Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/323830343a373136343a3a2f33322d3438203d3e20323730373836.roa
File:                     323830343a373136343a3a2f33322d3438203d3e20323730373836.roa (raw, json)
Hash identifier:          FuFIeE+bS3vgBS6IUSSgD5Im+8wdVYwOBAjd6I94FOc=
Subject key identifier:   C1:BE:8E:0E:AD:44:A9:FB:F9:17:DA:BC:2B:CB:10:0D:14:2E:71:63
Certificate issuer:       /CN=F1CE57571C2C8291BC06D94E497F975B2A4D0F11
Certificate serial:       0399D123A82EBEA152847885FCB1248EB10DB83C
Authority key identifier: F1:CE:57:57:1C:2C:82:91:BC:06:D9:4E:49:7F:97:5B:2A:4D:0F:11
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1CE57571C2C8291BC06D94E497F975B2A4D0F11.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/323830343a373136343a3a2f33322d3438203d3e20323730373836.roa
Signing time:             Mon 02 Jun 2025 20:39:14 +0000
ROA not before:           Mon 02 Jun 2025 20:34:14 +0000
ROA not after:            Mon 01 Jun 2026 20:39:14 +0000
asID:                     270786
IP address blocks:        2804:7164::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/F1CE57571C2C8291BC06D94E497F975B2A4D0F11.crl
                          rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/F1CE57571C2C8291BC06D94E497F975B2A4D0F11.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1CE57571C2C8291BC06D94E497F975B2A4D0F11.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 04:19:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:99:d1:23:a8:2e:be:a1:52:84:78:85:fc:b1:24:8e:b1:0d:b8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CE57571C2C8291BC06D94E497F975B2A4D0F11
        Validity
            Not Before: Jun  2 20:34:14 2025 GMT
            Not After : Jun  1 20:39:14 2026 GMT
        Subject: CN=C1BE8E0EAD44A9FBF917DABC2BCB100D142E7163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:94:ff:48:8e:92:b1:c6:e4:7e:ec:55:9c:
                    f0:a8:98:b3:cd:15:eb:b1:3d:5a:cc:5c:83:28:17:
                    24:ea:8a:7b:17:30:80:2a:71:e3:3d:a9:33:c4:17:
                    80:c6:13:fd:40:2d:79:19:d1:e1:e2:db:69:ec:91:
                    29:04:ed:78:4d:5b:7f:16:be:fa:8d:16:cd:4f:1e:
                    73:8e:8e:ec:f1:0d:53:39:92:b4:d1:f9:b0:1a:ef:
                    d3:b2:cf:30:d9:a4:65:bc:b2:01:4e:c9:f9:35:a9:
                    71:75:9d:b8:a3:56:5c:d2:13:96:55:38:e8:24:83:
                    6f:59:f0:3c:49:6b:d7:d8:7d:12:bd:df:99:15:1e:
                    04:a1:2d:7f:f2:95:0a:f9:61:ff:a4:3b:1c:a5:5e:
                    17:83:1e:5f:f2:69:5b:bd:6c:5d:3d:e7:02:43:41:
                    53:79:fe:fa:61:c5:17:71:c0:53:56:55:e3:f1:94:
                    7f:c1:7c:79:6c:c5:b2:3b:56:20:e4:47:53:e5:94:
                    e8:5e:dc:7d:47:00:02:19:89:65:50:79:f6:98:33:
                    da:96:a4:12:f1:90:c8:09:10:9d:b4:ba:db:38:28:
                    6f:d9:b6:86:93:81:55:00:63:de:bf:25:c0:9e:83:
                    fb:17:39:35:cb:2d:22:de:05:4f:02:fe:58:8c:28:
                    bc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BE:8E:0E:AD:44:A9:FB:F9:17:DA:BC:2B:CB:10:0D:14:2E:71:63
            X509v3 Authority Key Identifier:
                keyid:F1:CE:57:57:1C:2C:82:91:BC:06:D9:4E:49:7F:97:5B:2A:4D:0F:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/F1CE57571C2C8291BC06D94E497F975B2A4D0F11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1CE57571C2C8291BC06D94E497F975B2A4D0F11.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GokwEBRdfBcQQPqhKs9ebETEa8i3NbwsWCGTY4PnB9p4/0/323830343a373136343a3a2f33322d3438203d3e20323730373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7164::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:db:eb:63:50:17:86:10:3e:98:94:27:dd:e8:b2:38:dc:a2:
         2c:99:d6:c4:a0:d8:b1:84:a5:3c:44:12:d9:49:71:64:91:b8:
         67:c8:b5:f9:ee:ea:be:19:72:04:b6:e4:03:bc:4e:59:99:e1:
         9f:88:b4:b2:a0:bf:c1:f0:b2:31:90:d5:ff:6a:48:33:96:f4:
         23:49:95:5b:dd:f0:21:28:6a:ec:fc:9d:c7:db:d1:73:7f:22:
         bb:0d:9e:0e:22:f4:0c:f5:10:ee:5f:46:c8:8b:f5:55:fc:cf:
         2f:a2:fa:24:57:1a:0e:4b:e5:5f:9a:37:80:ab:ab:75:09:2a:
         9b:4c:a1:64:ee:aa:92:df:a2:f6:9a:60:91:df:fd:9b:cd:7c:
         ff:bf:de:f8:a7:30:21:b9:35:be:dc:36:4b:2e:fe:6d:28:7c:
         61:d5:dd:9c:7f:7e:5b:4f:e3:35:a0:4f:97:7b:4b:dc:27:6d:
         15:72:db:12:36:69:26:16:d5:fc:f6:ce:3a:e8:17:74:05:e3:
         d5:43:f4:b7:4b:f4:e6:eb:79:b8:fd:45:da:4b:b0:fb:5c:60:
         81:12:e9:3f:b2:86:b1:40:cc:65:b3:4a:61:e3:6d:03:f6:08:
         bc:4c:0c:f1:d3:0b:89:ff:c6:48:3f:ab:91:de:72:b6:a9:11:
         9a:14:c4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:50:05 2025 by rpki-client