Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/323830343a346130343a3a2f33322d3332203d3e203533313536.roa
File:                     323830343a346130343a3a2f33322d3332203d3e203533313536.roa (raw, json)
Hash identifier:          KLj2KgngO/RfXd9soePllpvaSJ/8jWPVT+gTQCH21E4=
Subject key identifier:   E2:C4:4E:9F:88:78:BB:8A:93:B8:D6:28:56:F4:8B:81:B7:9B:09:76
Certificate issuer:       /CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
Certificate serial:       40E2478472BA477C295338F3EDB09EF6610B81EA
Authority key identifier: 2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/323830343a346130343a3a2f33322d3332203d3e203533313536.roa
Signing time:             Sat 12 Jul 2025 14:28:39 +0000
ROA not before:           Sat 12 Jul 2025 14:23:39 +0000
ROA not after:            Sat 11 Jul 2026 14:28:39 +0000
asID:                     53156
IP address blocks:        2804:4a04::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl
                          rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 11 Aug 2025 12:57:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:e2:47:84:72:ba:47:7c:29:53:38:f3:ed:b0:9e:f6:61:0b:81:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1
        Validity
            Not Before: Jul 12 14:23:39 2025 GMT
            Not After : Jul 11 14:28:39 2026 GMT
        Subject: CN=E2C44E9F8878BB8A93B8D62856F48B81B79B0976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:c7:e9:a4:3c:f0:99:87:2a:48:fd:36:16:
                    36:c9:b6:b2:96:cd:1b:f1:6e:80:fa:fe:0b:81:6a:
                    14:30:e7:c3:6e:59:15:31:10:94:ae:0b:d7:91:49:
                    5f:c4:0e:cc:85:50:d8:0d:d9:25:a1:92:85:7b:e3:
                    3c:5f:24:ce:71:7f:85:8e:34:e3:eb:f7:fa:69:0b:
                    3e:4d:66:a6:13:1b:e0:0f:50:3e:e1:fa:41:56:66:
                    d9:61:a2:2c:ac:bc:ae:2b:5d:e5:76:b3:d7:e1:63:
                    41:04:e1:73:af:59:1a:26:eb:95:86:db:f0:fe:d1:
                    78:35:04:5c:71:44:77:78:91:92:15:49:af:93:e1:
                    5a:23:92:12:62:65:ec:93:63:8d:c9:f4:b4:3b:88:
                    c8:9c:a2:78:13:4d:92:0e:f0:6a:48:36:2f:98:fe:
                    d2:d9:d8:11:58:bf:f9:b8:23:5a:d9:f8:18:b0:ea:
                    68:d7:ba:2c:4f:43:e5:8b:54:cd:97:e1:77:52:c2:
                    49:65:74:6e:56:42:63:65:14:58:16:09:8a:d1:2b:
                    c3:ee:c6:0b:ac:74:21:06:99:45:19:0c:f6:cc:50:
                    df:1a:d5:b3:57:dd:4c:7f:69:23:d0:28:5e:e1:6d:
                    08:b9:73:78:09:7d:65:15:f8:6b:45:21:b1:f4:bc:
                    7a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C4:4E:9F:88:78:BB:8A:93:B8:D6:28:56:F4:8B:81:B7:9B:09:76
            X509v3 Authority Key Identifier:
                keyid:2A:B3:5A:CD:D4:03:E3:46:BD:D5:B7:C6:86:CF:CF:92:18:AB:B2:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2AB35ACDD403E346BDD5B7C686CFCF9218ABB2B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJtwHsCpfQEzFnnEjUiNQ9C77BzPET8u8ciyxvJNpB7o/0/323830343a346130343a3a2f33322d3332203d3e203533313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a04::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:e6:6f:a3:00:66:fc:5c:da:3a:78:88:5c:59:73:ae:10:53:
         b2:bc:93:ce:e6:ac:b9:81:2f:da:68:c7:c8:e3:8c:96:d0:52:
         f7:d5:24:a5:96:29:ad:b3:3c:a0:24:ef:e8:02:30:01:fd:a1:
         71:51:34:78:0e:1f:62:d9:e4:c9:0f:5c:35:80:0e:62:9f:73:
         fa:75:4d:0f:f2:3e:4f:03:97:9d:90:e3:8b:66:d2:e1:eb:96:
         62:a8:12:3d:25:9e:2d:68:90:d5:21:b1:60:6f:a6:7f:08:70:
         a5:89:a7:50:ac:42:e2:fb:fa:10:9c:97:1c:39:e7:f0:4d:a8:
         87:e7:1d:78:87:9b:04:7d:86:ed:b6:b9:2e:7f:af:fe:bc:32:
         ad:19:b7:cc:e5:e3:50:13:73:b5:00:e2:a7:43:dd:df:16:c4:
         90:79:d4:21:c5:41:fe:ae:96:4e:b6:5c:45:9d:64:bb:12:c6:
         56:3f:ef:ee:a3:ff:98:d6:c2:d8:71:e5:f0:5f:51:52:7a:aa:
         57:7a:a5:fa:01:88:b5:2f:57:53:fb:09:cf:2d:2f:ca:21:14:
         83:b1:a7:36:b0:cd:dd:26:c7:33:18:4e:c2:97:a3:1b:77:a9:
         a2:29:63:a2:87:12:4e:05:29:f2:f0:57:57:2d:26:68:5c:c7:
         a6:b5:86:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:53 2025 by rpki-client