Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a643030303a3a2f33362d3336203d3e20323632353835.roa
File:                     323830343a386637303a643030303a3a2f33362d3336203d3e20323632353835.roa (raw, json)
Hash identifier:          EAKWQa+wuJ19uzO99y7FDXHmP7shCQRuyyH5VHfWiqc=
Subject key identifier:   2C:7D:84:F3:5D:2E:2B:29:6A:81:DD:A9:B6:4E:C2:B3:22:E2:BB:16
Certificate issuer:       /CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
Certificate serial:       1B564106A3CA9AFC8CC3519B02EF4CC382D8B4A2
Authority key identifier: 5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a643030303a3a2f33362d3336203d3e20323632353835.roa
Signing time:             Thu 14 Nov 2024 15:09:23 +0000
ROA not before:           Thu 14 Nov 2024 15:04:23 +0000
ROA not after:            Thu 13 Nov 2025 15:09:23 +0000
asID:                     262585
IP address blocks:        2804:8f70:d000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl
                          rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 21:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:56:41:06:a3:ca:9a:fc:8c:c3:51:9b:02:ef:4c:c3:82:d8:b4:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AC853AE3F9CB62CC01BAF4379BF8072926B07A7
        Validity
            Not Before: Nov 14 15:04:23 2024 GMT
            Not After : Nov 13 15:09:23 2025 GMT
        Subject: CN=2C7D84F35D2E2B296A81DDA9B64EC2B322E2BB16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cc:57:3b:f5:71:db:c2:a6:c6:28:2d:f9:e4:
                    b1:41:9e:1e:fe:c0:6a:04:bd:ad:51:9c:87:3a:c9:
                    28:02:ce:dd:2a:3c:d1:b0:9f:46:d5:14:52:cd:e5:
                    8f:96:72:ec:95:0e:67:54:bd:f0:c0:d2:95:c4:c6:
                    4f:81:78:b2:60:45:d7:f3:33:63:99:e7:c0:49:ce:
                    58:01:34:29:ad:5d:a9:3f:45:08:06:b3:b0:b6:c3:
                    24:26:d3:09:74:1e:68:48:e2:fb:09:8f:97:18:dd:
                    a6:07:24:71:fe:e2:56:86:cc:1e:21:89:2d:42:5f:
                    81:2f:2f:90:4d:f6:a1:2a:cb:15:97:d8:ca:89:03:
                    88:97:83:45:0c:cd:22:f6:3f:34:56:7b:86:ce:d5:
                    02:a0:f1:11:74:0a:6f:d3:b7:b8:8d:53:b7:95:5e:
                    f0:1d:13:95:b0:79:f3:0b:0d:08:da:db:57:24:6b:
                    ff:32:2c:74:7d:02:1b:f6:f2:be:4e:f2:0d:ee:b2:
                    8c:ed:df:81:7c:8b:ef:21:ec:ad:77:05:06:4b:f3:
                    9b:b6:41:9d:98:2f:27:9d:ec:bf:01:8c:3b:30:29:
                    98:5b:8a:75:c6:fd:5e:02:98:38:38:b2:0d:cc:d4:
                    16:6d:4e:8a:0c:61:8e:0f:c2:49:ac:a4:95:70:3b:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:84:F3:5D:2E:2B:29:6A:81:DD:A9:B6:4E:C2:B3:22:E2:BB:16
            X509v3 Authority Key Identifier:
                keyid:5A:C8:53:AE:3F:9C:B6:2C:C0:1B:AF:43:79:BF:80:72:92:6B:07:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AC853AE3F9CB62CC01BAF4379BF8072926B07A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/323830343a386637303a643030303a3a2f33362d3336203d3e20323632353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8f70:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:de:3f:a8:b9:2e:ae:bd:c6:3c:cd:ff:b2:01:3e:81:e0:c2:
         7b:19:20:c6:96:17:77:9e:96:48:d0:f1:34:4f:66:85:1f:e4:
         c0:dc:9c:93:26:95:e7:81:0d:b8:b1:19:b8:03:64:0a:c5:cf:
         78:43:27:c0:68:dc:6e:c2:3b:91:f1:2c:8b:44:38:42:bc:b0:
         b4:0e:fb:30:26:c4:26:f7:54:56:2e:42:ef:26:c1:f8:98:7d:
         45:1d:60:9b:c8:b2:5c:22:0c:c1:0d:47:e8:26:aa:9a:67:d9:
         b6:c7:51:b5:54:fb:7e:50:ba:85:ac:60:c5:c3:ac:45:fb:37:
         15:11:94:eb:52:b5:1a:ea:3a:d5:fc:0e:55:ae:ba:7a:48:41:
         3d:29:94:83:a3:e9:af:f1:61:e2:84:b4:c5:6c:47:3a:f4:8d:
         f0:57:73:06:05:43:80:d9:72:7d:64:32:fc:a0:18:88:09:cb:
         ee:4e:87:ac:2f:b1:61:ec:4f:f3:bc:9c:03:c3:15:b7:5d:19:
         a0:40:49:ac:4b:b0:e2:20:1d:ff:6d:bd:6f:bc:60:1f:af:f9:
         6c:5f:2f:83:ee:ef:ec:e9:ee:81:7a:b4:5d:7a:c0:f4:6b:36:
         9c:1f:8e:a6:c6:04:89:ed:06:a9:98:6b:7b:41:1a:cb:61:f7:
         ab:70:93:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:04 2025 by rpki-client