:20:05 +0000
ROA not after:            Thu 05 Mar 2026 10:25:05 +0000
asID:                     265050
IP address blocks:        2804:3200::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.crl
                          rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 21:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:48:5f:e2:f2:5d:49:fc:44:1d:08:ac:39:51:0c:19:70:ae:f0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF15C8D7D516810DCF3125064D7826895FDF86CE
        Validity
            Not Before: Mar  6 10:20:05 2025 GMT
            Not After : Mar  5 10:25:05 2026 GMT
        Subject: CN=6D8EC451BC6097B5074DB61313731AD2C3FF9F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:74:2f:4f:69:f7:6f:87:7a:4c:26:32:ed:
                    37:b4:ce:c5:fd:27:72:7c:f4:f7:1d:64:03:f8:b1:
                    c0:ff:24:b8:d3:19:88:a1:b4:92:d5:9f:1a:4e:b8:
                    cf:57:04:4c:ca:a0:eb:44:3d:f5:39:1b:ab:36:29:
                    7d:0b:ef:ea:4f:45:83:57:8d:0e:54:58:66:d2:61:
                    81:b7:96:7e:78:4a:7e:82:d3:5a:f1:a5:5c:a0:05:
                    0a:f4:df:29:42:95:b8:eb:cf:11:bc:31:1e:43:f9:
                    04:51:13:ba:26:1c:61:7b:fe:c5:a2:0a:7c:bb:69:
                    c6:e8:5e:77:30:85:41:fd:84:8b:4f:ca:6f:94:0f:
                    1d:1b:fb:f9:9f:a1:22:03:3b:03:60:84:2b:57:06:
                    0a:b0:2c:34:6c:e4:6e:9b:30:8d:38:6a:14:10:98:
                    64:1b:b3:93:27:7d:83:47:b3:3b:82:ff:e9:56:de:
                    ad:ee:cd:5d:1b:ad:27:0a:9f:17:6e:cf:fa:91:8e:
                    96:ff:34:0c:db:d4:94:04:35:17:69:06:de:61:0b:
                    1a:54:ab:7a:83:4a:bf:d3:09:14:f3:fd:1f:fa:4c:
                    df:18:d5:58:0a:ad:40:c8:20:51:32:c3:70:bf:ac:
                    2d:de:fb:1a:f0:f1:44:1d:76:31:a2:d0:8b:5d:ad:
                    40:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8E:C4:51:BC:60:97:B5:07:4D:B6:13:13:73:1A:D2:C3:FF:9F:05
            X509v3 Authority Key Identifier:
                keyid:CF:15:C8:D7:D5:16:81:0D:CF:31:25:06:4D:78:26:89:5F:DF:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/CF15C8D7D516810DCF3125064D7826895FDF86CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF15C8D7D516810DCF3125064D7826895FDF86CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gm9nqW21EVsfybUHSobWpLLCEG1K4PKSzJwQF3pdrut7/2/323830343a333230303a3a2f33322d3334203d3e20323635303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         e5:cf:28:6a:e6:aa:3c:d0:89:a9:56:93:bd:c9:02:1f:f4:04:
         8c:1d:5f:1f:57:4d:17:eb:75:90:4a:e5:51:43:65:b6:d2:e8:
         20:c1:b9:d8:e1:49:47:89:ca:9c:f5:f5:97:f6:b2:91:0a:66:
         ae:50:9a:8c:0b:f9:f5:60:fc:0e:69:1e:2d:a9:7d:16:af:b1:
         61:c3:17:4c:97:f6:85:5b:3a:93:06:d2:ca:8c:c3:4e:4c:b0:
         32:e2:29:4d:3c:0f:fd:fe:27:c0:0b:47:e3:df:3d:3d:33:7f:
         e7:9a:0a:75:87:62:53:89:7d:38:c7:18:99:ec:a5:91:7f:84:
         84:e6:de:95:a0:51:d1:d4:4a:20:c9:9e:68:c5:6d:24:96:3b:
         de:31:87:3f:f2:88:fc:74:1c:43:7b:77:d5:38:e6:31:a0:1a:
         4d:6c:a3:56:a7:03:db:29:0d:ef:dc:08:5f:2b:b3:37:72:e4:
         d9:0b:85:44:56:63:ae:46:72:4c:fe:30:82:50:ba:4c:56:9a:
         a1:2a:da:13:fd:58:ef:6a:5e:69:fd:49:ce:e1:a2:57:8c:0e:
         a0:27:02:d1:e3:78:42:34:87:8c:3f:16:11:f1:75:db:03:84:
         8e:39:95:68:68:1a:df:a8:f7:d2:b3:3c:60:9e:42:7f:1c:a3:
         39:26:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:23:53 2025 by rpki-client