Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a613a3a2f34382d3438203d3e203533303133.roa
File:                     323830343a3537343a613a3a2f34382d3438203d3e203533303133.roa (raw, json)
Hash identifier:          VQcyE/3RHKVSbcknVTBwd3H4QVgp9YemWUkF1Y/UyaE=
Subject key identifier:   74:05:52:AF:BC:F4:90:7D:6E:C2:F7:E5:D5:3D:0D:40:3D:6E:F5:04
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       4F489413F6BCC9BBBDC660269476BEADD8EC491D
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a613a3a2f34382d3438203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:07:03 +0000
ROA not before:           Wed 18 Jun 2025 16:02:03 +0000
ROA not after:            Wed 17 Jun 2026 16:07:03 +0000
asID:                     53013
IP address blocks:        2804:574:a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:48:94:13:f6:bc:c9:bb:bd:c6:60:26:94:76:be:ad:d8:ec:49:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 16:02:03 2025 GMT
            Not After : Jun 17 16:07:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:17:68:c9:7f:27:ad:73:21:7c:46:3c:99:
                    57:31:fe:07:a6:c5:04:41:fe:6a:0f:f0:dd:a1:ca:
                    98:97:eb:fa:e9:f9:49:04:70:25:22:52:bf:64:79:
                    3e:1f:58:f4:b8:06:ce:8a:2b:6f:f2:d6:30:ba:00:
                    9a:f2:f2:e3:70:d9:6a:0d:88:a6:c7:8e:42:12:0a:
                    d0:b1:ae:b7:6a:a3:f0:9c:d2:dd:29:ad:d0:80:aa:
                    34:bd:71:ce:96:4e:2b:a8:29:5d:72:d0:4b:78:4d:
                    c0:66:37:af:dc:a0:22:57:b9:04:15:34:b6:40:c5:
                    2a:fe:fc:07:0a:fd:4b:b4:6b:4e:61:65:2c:11:a9:
                    05:2d:92:1b:68:05:29:8f:97:82:4d:00:ce:ad:89:
                    3a:5b:37:c6:e7:2c:6c:5f:7c:b2:31:f2:36:3b:82:
                    32:68:02:3d:20:66:85:9d:49:b3:7f:ce:cc:7c:c0:
                    ce:15:d9:5e:6b:46:88:9b:b4:f8:ab:3c:de:e5:0a:
                    11:f9:8e:41:4c:eb:ea:b1:d0:91:c3:df:17:bd:81:
                    b4:f2:12:88:59:c2:c6:a9:45:f9:3c:35:c1:a3:db:
                    75:d4:d9:86:44:53:47:64:f0:4d:ee:68:b6:a4:f7:
                    0f:86:07:23:bb:6d:ce:3e:c8:8d:6d:30:21:db:47:
                    ff:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:05:52:AF:BC:F4:90:7D:6E:C2:F7:E5:D5:3D:0D:40:3D:6E:F5:04
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a613a3a2f34382d3438203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:ce:5f:2a:a6:cc:b3:1c:aa:97:d3:c7:25:20:b9:ea:9f:49:
         2c:fe:0c:c0:ae:71:b3:6a:d1:97:74:c9:0c:78:ba:ba:9b:5a:
         db:ab:32:b1:de:22:47:91:b1:4b:d8:50:e9:b3:fc:d7:82:60:
         9b:c4:6d:e0:44:9a:ec:3f:31:fc:3e:af:34:a8:da:8e:07:0b:
         d4:9b:25:3e:d3:c5:59:c4:9c:08:94:85:39:94:26:03:79:1e:
         c1:e3:da:3a:81:87:a7:91:84:83:78:8d:09:d9:9e:e9:b5:f8:
         33:2f:67:aa:c4:df:1c:6b:a6:99:e8:b5:f4:99:18:5c:01:36:
         d0:3e:f2:31:62:f5:28:8e:63:e1:ce:52:71:97:49:3f:de:cc:
         29:3a:cb:46:27:f6:c4:a0:22:ca:89:8a:71:c3:51:24:9c:67:
         c2:bc:d5:c3:ec:69:0d:6b:34:8c:f8:65:f0:0f:04:1d:1b:ab:
         cf:d0:0a:96:24:3e:ca:aa:90:71:c3:d4:93:58:31:c0:ee:df:
         ac:ba:19:85:13:67:3e:6b:84:bd:e4:cb:9d:fc:5c:68:af:8f:
         d1:3b:41:c8:cc:76:73:96:44:f9:35:fa:9d:58:da:d3:92:d6:
         f6:c2:a9:e1:2d:0b:b7:ee:8d:7f:5d:e7:3f:65:57:11:1d:d0:
         80:fb:87:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 03:24:24 2025 by rpki-client