Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa
File:                     323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa (raw, json)
Hash identifier:          nkBZTea3RUrDOB9NvGQkQorBu4LwPoSYzmrmu/urVB8=
Subject key identifier:   FF:A7:B7:7A:39:DF:52:24:0E:0C:B3:21:29:3C:F4:74:2F:61:AE:24
Certificate issuer:       /CN=C70EC4383B792424E71BC6853AD1C792781070B3
Certificate serial:       184927C496D1A9C6A5FC595DE954FF284D3241F6
Authority key identifier: C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa
Signing time:             Thu 06 Mar 2025 03:11:47 +0000
ROA not before:           Thu 06 Mar 2025 03:06:47 +0000
ROA not after:            Thu 05 Mar 2026 03:11:47 +0000
asID:                     266611
IP address blocks:        2804:3ea4:f400::/42 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl
                          rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 12:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:49:27:c4:96:d1:a9:c6:a5:fc:59:5d:e9:54:ff:28:4d:32:41:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70EC4383B792424E71BC6853AD1C792781070B3
        Validity
            Not Before: Mar  6 03:06:47 2025 GMT
            Not After : Mar  5 03:11:47 2026 GMT
        Subject: CN=FFA7B77A39DF52240E0CB321293CF4742F61AE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e6:48:59:da:ea:ea:fc:32:c0:00:bc:9b:18:
                    6f:66:f1:c4:40:47:2f:4a:76:28:d5:68:89:02:c0:
                    dd:b3:80:a8:98:df:1e:74:f6:cb:5b:f2:39:3e:b3:
                    e6:e6:5d:02:7e:ff:78:85:f2:80:72:9d:9d:8e:64:
                    27:7a:62:84:90:b4:fc:c7:84:b6:5b:8c:13:8c:fe:
                    4e:f2:32:07:69:55:2a:56:85:74:5e:b9:eb:45:a7:
                    db:83:85:d2:18:33:9e:88:3e:ae:03:02:6a:22:f2:
                    8a:28:33:c4:95:4d:86:6b:0c:ab:58:1a:21:a5:4f:
                    e6:75:79:94:9f:9b:09:83:19:60:8d:97:39:68:73:
                    29:51:63:22:10:7c:22:d6:02:75:11:38:7a:b4:63:
                    d0:4e:72:ca:4f:01:4b:53:f0:6b:8c:19:b0:bd:de:
                    4f:b0:15:6e:b6:89:80:0a:49:38:9b:42:e8:f3:a3:
                    66:6e:2c:6a:83:95:69:88:25:68:95:2b:13:3e:d1:
                    9c:01:0f:79:dd:92:67:42:8f:54:19:d2:fa:ea:cf:
                    bb:b5:38:45:03:87:90:ca:e4:32:4e:83:e8:ca:e0:
                    15:ca:65:7a:24:b0:32:77:ad:f1:71:5b:95:c1:e6:
                    66:58:be:77:7a:7f:58:64:0b:fb:f4:80:d2:2f:53:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A7:B7:7A:39:DF:52:24:0E:0C:B3:21:29:3C:F4:74:2F:61:AE:24
            X509v3 Authority Key Identifier:
                keyid:C7:0E:C4:38:3B:79:24:24:E7:1B:C6:85:3A:D1:C7:92:78:10:70:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/C70EC4383B792424E71BC6853AD1C792781070B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C70EC4383B792424E71BC6853AD1C792781070B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/1/323830343a336561343a663430303a3a2f34322d3432203d3e20323636363131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ea4:f400::/42

    Signature Algorithm: sha256WithRSAEncryption
         ab:dd:2c:f9:84:91:a1:a9:78:58:bd:74:26:61:77:c1:82:5d:
         ed:f3:f6:be:e0:dc:1f:42:47:74:2e:73:2e:fd:25:bf:d5:82:
         91:2b:02:0a:d3:db:3c:86:fd:69:b1:2e:89:8e:5b:3c:4c:d8:
         c7:4e:0b:44:c6:23:2f:a2:a3:8d:57:24:41:90:6e:d5:b8:5a:
         91:3f:af:d9:2c:e5:a3:b8:ac:99:25:ad:fd:40:1f:4c:9f:dd:
         2d:6a:78:23:b1:af:58:f4:39:ec:ad:b7:cd:63:34:39:9a:8f:
         c1:84:c1:10:e1:e6:9c:ff:71:e7:bc:af:0c:32:ef:5b:d3:23:
         d7:bc:64:70:53:07:d8:f4:20:96:74:1f:fe:3f:eb:4e:b7:f2:
         ef:a9:8a:10:b5:47:54:15:85:5f:1f:7b:65:bd:6e:4b:64:d5:
         ba:47:3a:e9:0a:4d:29:b1:8e:c7:5d:13:98:a0:5c:7e:a3:6c:
         ef:46:1e:0d:5b:f9:00:ff:f5:64:87:8d:fa:bb:0e:57:42:f1:
         c8:42:74:d0:62:4a:ae:4b:c8:17:d3:06:bd:b3:3d:85:37:f4:
         b6:5d:96:dd:49:b6:a3:d6:2e:1a:be:d5:34:9c:c6:e7:e6:a5:
         54:74:14:8e:86:18:b6:42:80:12:2c:9e:c7:2b:ea:40:f4:4f:
         ca:8f:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:18:47 2025 by rpki-client