Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/323830343a323663633a3a2f33322d3332203d3e20323633383538.roa
File:                     323830343a323663633a3a2f33322d3332203d3e20323633383538.roa (raw, json)
Hash identifier:          lhethuhZvAYroVoCvP/4Q8JRj+RG41EOKf8Qid950pM=
Subject key identifier:   79:1C:6A:7C:6B:3F:CB:B5:65:D9:89:A9:59:E8:0F:46:F1:A9:1F:15
Certificate issuer:       /CN=53BF4224C1DAB932B987D0CF66C65662A8B5020F
Certificate serial:       3D271CA199409AB74C011D0ADBD05485C86E114B
Authority key identifier: 53:BF:42:24:C1:DA:B9:32:B9:87:D0:CF:66:C6:56:62:A8:B5:02:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/323830343a323663633a3a2f33322d3332203d3e20323633383538.roa
Signing time:             Tue 21 Jan 2025 18:27:58 +0000
ROA not before:           Tue 21 Jan 2025 18:22:58 +0000
ROA not after:            Tue 20 Jan 2026 18:27:58 +0000
asID:                     263858
IP address blocks:        2804:26cc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.crl
                          rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 02:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:27:1c:a1:99:40:9a:b7:4c:01:1d:0a:db:d0:54:85:c8:6e:11:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53BF4224C1DAB932B987D0CF66C65662A8B5020F
        Validity
            Not Before: Jan 21 18:22:58 2025 GMT
            Not After : Jan 20 18:27:58 2026 GMT
        Subject: CN=791C6A7C6B3FCBB565D989A959E80F46F1A91F15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:7c:e2:1b:da:18:b3:8b:d5:b4:4a:ab:23:
                    b5:9b:49:ac:04:11:2f:b1:eb:d1:e3:2d:e5:ec:f8:
                    1c:9c:46:d2:97:3f:84:78:06:ec:18:c1:b9:d4:5f:
                    23:14:1d:c6:3f:91:ba:ec:b0:73:51:72:8a:f7:81:
                    c4:5a:f2:a6:b6:7b:b9:96:f6:3e:29:fa:0b:30:eb:
                    3c:86:d1:40:a6:91:dd:f3:08:44:f3:1f:c6:ac:35:
                    e5:af:88:c8:b7:5f:8c:23:a8:27:12:80:f0:e2:af:
                    95:75:e9:e4:1d:26:30:fc:3f:0e:6c:69:ec:a8:7d:
                    f7:b0:23:97:d6:b5:ee:6d:f9:f2:80:22:1d:7c:1a:
                    ec:a4:87:80:4d:40:ab:b1:8b:13:5c:0c:4c:52:5a:
                    de:30:a9:6a:8b:0a:d3:1a:68:17:1c:5d:3b:09:02:
                    4f:3a:d3:9d:9c:74:b6:4b:49:ba:bf:ee:ae:13:ce:
                    86:e2:44:c7:0e:c7:3e:62:bd:bf:28:0d:86:e3:58:
                    1c:c8:d0:1a:10:8b:93:ed:e0:9c:a5:d1:fc:fb:70:
                    e8:79:68:c1:c2:a6:07:3d:8b:2d:32:f6:2e:3d:69:
                    2c:6d:08:a5:b9:65:18:09:81:37:5d:7f:38:be:ce:
                    85:19:0b:eb:70:61:db:e8:1e:ec:2e:8b:e4:7b:ee:
                    55:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:1C:6A:7C:6B:3F:CB:B5:65:D9:89:A9:59:E8:0F:46:F1:A9:1F:15
            X509v3 Authority Key Identifier:
                keyid:53:BF:42:24:C1:DA:B9:32:B9:87:D0:CF:66:C6:56:62:A8:B5:02:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/53BF4224C1DAB932B987D0CF66C65662A8B5020F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/53BF4224C1DAB932B987D0CF66C65662A8B5020F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GoRVcMkj77p9V4fgsFBZzoz8FhQGbrQnnK4MkKiKGtSD/0/323830343a323663633a3a2f33322d3332203d3e20323633383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:92:d5:5d:82:0c:16:46:91:09:20:ab:b8:3a:82:a8:b3:fe:
         2f:fc:bd:49:dd:08:d3:c6:c3:f1:55:e5:10:82:d8:2c:99:f9:
         af:36:4c:06:01:51:e7:9c:6b:9c:0f:60:a6:35:63:ca:34:bd:
         49:b5:91:86:39:aa:4c:d1:fc:5a:35:cb:52:36:8a:39:99:78:
         e5:69:92:8f:d0:ed:40:21:ec:0b:ee:b9:59:a0:a5:73:5c:7c:
         2f:c8:c6:67:98:07:94:75:97:a7:19:43:e3:44:dd:64:e4:00:
         9d:2c:af:3b:87:f8:41:bd:93:02:52:7e:58:04:c9:24:a2:3a:
         f4:aa:6d:3d:41:6f:fd:61:3d:b2:ed:3d:49:0d:44:90:cf:ce:
         12:fd:75:3f:f9:68:07:92:d2:cd:16:ec:3f:a2:7a:78:da:d2:
         85:a3:8d:3d:2f:71:f4:6e:04:70:16:cd:5d:ae:b8:b0:f6:e2:
         31:46:86:6d:f6:e7:45:10:e8:8b:31:88:f3:f8:9d:7e:08:aa:
         a3:48:5c:ac:b6:2f:a3:fb:12:70:d6:a5:a8:7e:d7:29:1e:94:
         0f:85:1d:ba:be:2e:fe:5a:4f:c4:49:d0:5d:17:95:31:9a:81:
         72:de:bd:6f:3a:a8:c1:1c:48:d8:b2:15:e8:d4:34:0f:ff:ef:
         99:42:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:43:41 2025 by rpki-client