Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa
File:                     323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa (raw, json)
Hash identifier:          ExUs1D8u3UHNA/rLMGI3P7Ffx13BN5qOE3Ri54jT1Bk=
Subject key identifier:   ED:33:11:92:BE:A2:4F:51:F9:CE:EE:3A:CF:EF:5D:B6:8B:09:B4:7A
Certificate issuer:       /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial:       189B22C59AAD7EB04DC0C7CB6288ABBBE0659334
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa
Signing time:             Mon 03 Feb 2025 13:05:16 +0000
ROA not before:           Mon 03 Feb 2025 13:00:16 +0000
ROA not after:            Mon 02 Feb 2026 13:05:16 +0000
asID:                     267963
IP address blocks:        2804:55e4:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
                          rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 04:25:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:9b:22:c5:9a:ad:7e:b0:4d:c0:c7:cb:62:88:ab:bb:e0:65:93:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
        Validity
            Not Before: Feb  3 13:00:16 2025 GMT
            Not After : Feb  2 13:05:16 2026 GMT
        Subject: CN=ED331192BEA24F51F9CEEE3ACFEF5DB68B09B47A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:9c:b8:8f:bd:13:09:1e:2e:96:fb:7d:7e:
                    26:d0:e9:d5:e9:48:36:19:6c:62:0b:57:9e:0c:70:
                    44:de:86:20:5e:55:3c:55:dd:09:17:8e:56:84:9b:
                    0c:11:56:ed:0a:57:bc:e3:96:2b:91:dc:29:4e:f9:
                    a5:fe:2f:b3:1a:5f:2e:10:1b:e2:89:c0:f2:17:9a:
                    81:b8:58:80:24:1e:6e:23:ab:d3:17:80:b7:67:28:
                    76:51:04:9f:03:e2:c2:5e:6d:fd:b9:20:bb:37:82:
                    5b:12:89:99:f0:0a:d3:60:45:00:07:cb:e4:36:3b:
                    33:c5:ca:2e:47:24:96:1d:ad:a3:4d:31:85:ae:3a:
                    42:70:ee:ac:dc:32:5c:15:77:c9:a8:33:f3:cb:85:
                    ea:01:5c:93:8f:4e:84:23:e4:dd:5b:a4:31:09:8f:
                    60:98:ed:7c:e5:13:26:eb:40:5e:50:9e:7a:11:8d:
                    c0:10:fe:b1:77:da:17:df:74:65:7a:cf:56:fc:30:
                    04:59:0c:54:dd:7e:a7:3c:59:89:3d:3f:31:06:26:
                    30:30:5b:d0:50:47:b2:fa:05:12:a5:82:87:41:5b:
                    b5:86:5c:6a:37:01:df:f9:e7:d6:24:74:7e:df:30:
                    6d:72:bd:f3:cc:2d:aa:e2:c7:99:36:bb:c1:b2:3d:
                    08:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:33:11:92:BE:A2:4F:51:F9:CE:EE:3A:CF:EF:5D:B6:8B:09:B4:7A
            X509v3 Authority Key Identifier:
                keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/323830343a353565343a633030303a3a2f33342d3334203d3e20323637393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:55e4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a4:6e:43:39:f6:e9:29:b7:18:38:6a:7d:c0:e4:d6:ba:ce:db:
         f5:c4:84:4f:a2:54:b6:e3:8b:ec:57:e1:64:7e:26:60:fc:cf:
         af:8d:2a:90:f8:9d:69:c9:81:2c:c0:ff:dd:ca:ff:d2:84:3b:
         68:d9:32:12:f1:dd:c2:e9:a5:1e:a3:8b:9a:67:b9:4a:e3:18:
         4b:f6:ee:e9:ce:72:06:84:48:76:27:7c:8d:23:80:ea:64:0f:
         c3:ec:8b:00:95:ac:ca:16:bf:15:5c:af:63:8f:b1:88:10:41:
         3b:51:68:2c:72:ce:29:e4:60:21:ff:3f:6e:93:63:f9:31:09:
         ed:88:6a:be:86:8f:b9:7a:ae:d3:c4:2c:af:5a:16:01:16:a4:
         dd:31:2b:2b:60:c9:78:f4:ea:62:80:31:29:79:94:8f:dc:a9:
         0b:36:33:6f:60:b4:21:07:8b:2e:8f:18:68:cb:8b:51:46:28:
         7f:97:e3:a1:bd:92:c3:84:1e:c2:03:46:bc:72:60:d9:f2:47:
         c8:38:45:08:b0:ef:dd:b0:87:1b:19:16:a2:c8:a1:09:4d:80:
         27:f0:ba:47:6c:a1:45:c0:dc:5f:6a:ff:3c:0a:49:2e:b2:bf:
         92:dc:42:e6:3f:f7:ad:dd:10:5e:d1:cc:73:6c:3e:fd:09:9c:
         8f:d6:23:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:45:22 2025 by rpki-client