Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a333a3a2f34382d3438203d3e203533303133.roa
File:                     323830343a3537343a333a3a2f34382d3438203d3e203533303133.roa (raw, json)
Hash identifier:          0pQgWl0r/W1glGb6v2idw0Wmup4CxlyVshTHn3x/908=
Subject key identifier:   9E:97:CF:13:19:D6:F1:49:8E:CC:BF:13:F9:F9:35:37:82:C5:A4:61
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       1D85B4C76E2BBBB2BFC2E1BC6CE0953E8A96C0F1
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a333a3a2f34382d3438203d3e203533303133.roa
Signing time:             Fri 20 Jun 2025 18:57:49 +0000
ROA not before:           Fri 20 Jun 2025 18:52:49 +0000
ROA not after:            Fri 19 Jun 2026 18:57:49 +0000
asID:                     53013
IP address blocks:        2804:574:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:85:b4:c7:6e:2b:bb:b2:bf:c2:e1:bc:6c:e0:95:3e:8a:96:c0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 20 18:52:49 2025 GMT
            Not After : Jun 19 18:57:49 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:91:bc:5a:91:7e:0a:bb:10:9f:20:f0:d2:
                    18:b5:31:2a:1d:96:fa:a2:d1:23:3f:cb:47:2d:5a:
                    ef:e3:66:c5:5d:51:ee:bd:bf:38:7e:1d:48:30:12:
                    50:c6:b7:29:a8:8b:60:77:36:01:14:41:29:31:1a:
                    01:b3:18:6e:24:cc:62:6a:c4:6d:cd:8d:c3:3f:74:
                    7c:1a:ac:f3:20:51:f0:db:9a:a4:a4:88:a6:55:f9:
                    f7:a5:97:af:fe:fc:17:58:ea:3a:c2:24:ef:d2:16:
                    d1:9f:ea:a0:b8:8f:60:21:72:63:dc:85:d1:ec:68:
                    d1:84:0e:2a:f9:b9:a4:7f:e3:dc:f0:8b:70:41:a2:
                    09:66:f9:11:f2:99:07:f9:ae:1a:17:cb:f1:f9:ba:
                    e8:35:c2:b4:77:54:2a:30:e2:12:5b:97:f0:bc:20:
                    1f:6c:a5:46:8a:6d:c0:32:57:f8:a8:3b:d5:6f:78:
                    55:76:61:83:36:73:8c:e7:62:f4:64:c7:af:fd:fd:
                    ef:fe:60:ff:51:bd:96:c8:26:cd:ea:18:20:f5:6a:
                    17:fd:f1:db:d4:c3:cf:fa:90:f8:a0:3a:25:7b:46:
                    8e:c8:3a:33:fb:80:57:18:0c:63:17:52:d1:50:0b:
                    04:e9:f9:e7:76:03:9f:88:8a:43:5e:b8:6a:0a:7a:
                    9b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:CF:13:19:D6:F1:49:8E:CC:BF:13:F9:F9:35:37:82:C5:A4:61
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a333a3a2f34382d3438203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:56:1b:1f:f1:79:68:b3:35:1e:af:be:04:88:65:fa:82:dd:
         76:b6:54:8c:88:96:cb:1b:68:4f:e6:18:c6:c5:3c:1c:0b:a2:
         6b:f7:18:a4:8a:c1:15:50:aa:ef:c3:39:7f:6b:11:4f:bc:e5:
         2e:6e:c3:0f:13:99:21:82:64:27:67:e5:e7:02:f4:a3:ce:da:
         29:33:1a:5b:31:a9:cf:e5:77:4d:a0:ae:03:07:f1:15:a2:42:
         45:04:2e:3a:d3:57:fc:91:32:38:d5:d0:2c:6f:4f:be:7e:0d:
         a0:b8:14:97:e7:85:b0:fa:30:76:46:ba:db:8d:dc:27:6d:d6:
         e0:97:e5:07:d2:e7:82:02:19:14:f0:8f:58:b6:cc:79:3c:7e:
         fc:83:f5:14:02:aa:bb:55:76:48:fc:17:ca:69:0d:6b:ea:57:
         07:56:58:d1:7c:cd:dc:17:26:3d:01:ec:12:85:7a:0e:cc:aa:
         49:70:c7:e6:2b:a7:3e:db:17:f2:20:51:a2:ef:28:89:36:15:
         77:6e:0b:b5:31:7e:f0:24:5b:61:e5:6c:34:3e:39:c3:a7:96:
         66:92:cb:68:9e:46:12:16:5f:55:e2:9f:38:b7:df:d2:4d:8c:
         08:9c:9b:77:3c:c8:e9:0a:a1:f4:0e:95:4b:59:c1:26:6b:59:
         30:58:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 21:53:54 2025 by rpki-client