Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a633030303a3a2f34382d3438203d3e203533303133.roa
File:                     323830343a3537343a633030303a3a2f34382d3438203d3e203533303133.roa (raw, json)
Hash identifier:          pnTdSWHEqf1dLFcaoQ/1TBwgTZN4QeHCkXncpr6pKpk=
Subject key identifier:   CC:7C:04:91:52:99:22:C8:51:E1:0A:9B:6F:F5:2F:4B:F8:06:1C:7E
Certificate issuer:       /CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
Certificate serial:       1CECC7B2BDCD124895793EB1A9701F57E212B594
Authority key identifier: C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a633030303a3a2f34382d3438203d3e203533303133.roa
Signing time:             Wed 18 Jun 2025 16:05:50 +0000
ROA not before:           Wed 18 Jun 2025 16:00:50 +0000
ROA not after:            Wed 17 Jun 2026 16:05:50 +0000
asID:                     53013
IP address blocks:        2804:574:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl
                          rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 23 Jun 2025 19:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ec:c7:b2:bd:cd:12:48:95:79:3e:b1:a9:70:1f:57:e2:12:b5:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2
        Validity
            Not Before: Jun 18 16:00:50 2025 GMT
            Not After : Jun 17 16:05:50 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9f:18:a6:75:37:bc:79:e8:f6:f7:e7:09:8f:
                    77:65:58:84:8c:e4:e7:6c:13:7f:53:0c:87:68:f1:
                    7e:27:65:fe:9a:71:6e:e5:27:10:5b:c9:08:d2:28:
                    69:19:56:82:76:a0:43:90:95:c0:e1:a6:cd:b7:28:
                    a7:93:1f:35:b1:27:45:67:a8:2b:5c:b3:3e:ea:05:
                    7c:18:f8:57:d7:23:2f:ce:38:05:da:a4:aa:3e:fa:
                    cc:12:80:e2:ac:62:5a:cd:ed:6b:d0:39:85:1e:bd:
                    0c:93:09:6d:fa:ef:f4:09:d9:1d:22:aa:d2:a1:91:
                    0d:b9:b0:41:d9:25:28:70:e3:62:4a:2b:a1:5d:7a:
                    72:6f:7a:9b:e9:57:e8:02:7f:9a:bf:55:30:48:19:
                    26:de:76:6b:cf:92:aa:49:5d:90:92:2a:37:c4:4f:
                    ab:50:93:88:1b:8d:63:18:d6:85:7a:2a:71:6d:dc:
                    3e:a1:63:82:1f:5f:2a:b1:3c:58:9c:cf:e0:b8:a8:
                    77:e9:6c:ac:eb:2e:31:85:39:0c:fc:7e:85:89:b3:
                    6c:41:db:8c:5b:7b:42:dd:c0:45:da:80:11:59:fb:
                    f3:55:46:24:c5:9c:62:91:3b:8a:94:30:87:b3:62:
                    ee:8c:67:f6:9f:a3:97:bb:df:b2:15:86:ec:b8:26:
                    5e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7C:04:91:52:99:22:C8:51:E1:0A:9B:6F:F5:2F:4B:F8:06:1C:7E
            X509v3 Authority Key Identifier:
                keyid:C9:8A:76:A0:6D:4B:26:A2:E8:8F:C6:F0:1F:E7:EA:ED:FF:5C:73:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C98A76A06D4B26A2E88FC6F01FE7EAEDFF5C73B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GVcCgby6E2napMdV87nTrHrRrjPjZZAB2TNcXrBbmq8n/0/323830343a3537343a633030303a3a2f34382d3438203d3e203533303133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:574:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:14:f4:8c:e8:97:74:44:83:7a:3d:5b:44:b4:9d:f3:46:60:
         da:b9:79:65:59:89:e9:0e:fd:e2:f2:16:c3:69:68:8e:79:82:
         64:c5:0f:a7:51:62:1a:00:0a:07:1c:3f:b4:59:8a:9b:33:d5:
         54:59:1a:95:a6:22:51:18:be:02:af:6c:74:f9:7b:44:75:ab:
         1c:43:d3:fc:7f:4e:91:8d:e0:64:35:00:0d:f6:a1:13:d3:f8:
         66:59:62:24:b6:5d:0d:a6:ac:e7:94:b8:18:5b:b2:6c:6e:e9:
         89:48:fa:02:11:fe:60:1b:8d:1a:30:09:b6:cd:aa:2b:a8:4b:
         7b:c7:58:23:ab:06:c5:6a:05:46:a7:7d:54:f7:1a:fe:7a:7a:
         bd:81:cd:3b:49:14:40:bc:b6:5b:41:1c:96:70:71:aa:d2:ed:
         a3:73:91:b3:95:b1:0e:50:c9:95:0b:0d:b2:89:c6:48:1e:d6:
         cc:5c:db:85:4e:ff:28:1f:6c:51:49:a2:35:63:23:89:49:a1:
         fc:52:81:74:92:d6:4d:5b:0d:07:a0:21:9c:ce:51:f9:73:41:
         9d:9a:cd:63:bb:83:d3:41:8e:7e:19:e8:3f:1b:00:ec:7d:a9:
         bc:7b:2d:94:e3:98:4e:ac:c5:9b:33:e0:7d:4f:1c:a8:fb:da:
         79:b9:58:3d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 22 21:56:33 2025 by rpki-client