Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/323830343a383331383a3a2f33322d3332203d3e20323732313736.roa
File:                     323830343a383331383a3a2f33322d3332203d3e20323732313736.roa (raw, json)
Hash identifier:          TPVGPWOQX/cU300xBlikgEFrpgEM5qA/wXpZH/BbeVU=
Subject key identifier:   D0:1F:6F:1C:B3:54:EE:E2:2C:BD:FF:C7:5A:0A:27:4E:3A:EE:4C:98
Certificate issuer:       /CN=648C0855082FB44E47607549445757FD4ABB0BD4
Certificate serial:       156CFF1F85C80AECD7046F0A95B6FF72773F76CF
Authority key identifier: 64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/323830343a383331383a3a2f33322d3332203d3e20323732313736.roa
Signing time:             Mon 28 Oct 2024 14:37:10 +0000
ROA not before:           Mon 28 Oct 2024 14:32:10 +0000
ROA not after:            Mon 27 Oct 2025 14:37:10 +0000
asID:                     272176
IP address blocks:        2804:8318::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.crl
                          rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:16:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:ff:1f:85:c8:0a:ec:d7:04:6f:0a:95:b6:ff:72:77:3f:76:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=648C0855082FB44E47607549445757FD4ABB0BD4
        Validity
            Not Before: Oct 28 14:32:10 2024 GMT
            Not After : Oct 27 14:37:10 2025 GMT
        Subject: CN=D01F6F1CB354EEE22CBDFFC75A0A274E3AEE4C98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:31:a5:a0:06:dd:4c:38:7f:3c:63:fb:0f:96:
                    d9:ee:48:1e:24:04:0e:eb:16:d8:5f:db:6f:1b:45:
                    96:64:28:2d:9e:ce:2c:73:8e:08:25:64:ce:17:04:
                    de:34:b2:70:33:48:7c:7b:c1:c2:e2:36:df:48:7f:
                    bf:6d:5a:d1:95:4e:07:6b:d8:fc:2f:52:d4:48:83:
                    b3:e0:5b:44:1e:51:04:ac:5e:9e:d3:8e:de:77:25:
                    40:e7:55:f5:09:c4:c1:4a:65:be:11:16:23:90:f1:
                    f6:94:65:5b:dd:7f:dd:cb:03:d0:9d:2b:7f:53:38:
                    22:3e:3e:70:22:02:c6:7f:3a:a1:04:62:02:f6:4d:
                    02:47:d6:c5:54:88:9f:62:53:c9:64:99:97:8c:a3:
                    27:77:9c:70:6b:f3:3d:b2:61:b8:fe:4b:e3:47:1f:
                    b2:8c:67:02:aa:7e:c3:bc:0c:27:a7:3c:05:f0:ca:
                    b6:2a:05:f2:67:47:e8:db:78:0a:f8:08:39:ea:1a:
                    f6:0b:c8:26:d1:d7:1e:95:0f:b3:e8:e3:44:12:fd:
                    81:22:38:d0:c8:15:52:43:40:a0:06:f9:0b:95:6c:
                    b8:b5:55:08:55:66:25:09:27:d5:96:de:0e:24:8d:
                    56:32:4e:e5:e1:54:6e:6c:c1:7d:7e:a0:fa:1d:5c:
                    0c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1F:6F:1C:B3:54:EE:E2:2C:BD:FF:C7:5A:0A:27:4E:3A:EE:4C:98
            X509v3 Authority Key Identifier:
                keyid:64:8C:08:55:08:2F:B4:4E:47:60:75:49:44:57:57:FD:4A:BB:0B:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/648C0855082FB44E47607549445757FD4ABB0BD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/648C0855082FB44E47607549445757FD4ABB0BD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvTV6bhv4r6RHMnhnWBcesSd4sgt3rngu9VCqtmdqCY8/0/323830343a383331383a3a2f33322d3332203d3e20323732313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8318::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:8a:8e:9a:d8:37:27:bf:8f:df:ef:9e:d6:0e:b6:f7:14:45:
         5d:5e:86:8c:4d:3e:65:51:e1:5f:a2:ae:8f:e4:73:31:08:1a:
         95:e1:fa:cb:ba:ea:09:a0:59:99:df:bf:2f:a7:87:9f:34:2a:
         15:a8:f2:19:10:94:eb:03:60:fc:08:1c:b2:af:0e:b2:75:14:
         f6:aa:ff:86:03:35:4f:8a:d1:57:cc:9a:5f:f3:bc:ef:de:a0:
         78:43:52:fe:8c:4e:e5:70:64:a3:82:6f:90:4e:09:58:76:90:
         f8:7a:10:f2:25:5b:fd:88:1a:07:2f:b7:9c:45:7b:59:2a:2b:
         1a:1e:42:a3:b6:ff:b7:3d:cb:b1:0d:43:4d:21:2b:0e:e4:7f:
         f0:37:ec:da:37:88:a0:cb:0c:f2:93:72:14:21:24:3e:0f:14:
         5d:84:3e:14:66:42:88:6c:33:8d:f2:d6:09:13:e3:62:0c:57:
         c0:09:8e:ca:7b:ac:f2:a7:9e:76:b8:71:71:6a:a5:45:ce:69:
         45:0f:65:85:9d:54:78:7a:8d:f4:94:fa:9e:1a:d1:e9:50:ae:
         59:fd:c4:84:4f:96:ad:b0:8e:df:2b:9d:2b:74:1d:9f:83:d6:
         4a:76:b1:66:b0:26:54:e5:42:fa:ac:e7:3c:76:f6:76:54:b2:
         6c:df:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:04 2025 by rpki-client