Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa
File:                     323830343a64303a3a2f33322d313238203d3e203238313435.roa (raw, json)
Hash identifier:          EXTxpgO0AK9Lfd/XC4C/TNA2mIke0Gbv14BN62ZjeEM=
Subject key identifier:   92:C2:8D:09:9C:7C:98:27:D3:6A:7F:26:1A:F1:CD:13:0A:F3:F2:E8
Certificate issuer:       /CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
Certificate serial:       3AA350B24BBC029E54C142318CE07B4AAEF774AF
Authority key identifier: 64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa
Signing time:             Thu 01 May 2025 23:52:20 +0000
ROA not before:           Thu 01 May 2025 23:47:20 +0000
ROA not after:            Thu 30 Apr 2026 23:52:20 +0000
asID:                     28145
IP address blocks:        2804:d0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl
                          rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 01:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a3:50:b2:4b:bc:02:9e:54:c1:42:31:8c:e0:7b:4a:ae:f7:74:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=645AC0C948A5FF6189D9DCFEFA1388685485BEB1
        Validity
            Not Before: May  1 23:47:20 2025 GMT
            Not After : Apr 30 23:52:20 2026 GMT
        Subject: CN=92C28D099C7C9827D36A7F261AF1CD130AF3F2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:df:96:e9:50:43:06:13:9e:a7:39:59:93:
                    12:df:b4:a1:6a:b7:6d:49:f0:68:71:2b:71:08:b5:
                    7b:bb:b3:4b:7b:56:e7:d7:88:b1:f3:33:a5:95:e6:
                    c8:c7:dd:77:74:94:88:94:34:7b:44:30:71:50:fe:
                    d3:b5:98:2a:ec:d3:9e:a0:40:df:c1:f9:62:99:e8:
                    c9:69:d2:7f:de:a0:98:44:87:31:5e:a2:65:1f:ce:
                    48:aa:c4:ec:f3:8b:16:a2:48:15:15:53:fc:de:7b:
                    67:36:73:59:43:3c:01:bf:fd:f7:6d:7f:45:73:9c:
                    34:99:89:6f:61:79:12:f2:b5:a3:d1:7d:11:22:4a:
                    b0:aa:a0:c6:5b:53:74:25:22:c5:c9:1d:2d:a4:ea:
                    5b:38:78:6a:ca:2d:66:38:48:4d:b2:3f:c3:71:76:
                    40:63:07:0f:26:fe:20:ca:c7:cd:f7:79:b4:0d:3f:
                    71:87:f7:23:54:39:61:5f:5d:bd:f0:a8:4a:c3:f3:
                    ac:2a:6c:e2:e2:2e:d0:60:bd:58:4c:22:fe:52:ad:
                    e9:e4:bd:6a:ac:0d:b5:2c:96:09:80:f7:e6:01:28:
                    ac:dd:60:95:5a:6e:ae:0b:6f:f5:95:cd:d2:c1:77:
                    06:30:b6:6c:f0:62:fe:37:b9:d0:84:c5:a2:7f:a0:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C2:8D:09:9C:7C:98:27:D3:6A:7F:26:1A:F1:CD:13:0A:F3:F2:E8
            X509v3 Authority Key Identifier:
                keyid:64:5A:C0:C9:48:A5:FF:61:89:D9:DC:FE:FA:13:88:68:54:85:BE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/645AC0C948A5FF6189D9DCFEFA1388685485BEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/0/323830343a64303a3a2f33322d313238203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:63:27:c7:1d:8e:46:6a:02:f8:e3:51:3b:2f:b7:5a:32:db:
         1f:30:ff:62:57:75:80:70:70:b3:61:e2:12:bb:45:50:18:42:
         76:ea:1f:d3:df:0b:9c:ed:8e:f2:94:2f:ea:26:76:d3:ab:91:
         b6:2e:22:b2:8b:0d:cf:c4:f1:cf:19:32:f9:2b:1a:e4:c9:48:
         82:6b:ce:30:61:e6:c8:f3:10:4c:1a:24:50:de:c9:9c:d6:70:
         2b:3d:48:2e:70:66:ef:a2:31:c0:60:97:e6:e9:11:01:e4:b0:
         8c:f4:21:3c:91:73:fd:bf:0f:b0:8e:1a:b8:d6:d3:d6:15:ce:
         56:22:ee:b1:38:3b:84:55:b2:1f:d2:d2:5c:7e:40:43:33:95:
         0c:f3:88:8b:56:b2:3d:f4:ea:e9:54:90:87:b1:d2:5f:05:86:
         6c:78:74:d2:b0:25:f8:80:d7:23:41:08:ba:8a:f5:0a:4d:05:
         77:eb:ff:51:f8:8f:9d:4a:10:69:47:fb:ac:1a:b8:d4:06:ca:
         ef:23:fe:fb:98:43:b9:77:92:bc:d4:3a:3d:84:9e:9e:19:af:
         85:ca:0b:2a:6e:4b:fa:59:71:79:58:c7:3b:7f:b0:a3:ec:bf:
         f8:e5:a3:2b:90:b6:65:60:4c:64:d7:48:98:6a:90:e2:85:c5:
         19:29:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 03:24:57 2025 by rpki-client