Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/323830343a363237383a3a2f33322d3438203d3e20323639323939.roa
File:                     323830343a363237383a3a2f33322d3438203d3e20323639323939.roa (raw, json)
Hash identifier:          Dl3UWsJy1OCRL3vK/AENABfwPZZBPZECBL3GZUV041U=
Subject key identifier:   1F:F4:08:37:B0:80:AA:0C:A8:36:AA:04:F9:5B:A6:4B:F3:F7:80:1B
Certificate issuer:       /CN=E9559354384683BF395C07B365A088C5F97E64BB
Certificate serial:       3642344835FBEB075FF3B0C5D4DFC9F86F4E36ED
Authority key identifier: E9:55:93:54:38:46:83:BF:39:5C:07:B3:65:A0:88:C5:F9:7E:64:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/323830343a363237383a3a2f33322d3438203d3e20323639323939.roa
Signing time:             Thu 06 Mar 2025 05:45:42 +0000
ROA not before:           Thu 06 Mar 2025 05:40:42 +0000
ROA not after:            Thu 05 Mar 2026 05:45:42 +0000
asID:                     269299
IP address blocks:        2804:6278::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.crl
                          rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 19:19:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:42:34:48:35:fb:eb:07:5f:f3:b0:c5:d4:df:c9:f8:6f:4e:36:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9559354384683BF395C07B365A088C5F97E64BB
        Validity
            Not Before: Mar  6 05:40:42 2025 GMT
            Not After : Mar  5 05:45:42 2026 GMT
        Subject: CN=1FF40837B080AA0CA836AA04F95BA64BF3F7801B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cb:da:de:84:b4:52:79:96:4c:6e:25:11:1d:
                    fc:80:6c:fb:1e:ea:e9:da:0d:c3:d1:29:1c:e5:51:
                    10:f2:63:dd:7d:3f:5e:3f:46:20:8a:b8:83:48:5d:
                    5a:fa:58:66:b0:d9:30:63:5c:6e:8d:d7:53:05:05:
                    c6:db:5b:de:f2:e0:ea:1f:fb:77:7b:07:d5:ab:02:
                    7d:b0:a6:93:ab:8f:66:c0:59:b0:ac:9f:fc:6a:a8:
                    18:59:09:33:7c:e6:12:25:03:2f:46:3c:c1:31:33:
                    d4:6b:4c:05:46:76:50:1c:33:cf:1c:62:1a:a7:1a:
                    85:d5:f7:f4:5c:ba:b6:bc:64:a3:9a:e2:d7:f6:3d:
                    c4:79:fb:a7:16:7e:a8:01:bc:48:7d:08:0f:d1:0c:
                    f3:ac:96:89:be:b4:3d:1a:d9:da:7f:5d:41:f4:e8:
                    37:67:71:e5:56:60:a9:82:ba:46:c1:12:e0:6d:e4:
                    67:f7:4b:d6:51:fa:29:c2:8d:4d:93:5d:63:df:db:
                    8d:e4:ce:0f:a7:c1:2a:d9:17:c4:12:f1:4e:2c:80:
                    58:91:a8:bc:6c:01:a0:84:d9:fb:e7:0a:b3:92:49:
                    f4:44:e6:f0:03:bc:b2:8c:98:8b:9f:65:3a:46:c2:
                    59:33:35:2f:22:4d:67:47:c3:8c:ac:ae:7b:33:b8:
                    51:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F4:08:37:B0:80:AA:0C:A8:36:AA:04:F9:5B:A6:4B:F3:F7:80:1B
            X509v3 Authority Key Identifier:
                keyid:E9:55:93:54:38:46:83:BF:39:5C:07:B3:65:A0:88:C5:F9:7E:64:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/E9559354384683BF395C07B365A088C5F97E64BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9559354384683BF395C07B365A088C5F97E64BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoATXLY3Mftv1uPFeEHsYi9zo17fUc9pEM9EUNyhTFHL/1/323830343a363237383a3a2f33322d3438203d3e20323639323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6278::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:c9:f4:d3:b7:a4:4c:8d:0a:b6:4c:6f:d5:e6:ab:2d:ac:
         a3:d6:90:3b:82:59:e4:97:e9:36:6b:4d:2d:49:37:04:c2:3a:
         4e:ed:ef:19:90:08:33:32:05:fd:bb:6d:0b:be:98:f4:34:36:
         70:28:7e:c3:84:4f:6d:7f:1b:f8:4c:ec:0a:53:43:2b:25:86:
         ee:c9:c7:c7:19:8c:af:3e:22:e8:c7:a3:5b:06:29:61:9b:7a:
         49:63:ff:6a:a2:eb:be:10:27:d4:fe:f1:d5:61:3b:b1:93:54:
         14:4e:35:48:f4:15:2a:29:12:ce:b8:20:d2:65:92:4c:3c:3b:
         bc:db:c2:04:42:4c:d0:bd:db:b4:c1:4e:b2:3f:c1:c4:c3:33:
         ad:ad:f7:2c:d5:37:f6:01:52:22:86:af:82:51:26:85:a9:3d:
         b7:35:a9:ef:9f:ae:e4:81:31:26:65:10:98:75:44:5c:0e:0e:
         2b:f9:ae:77:f3:44:fa:db:72:f1:42:7f:ef:c0:d2:b8:4e:a0:
         89:53:b1:b6:b5:bc:37:48:39:c2:d9:8e:84:0d:ca:4a:e6:46:
         9d:dd:7e:e8:e0:bf:96:51:a7:33:78:2e:aa:69:05:b4:cb:4f:
         b4:f6:4f:43:47:09:98:60:1b:5e:d7:ca:8d:30:52:56:b3:fc:
         a3:71:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:55:40 2025 by rpki-client