Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
File:                     323830343a366463303a3a2f33322d313238203d3e20323730353533.roa (raw, json)
Hash identifier:          P7hxdLDiLFwGLFpXC8kUcnEbpo0K7DcEyjdXU1KnH3s=
Subject key identifier:   7B:C4:26:88:D4:60:37:1C:AC:D9:AA:F3:0B:13:99:AC:EB:F0:E1:4F
Certificate issuer:       /CN=7D92F334494EDE5B42E5400F9902062BD822C1E8
Certificate serial:       6847A0E3E6A10536EEBA5D6B6340774ABD677207
Authority key identifier: 7D:92:F3:34:49:4E:DE:5B:42:E5:40:0F:99:02:06:2B:D8:22:C1:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa
Signing time:             Mon 20 Jan 2025 23:17:27 +0000
ROA not before:           Mon 20 Jan 2025 23:12:27 +0000
ROA not after:            Mon 19 Jan 2026 23:17:27 +0000
asID:                     270553
IP address blocks:        2804:6dc0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.crl
                          rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 01:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:47:a0:e3:e6:a1:05:36:ee:ba:5d:6b:63:40:77:4a:bd:67:72:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D92F334494EDE5B42E5400F9902062BD822C1E8
        Validity
            Not Before: Jan 20 23:12:27 2025 GMT
            Not After : Jan 19 23:17:27 2026 GMT
        Subject: CN=7BC42688D460371CACD9AAF30B1399ACEBF0E14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:db:d4:8a:d2:16:fd:48:2d:b0:00:61:65:
                    f6:ed:d5:55:07:71:47:f5:7e:d9:90:5c:19:e9:2d:
                    e5:db:87:70:c3:44:05:0f:ca:70:50:73:bf:8f:03:
                    24:c7:00:91:de:12:fd:e2:fd:26:05:68:77:e1:79:
                    06:4c:dd:e1:52:4a:42:e9:17:ca:f8:65:d0:64:8f:
                    2b:01:f3:f7:b6:ae:e2:4d:c4:d0:23:31:5b:11:23:
                    43:14:bd:09:73:31:ea:fa:64:b0:14:a6:4e:49:47:
                    78:e3:5c:ce:9e:38:8e:05:c6:43:df:b3:98:4d:5f:
                    da:75:89:44:5e:dc:d8:a9:e5:3a:da:0e:6a:7d:c9:
                    ad:7e:06:d6:b7:a5:05:bd:39:78:05:0e:dd:81:4b:
                    a9:9b:eb:f7:d2:d0:8c:b6:27:73:d3:52:f1:a6:57:
                    ef:63:38:86:f5:d5:8e:2e:03:b2:e4:ef:b1:b1:0f:
                    20:90:d9:a5:9a:7f:f1:93:cf:0d:b6:48:65:dc:81:
                    65:91:21:21:9d:75:d8:63:c9:59:be:e3:c2:e5:d2:
                    ec:c5:6d:f8:c8:6e:75:38:b3:a4:4b:a3:e9:17:40:
                    f4:3f:c3:9a:09:ce:31:42:76:74:0e:8e:52:02:5b:
                    50:70:d8:f3:32:d7:41:1f:ab:e7:58:11:56:27:a3:
                    a4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:C4:26:88:D4:60:37:1C:AC:D9:AA:F3:0B:13:99:AC:EB:F0:E1:4F
            X509v3 Authority Key Identifier:
                keyid:7D:92:F3:34:49:4E:DE:5B:42:E5:40:0F:99:02:06:2B:D8:22:C1:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/7D92F334494EDE5B42E5400F9902062BD822C1E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D92F334494EDE5B42E5400F9902062BD822C1E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/323830343a366463303a3a2f33322d313238203d3e20323730353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:1d:6b:82:c8:c8:d2:29:c8:46:95:da:fe:1f:b1:62:58:96:
         fd:e6:22:03:46:48:e3:5f:f4:a6:1f:14:3e:b6:bd:ec:11:e6:
         7b:0a:19:2a:24:bb:23:25:65:19:80:fe:e4:ca:72:f9:ce:65:
         73:05:29:4e:28:c1:a7:66:0e:0f:b6:00:c9:91:2b:f3:20:80:
         81:ed:b7:01:67:ad:55:79:55:6d:1c:e6:93:a3:be:c8:c3:bc:
         00:85:98:23:04:3a:df:5e:e3:68:c4:ca:c3:aa:31:49:4f:2b:
         d6:ce:d9:3d:10:15:e3:6f:5c:d0:b1:3b:cc:bf:7a:78:bc:9f:
         26:5e:3f:40:ae:2b:35:fe:55:cd:d5:93:04:97:77:41:aa:69:
         ca:bd:1c:fb:20:fc:90:df:49:a6:79:f7:18:da:6b:00:f5:43:
         b4:0a:d2:b8:1e:7e:8f:6f:c4:ec:09:e6:99:34:e2:3d:4c:ee:
         3e:f8:6b:0e:71:da:36:28:14:7c:ca:8c:87:fd:35:eb:a4:ff:
         4f:9a:3d:7a:11:cc:67:b0:59:c0:79:cf:6a:8c:7a:14:61:ed:
         20:22:54:31:8c:5e:28:25:34:a0:79:03:a5:49:c2:9b:a2:65:
         50:d1:4a:82:c2:00:65:49:3f:0a:30:ad:bf:e2:95:ae:c1:ba:
         e2:fc:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:09:41 2025 by rpki-client