Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa
File:                     323830343a336561343a3a2f33322d3332203d3e20323636363131.roa (raw, json)
Hash identifier:          6S1peyvpcCuYUnFExsyCrXz9X05SBpVQXpX305/PwaI=
Subject key identifier:   8A:EB:00:66:05:2A:E2:67:91:B3:04:5B:97:E8:7B:7F:2E:0A:CD:EB
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       3442EF808516477B832C1F7F9FAC4069CEB34C59
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa
Signing time:             Thu 06 Mar 2025 03:11:48 +0000
ROA not before:           Thu 06 Mar 2025 03:06:48 +0000
ROA not after:            Thu 05 Mar 2026 03:11:48 +0000
asID:                     266611
IP address blocks:        2804:3ea4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:42:ef:80:85:16:47:7b:83:2c:1f:7f:9f:ac:40:69:ce:b3:4c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Mar  6 03:06:48 2025 GMT
            Not After : Mar  5 03:11:48 2026 GMT
        Subject: CN=8AEB0066052AE26791B3045B97E87B7F2E0ACDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ff:db:ee:3a:26:d1:3e:77:f6:b7:4b:4d:cc:
                    e4:57:af:4f:6e:cc:86:29:35:e9:42:5a:76:46:fe:
                    a2:3e:51:0d:bc:27:ad:19:d4:88:47:d0:f2:1a:76:
                    c3:19:ed:f8:6a:03:d2:52:d8:4a:c7:93:de:a1:2e:
                    fb:fc:e2:80:42:f6:9d:a4:9a:1f:21:1b:10:70:9e:
                    c1:ca:df:30:b2:07:1b:64:ab:e7:f8:2d:e4:bd:9b:
                    04:c9:30:57:e4:80:10:00:83:bc:5a:c0:7a:cf:c1:
                    ad:92:bc:cf:f9:39:b8:2c:c6:6c:1e:1e:c5:47:f1:
                    07:e9:aa:c1:f1:67:ce:f0:ed:a7:82:af:b8:cc:d3:
                    f7:0d:52:df:ae:52:4a:0a:42:5b:6d:90:09:f8:9e:
                    42:47:77:23:a9:f0:4b:9e:31:7c:15:92:64:d9:7e:
                    24:ec:a9:0c:9c:fb:ac:f8:48:62:4c:81:b7:cc:63:
                    82:d3:87:aa:8c:49:8b:52:ca:f6:12:9e:f1:18:33:
                    ba:11:be:37:3e:e6:9b:0b:05:8c:70:c6:5f:9e:c5:
                    d9:15:75:e9:83:8c:70:a6:f7:95:d0:85:1b:15:5e:
                    33:d6:42:40:f3:6a:90:37:35:6f:70:c6:b9:03:2f:
                    e0:36:7c:d2:12:ab:33:f3:b4:1c:34:1e:e3:4c:e1:
                    f5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:EB:00:66:05:2A:E2:67:91:B3:04:5B:97:E8:7B:7F:2E:0A:CD:EB
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a3a2f33322d3332203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:6e:a4:14:47:b3:bf:95:50:0a:c9:1d:b1:eb:11:82:a1:a8:
         53:1b:b8:33:50:28:7c:e2:9c:a0:7d:9a:eb:71:6d:bc:c4:87:
         44:11:63:63:fa:16:c7:f4:2f:06:16:f3:78:a6:dc:5a:13:e5:
         f3:b2:e1:97:96:4d:da:06:f7:76:79:bc:8f:03:c5:b2:57:ba:
         d3:67:f9:7d:0b:ff:83:23:5e:a3:6b:65:78:61:d0:98:1e:5a:
         11:54:8d:77:86:9e:1a:ff:de:f6:9a:26:d5:c3:33:5b:de:f6:
         97:17:b7:91:b9:48:78:79:d5:f4:0c:c8:f4:74:bb:10:56:3b:
         6b:4c:aa:d7:6c:8a:60:5c:08:73:61:52:5a:ef:47:da:7a:05:
         cf:a6:a2:6b:78:a5:7b:55:55:55:3b:f6:da:ed:bb:99:da:d1:
         0a:42:d3:30:f5:18:83:ea:57:89:0d:1c:58:32:85:6e:ca:b8:
         5c:72:f6:70:0b:47:80:5c:7a:66:d7:8e:7b:b4:d8:2d:85:e8:
         29:bc:68:cd:eb:e0:f0:e5:0a:6d:9a:a7:a7:93:56:7c:e1:c1:
         b3:d4:01:fc:be:e0:87:ca:69:87:b2:b7:8a:2e:af:69:ce:da:
         e5:1c:bd:48:1c:58:2f:0a:fb:43:70:dc:96:19:82:1e:22:e1:
         d1:53:f4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:50 2025 by rpki-client