Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a653030303a3a2f33352d3335203d3e20323636393637.roa
File:                     323830343a343631343a653030303a3a2f33352d3335203d3e20323636393637.roa (raw, json)
Hash identifier:          eRJSAjRr0f6WrZe6vLUDzXBJ9fUQzs9rKqig5tdGrfg=
Subject key identifier:   39:B8:AD:34:FD:43:44:7B:A4:36:06:F4:9B:10:A8:BB:7E:74:9B:D9
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       0504507C02386FB2255EE4E7A89D373493126FC3
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a653030303a3a2f33352d3335203d3e20323636393637.roa
Signing time:             Thu 06 Mar 2025 10:13:35 +0000
ROA not before:           Thu 06 Mar 2025 10:08:35 +0000
ROA not after:            Thu 05 Mar 2026 10:13:35 +0000
asID:                     266967
IP address blocks:        2804:4614:e000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:04:50:7c:02:38:6f:b2:25:5e:e4:e7:a8:9d:37:34:93:12:6f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Mar  6 10:08:35 2025 GMT
            Not After : Mar  5 10:13:35 2026 GMT
        Subject: CN=39B8AD34FD43447BA43606F49B10A8BB7E749BD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:e9:67:ea:74:3f:32:0c:95:f8:bd:96:de:
                    0a:6c:42:e1:d3:9d:34:b9:64:f9:d8:17:58:b2:fd:
                    47:a3:99:db:6f:dd:46:75:43:e8:5b:02:0c:d1:6b:
                    1f:14:8b:f5:e0:60:ba:65:64:51:64:9c:9e:a4:2c:
                    fe:78:91:8e:e3:46:a7:f6:d1:5c:50:94:bc:79:d1:
                    a6:5e:40:fb:9a:a5:ca:e5:05:78:ef:53:32:62:ac:
                    40:50:b0:b2:cd:18:bd:da:3e:b4:04:47:41:14:6c:
                    c8:4f:3b:7d:a5:cb:9d:43:7e:aa:ea:10:6a:66:83:
                    be:f0:80:c7:64:94:2c:16:ab:78:e3:06:79:01:58:
                    c2:63:75:16:b7:86:8e:90:84:3c:9e:de:33:c0:d2:
                    7c:c4:5d:1e:88:bd:ca:85:e6:3c:5a:3b:fd:fd:b8:
                    ed:bc:84:fa:e6:b7:83:f7:f2:6f:5f:e8:1d:8e:a9:
                    b8:7f:5a:af:58:ac:6f:ba:25:54:97:04:a0:07:d0:
                    b5:a7:82:98:52:f9:7a:c3:04:e9:66:9a:5a:56:6e:
                    c0:ec:73:86:b7:89:3f:56:75:eb:13:40:ad:cd:22:
                    df:ac:e2:47:cf:4c:37:dd:13:a6:7e:d5:81:f0:ac:
                    11:f0:2e:f7:f3:74:a7:8a:87:11:68:9b:14:35:f6:
                    e0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:AD:34:FD:43:44:7B:A4:36:06:F4:9B:10:A8:BB:7E:74:9B:D9
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a653030303a3a2f33352d3335203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4614:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         58:ba:37:7a:04:c0:b5:68:83:b2:6f:6f:02:91:94:17:bd:d5:
         39:16:9c:25:c0:8a:03:55:4a:1d:91:e5:d4:43:4f:8f:a3:21:
         ba:c0:a3:c3:14:71:7a:14:d9:bb:ac:a3:81:94:1d:44:07:d0:
         90:48:7d:22:f5:a6:68:7d:92:c1:31:6f:46:75:99:0c:69:b3:
         3e:1c:6d:14:0f:12:80:db:6d:24:31:ad:b8:12:3b:2d:4d:38:
         29:52:bd:89:9d:50:a7:94:ca:65:a7:f2:17:00:ec:f8:c7:6c:
         dc:f7:30:f4:f6:fc:df:f4:91:52:4b:6b:18:d1:4a:74:b5:82:
         96:3e:d5:12:85:b2:f4:37:fa:93:80:c6:ec:92:8a:98:d1:09:
         02:ae:cd:8a:92:d6:c7:c6:5f:5c:7c:e7:f4:f5:48:c9:b9:e7:
         51:54:bd:d6:9d:5e:fb:f2:17:27:cb:d3:bd:eb:e8:57:57:99:
         bf:ff:66:82:85:65:87:ce:e2:9a:24:9e:94:b5:32:05:c2:9a:
         45:05:9a:3c:01:34:6d:ce:fc:08:d2:f5:98:28:20:c4:2f:87:
         f1:a3:3b:ac:c6:88:2e:63:67:7e:32:cb:d0:a1:10:51:25:2e:
         d0:10:39:05:b5:0c:cb:f0:78:14:a0:1b:9d:ae:e9:74:3e:5f:
         03:ed:ba:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:40 2025 by rpki-client