Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/323830343a333130343a3a2f33322d3438203d3e20323634393837.roa
File:                     323830343a333130343a3a2f33322d3438203d3e20323634393837.roa (raw, json)
Hash identifier:          1MSMX9x6gJ32q58FJkcbGOrAE3IMUifmwP+qd7upGVE=
Subject key identifier:   2D:AC:9E:61:08:A6:0F:CA:DB:DB:8D:C0:C2:DB:E6:F2:0F:C4:2D:A9
Certificate issuer:       /CN=2085C2E26105617BC4502F8911A5BE52CC061122
Certificate serial:       5B2E2616D254B18F377E3088BBF8528904CE7B85
Authority key identifier: 20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/323830343a333130343a3a2f33322d3438203d3e20323634393837.roa
Signing time:             Mon 16 Jun 2025 20:03:03 +0000
ROA not before:           Mon 16 Jun 2025 19:58:03 +0000
ROA not after:            Mon 15 Jun 2026 20:03:03 +0000
asID:                     264987
IP address blocks:        2804:3104::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl
                          rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 18 Jun 2025 15:28:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:2e:26:16:d2:54:b1:8f:37:7e:30:88:bb:f8:52:89:04:ce:7b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2085C2E26105617BC4502F8911A5BE52CC061122
        Validity
            Not Before: Jun 16 19:58:03 2025 GMT
            Not After : Jun 15 20:03:03 2026 GMT
        Subject: CN=2DAC9E6108A60FCADBDB8DC0C2DBE6F20FC42DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:90:5c:d9:46:01:1e:91:fa:0f:aa:aa:14:
                    39:64:c7:59:2d:ff:33:1f:ea:07:e7:95:7b:f5:2f:
                    93:ea:b0:63:01:2a:01:3e:c6:58:9f:e0:79:a8:a3:
                    85:fd:e6:89:4c:87:1f:08:e7:f0:84:93:46:79:2d:
                    37:dd:89:dd:5b:de:4d:0b:55:a5:c1:82:23:d6:4a:
                    3a:59:4b:f3:f6:36:6f:26:7e:a9:c2:7b:39:e3:a9:
                    3e:80:72:5a:a6:ad:91:4e:1e:02:07:ac:1c:47:b6:
                    91:b9:4d:13:d2:6b:0d:b9:37:77:ca:9d:a8:1a:c7:
                    85:61:aa:4c:9a:97:ad:64:a5:68:f4:b3:e2:75:2f:
                    4b:02:bb:ae:be:d1:57:84:42:8a:8d:73:3a:e3:7d:
                    71:23:19:74:bc:08:da:55:94:8d:4d:c9:10:37:97:
                    d2:c1:cb:77:79:0e:5a:ee:a8:9d:bf:b6:85:d7:d5:
                    73:6f:b8:17:28:ed:f0:78:c5:e7:c4:ef:e3:a1:6b:
                    36:c7:fa:7c:97:32:e5:54:b8:ad:2d:00:95:47:8d:
                    9c:34:1f:01:18:57:20:b8:64:58:de:d4:1e:67:f9:
                    8d:60:cb:0d:61:34:64:21:9a:ad:33:d0:92:a2:76:
                    89:c2:a4:f2:ff:a7:6a:3c:cc:b9:42:38:9b:fe:6a:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AC:9E:61:08:A6:0F:CA:DB:DB:8D:C0:C2:DB:E6:F2:0F:C4:2D:A9
            X509v3 Authority Key Identifier:
                keyid:20:85:C2:E2:61:05:61:7B:C4:50:2F:89:11:A5:BE:52:CC:06:11:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/2085C2E26105617BC4502F8911A5BE52CC061122.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2085C2E26105617BC4502F8911A5BE52CC061122.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GGiFZXJabW64tffZmPqqPJzoUtwEwzMerLZ8ZsHubKLt/0/323830343a333130343a3a2f33322d3438203d3e20323634393837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3104::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:01:39:5b:17:a8:b6:19:b6:67:39:49:ab:9b:df:d6:e1:e0:
         41:6c:78:91:f7:6a:32:35:71:ba:30:ac:d6:d4:11:de:2e:91:
         12:f6:53:80:3b:27:f0:bd:47:10:7c:f2:d7:a2:41:62:f4:06:
         30:f0:b9:68:af:cd:0a:14:29:21:ca:4e:cb:67:ab:04:38:f4:
         ef:ed:e6:63:ae:6f:61:59:11:42:b0:bf:b0:a6:30:ea:e1:aa:
         93:fb:fd:24:41:5f:09:1d:b1:cb:61:2f:0f:8c:dc:72:3e:67:
         69:a8:96:ef:f6:61:a3:82:68:18:c7:0e:0f:f9:54:aa:c9:c5:
         6e:73:a9:76:6e:d9:cc:0c:5f:6d:94:9e:59:cf:12:1c:04:ec:
         99:fc:d2:da:a4:5f:33:4e:b3:f3:ac:17:5a:9f:ea:65:d3:54:
         7e:8d:df:15:2d:b2:60:59:0c:3e:70:be:8b:24:48:39:f7:9f:
         29:a0:b6:8f:0d:65:d9:ef:89:e2:91:21:db:c6:c9:33:51:99:
         76:35:9f:28:52:4b:7e:6e:8c:c8:8f:8a:79:ae:b6:60:61:6f:
         f3:d5:96:6a:c1:fc:8c:e3:53:77:36:d9:0c:19:7b:da:23:7f:
         dd:ba:83:da:fb:5b:4b:ee:8d:14:93:17:58:79:e1:63:27:c7:
         82:5e:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:56:53 2025 by rpki-client