Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa
File:                     323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa (raw, json)
Hash identifier:          uI/DuN7U+WHTT1WgjGk6LyAAjC7CgYzTnKGz4t8/Uws=
Subject key identifier:   F7:9E:7E:AB:76:C2:B2:DF:FB:16:A2:DC:99:6B:8F:7E:C2:72:9A:53
Certificate issuer:       /CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
Certificate serial:       08DD1C5936F235DFFBAA051693BB79A82226D5B0
Authority key identifier: 96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa
Signing time:             Thu 06 Mar 2025 10:13:35 +0000
ROA not before:           Thu 06 Mar 2025 10:08:35 +0000
ROA not after:            Thu 05 Mar 2026 10:13:35 +0000
asID:                     266967
IP address blocks:        2804:4614:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl
                          rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 22:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:dd:1c:59:36:f2:35:df:fb:aa:05:16:93:bb:79:a8:22:26:d5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96088310B0454DFFF2FF457C587DBC38970A3CA8
        Validity
            Not Before: Mar  6 10:08:35 2025 GMT
            Not After : Mar  5 10:13:35 2026 GMT
        Subject: CN=F79E7EAB76C2B2DFFB16A2DC996B8F7EC2729A53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:8f:38:71:84:d9:2f:d9:a1:87:50:03:df:
                    1b:32:98:bd:d0:9e:59:61:c2:09:a9:d3:e6:c8:7a:
                    14:de:d2:08:a8:32:15:33:f0:f1:48:9e:2a:8d:e7:
                    16:c7:73:e2:aa:6c:2e:cc:9f:d4:d5:6c:d9:d8:d6:
                    be:84:06:23:02:81:f2:d3:51:24:b7:90:9e:b5:e0:
                    ef:3c:9e:e6:55:f6:c9:01:1f:a6:e2:3a:51:7f:b4:
                    8e:39:cb:73:cd:26:35:d7:65:ca:1d:82:48:2f:4d:
                    d1:e2:ed:2f:ea:55:e7:67:1f:b0:bc:da:9d:ea:6c:
                    04:93:17:d5:99:e0:39:e8:87:13:03:74:fd:be:5a:
                    29:7d:b9:ee:a4:0d:03:5c:90:3d:dc:dd:e3:dc:7f:
                    6b:ad:bd:da:d1:eb:a2:b3:c7:20:bc:91:0c:99:38:
                    ec:96:69:fb:8c:16:00:be:39:b5:5d:21:ff:e2:6c:
                    9d:4d:0e:db:91:5c:c2:b9:9e:52:7b:5b:20:00:93:
                    93:7f:df:80:38:c8:0b:d0:6a:a5:f0:fd:7c:79:4f:
                    83:a0:91:bc:cc:81:ce:f7:b4:66:d8:74:c6:95:f3:
                    b5:d2:86:a8:65:2f:30:28:45:96:bd:f6:04:22:13:
                    83:a9:87:3a:66:ea:7b:2b:f5:bb:f2:fb:a2:35:0a:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:9E:7E:AB:76:C2:B2:DF:FB:16:A2:DC:99:6B:8F:7E:C2:72:9A:53
            X509v3 Authority Key Identifier:
                keyid:96:08:83:10:B0:45:4D:FF:F2:FF:45:7C:58:7D:BC:38:97:0A:3C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96088310B0454DFFF2FF457C587DBC38970A3CA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GvzmEx8MDgZVvHMGT1tYqEViF7Xv7aNx7LyvFYsBx6x5/1/323830343a343631343a663030303a3a2f33362d3336203d3e20323636393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4614:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:3a:d7:0e:c5:c7:41:92:93:0b:15:77:b3:b0:fe:dc:de:f6:
         24:87:0a:5b:72:5b:9e:83:3a:e9:1f:ec:9a:7d:87:b8:d2:11:
         91:a3:23:81:73:ae:2a:ec:cd:a6:c4:ae:a8:10:06:5f:42:19:
         6a:01:c5:6b:af:20:3e:f9:d1:ef:47:4d:6a:1e:f5:ec:a2:19:
         d8:79:93:3d:8e:b9:46:9f:16:62:57:eb:26:bb:fd:61:6b:67:
         fb:07:4d:bd:14:c0:4c:70:26:40:b0:52:bc:8a:65:ed:03:5f:
         db:0b:0f:fa:02:d7:f9:df:f7:78:b9:f6:27:fc:74:a2:8a:3a:
         ec:73:0f:c0:86:22:5e:d2:86:bc:54:31:97:43:4a:66:49:bd:
         00:ec:c2:ec:3f:e9:0f:f7:d2:70:34:40:b8:22:0f:da:f9:64:
         89:79:00:37:7f:17:8d:9e:f8:e2:43:2f:3b:5b:d9:05:5f:f2:
         82:64:28:e5:8e:cf:db:d7:b1:3b:c2:93:36:06:36:7e:93:bc:
         d2:3a:e7:0e:a3:50:8b:ec:b0:57:4f:b1:0c:b5:d2:0f:bd:3c:
         3b:1e:a3:16:8e:76:c2:19:95:18:bf:ed:30:5d:e0:54:3c:9c:
         06:92:d4:7b:06:64:b8:8f:47:71:99:4e:c1:20:dc:59:2e:78:
         c4:47:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:21:42 2025 by rpki-client