Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3634203d3e20323633343730.roa
File:                     323830343a313235343a3a2f33322d3634203d3e20323633343730.roa (raw, json)
Hash identifier:          sGBs1Fbm1u8r/b+0xC+nH6KkU5m/PQz6R0VRL9cj/SM=
Subject key identifier:   5F:27:E4:5E:B8:2A:2D:50:7D:01:81:01:E4:36:B5:01:7A:0D:A8:D6
Certificate issuer:       /CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
Certificate serial:       1AA53698C81B9D8F70E4A98B9BD8838F932EABF6
Authority key identifier: AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3634203d3e20323633343730.roa
Signing time:             Mon 16 Dec 2024 20:59:00 +0000
ROA not before:           Mon 16 Dec 2024 20:54:00 +0000
ROA not after:            Mon 15 Dec 2025 20:59:00 +0000
asID:                     263470
IP address blocks:        2804:1254::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl
                          rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 22 Feb 2025 08:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a5:36:98:c8:1b:9d:8f:70:e4:a9:8b:9b:d8:83:8f:93:2e:ab:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4
        Validity
            Not Before: Dec 16 20:54:00 2024 GMT
            Not After : Dec 15 20:59:00 2025 GMT
        Subject: CN=5F27E45EB82A2D507D018101E436B5017A0DA8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:6d:92:e3:06:bb:dc:93:a4:f4:c6:2a:ec:
                    bf:90:ce:60:52:5b:2b:b0:c4:e8:c9:7f:a8:e8:62:
                    82:a4:2d:fd:5f:77:76:53:aa:aa:22:0f:e8:02:16:
                    5a:41:9a:8d:c3:32:57:83:0f:ee:3d:3e:6b:79:2c:
                    3e:fd:31:19:0b:12:39:9f:1b:8d:ef:8a:47:f3:af:
                    57:79:59:d2:9f:9a:6f:83:4e:ba:b2:5c:d3:d1:01:
                    43:53:49:b5:2f:ab:4e:ce:fa:d0:e9:27:13:84:48:
                    4d:4d:b6:e6:6b:cb:af:a6:cb:7f:ce:e1:ce:64:91:
                    eb:58:c7:0d:f2:e0:5c:d7:77:a0:46:2c:c6:9f:f6:
                    de:8d:af:89:da:0e:c2:06:fd:2e:fa:93:f3:c1:ae:
                    ad:a4:53:8d:14:ea:95:45:4d:9d:7c:f4:91:b0:54:
                    12:05:ac:1f:fb:54:1b:a3:11:a3:93:e0:19:59:b3:
                    e5:31:51:38:3b:f8:60:c8:89:bb:63:b1:75:48:41:
                    b6:29:4e:03:4e:d8:7b:3e:2b:03:ce:44:f7:73:1b:
                    60:23:b5:1c:68:b7:75:af:da:d0:fb:b2:13:ec:5d:
                    30:5b:ba:70:37:15:44:d0:c9:43:b1:2a:1d:2f:c9:
                    82:28:cc:bc:55:0d:70:c5:ea:69:5c:1e:ae:2e:e4:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:E4:5E:B8:2A:2D:50:7D:01:81:01:E4:36:B5:01:7A:0D:A8:D6
            X509v3 Authority Key Identifier:
                keyid:AE:B7:37:F5:2D:A6:27:3E:23:A0:E1:C8:BB:B9:EC:1D:C8:F4:46:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEB737F52DA6273E23A0E1C8BBB9EC1DC8F446A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxS1HkbMUJ74HqafsjbKn3WrRLrnUmMb2aPfDQ1Gx6PY/0/323830343a313235343a3a2f33322d3634203d3e20323633343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1254::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:56:e1:17:df:26:c0:78:2f:8f:47:ef:3a:42:3f:c4:ca:e7:
         11:09:e9:c3:28:64:a1:04:19:c9:bc:40:08:3d:03:5d:c9:9e:
         0b:5b:7a:fd:36:8c:67:43:e6:59:48:e4:6b:20:12:81:31:4a:
         53:dc:56:6b:01:cf:31:02:64:94:68:6b:f2:64:e1:a3:7f:b5:
         72:52:7a:b9:72:d9:47:a9:8f:ab:6d:e8:b4:cb:62:32:64:6d:
         7e:8d:7a:fc:55:a8:26:b2:90:45:cd:6b:a1:f0:74:d7:0c:db:
         67:38:fa:b6:23:9e:fa:c3:0f:f3:ee:86:f8:0f:aa:90:2b:41:
         8f:a9:17:51:1b:e5:f3:3c:e4:96:a9:bf:69:a7:ea:af:24:36:
         c7:84:c6:a3:56:c5:fb:1a:dc:14:7a:66:ba:cb:0b:ca:a5:5a:
         19:3f:80:31:4a:84:b2:72:dc:08:6e:33:f8:78:31:fa:69:95:
         dd:83:9d:d9:37:ac:2c:4e:5e:be:63:6e:6c:02:4a:1d:4c:e5:
         d0:cc:68:8a:b0:8b:9a:88:b1:51:e7:a3:f4:d1:dc:e4:8e:36:
         63:cd:b5:c5:f0:65:07:52:4d:63:a0:60:28:9f:5a:ff:0c:d7:
         39:ba:2f:92:70:5b:d4:4b:11:ea:79:3e:74:66:fd:42:62:ee:
         9f:64:9d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:50 2025 by rpki-client