Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a343a3a2f34382d3438203d3e203533303133.roa
File:                     323830343a3537343a343a3a2f34382d3438203d3e203533303133.roa (raw, json)
Hash identifier:          XB3Hr847Ld2sV6vDHnYvoWqUTISqMsyl8hBosePBHOk=
Subject key identifier:   0D:57:23:E6:8C:6C:16:49:BE:28:63:BF:53:5D:5C:A2:7D:13:7A:7C
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       025C83365023C9DC89F1D5B564E8E77AD6A36721
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a343a3a2f34382d3438203d3e203533303133.roa
Signing time:             Fri 20 Jun 2025 18:58:34 +0000
ROA not before:           Fri 20 Jun 2025 18:53:34 +0000
ROA not after:            Fri 19 Jun 2026 18:58:34 +0000
asID:                     53013
IP address blocks:        2804:574:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5c:83:36:50:23:c9:dc:89:f1:d5:b5:64:e8:e7:7a:d6:a3:67:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 20 18:53:34 2025 GMT
            Not After : Jun 19 18:58:34 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:8e:77:f0:b0:20:a3:1e:a3:15:35:d8:fc:
                    4e:4d:41:fa:29:ae:26:9a:dd:14:5c:a1:91:43:95:
                    2d:7a:01:22:ab:c1:46:87:bc:a3:be:b4:95:60:48:
                    01:03:a8:45:4a:00:1f:78:63:ea:69:5a:96:cc:8b:
                    7e:e4:85:e0:43:98:a0:cf:7a:ab:38:1f:b5:74:15:
                    67:f2:0c:00:a5:8c:79:f7:bf:db:e0:b1:1d:a1:4e:
                    40:3d:e1:4a:be:02:cf:0a:80:24:25:ae:73:f4:4d:
                    db:c7:3e:85:fa:81:58:0c:da:a3:b7:60:b0:cd:d7:
                    e4:c6:40:44:dd:75:45:65:4d:de:70:40:06:03:79:
                    41:35:08:a3:dc:cc:30:aa:99:71:38:1d:b3:8c:da:
                    3e:66:c4:f8:e7:ae:06:5f:15:eb:d0:b7:10:03:fb:
                    3b:bb:f3:7a:0b:b7:d5:d0:ee:5a:eb:96:6e:3f:58:
                    4c:53:f3:76:fe:e4:77:8d:27:c5:5e:d6:cb:49:a3:
                    b0:ec:59:a3:da:da:7e:ad:d0:da:55:89:f3:87:5e:
                    c8:16:c8:72:e2:48:1c:b7:89:53:72:e2:78:93:18:
                    ae:ac:94:63:2d:a0:13:98:3c:5c:a4:09:78:46:96:
                    a6:ed:16:9b:3f:66:10:59:af:7a:d9:cb:e3:18:70:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:57:23:E6:8C:6C:16:49:BE:28:63:BF:53:5D:5C:A2:7D:13:7A:7C
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a343a3a2f34382d3438203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:01:4f:b3:58:a2:53:02:3c:d3:4c:b2:df:9b:a7:1d:93:f9:
         50:02:13:11:bd:23:9c:aa:53:ae:02:e8:53:29:16:88:55:6f:
         03:e3:ff:96:d3:fd:0a:fd:e5:41:95:8c:21:38:ee:bf:86:4c:
         52:58:55:c4:5d:4e:e8:4e:85:d5:68:bf:f9:3a:a5:00:4d:d1:
         e1:3b:c0:88:ac:04:d0:f1:4c:7c:13:c0:30:48:fc:9b:c1:27:
         06:14:5c:f8:4f:7c:b2:94:f5:11:4e:c5:3f:ef:b4:80:fb:59:
         42:88:76:7c:16:05:25:1b:d9:41:6a:3d:f5:0a:3f:a7:96:93:
         ee:25:85:5f:70:05:82:bb:06:51:82:60:90:b4:36:d5:7a:0e:
         7f:77:88:a0:8f:d6:54:78:ae:50:02:7a:b2:cb:c3:97:11:4a:
         c2:ee:43:62:49:6e:53:85:38:d7:13:f8:a3:d2:58:9c:1c:14:
         50:c9:27:66:a1:0d:cb:ed:19:a5:d0:89:5a:45:42:31:59:b1:
         37:49:e2:84:c8:a0:8b:1f:62:08:df:3a:be:34:e7:ab:3a:4b:
         53:d0:a7:cc:65:94:86:a9:bb:2b:a9:55:58:76:e9:17:db:e4:
         41:a8:b2:56:17:0b:ae:bc:94:27:96:49:81:b1:23:bd:1a:2c:
         56:d3:00:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 00:51:08 2025 by rpki-client