Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3438203d3e203631383035.roa
File:                     323830343a313939383a3a2f33322d3438203d3e203631383035.roa (raw, json)
Hash identifier:          Qk7ja/D0UnEABlntWPvNXxeAnxQmmqTk79+LRpxGwiA=
Subject key identifier:   80:6C:8B:51:03:E4:D1:2E:F3:CE:81:C6:42:93:54:B1:27:8A:C7:50
Certificate issuer:       /CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
Certificate serial:       075F6F215CB903A31D036238EACC7FA869B7E3ED
Authority key identifier: FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3438203d3e203631383035.roa
Signing time:             Wed 07 May 2025 19:31:19 +0000
ROA not before:           Wed 07 May 2025 19:26:19 +0000
ROA not after:            Wed 06 May 2026 19:31:19 +0000
asID:                     61805
IP address blocks:        2804:1998::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl
                          rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5f:6f:21:5c:b9:03:a3:1d:03:62:38:ea:cc:7f:a8:69:b7:e3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE70BF4821B21DC5905FDD74ED03C136A16A2830
        Validity
            Not Before: May  7 19:26:19 2025 GMT
            Not After : May  6 19:31:19 2026 GMT
        Subject: CN=806C8B5103E4D12EF3CE81C6429354B1278AC750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a3:93:bd:8e:cd:04:40:14:f5:e0:c5:4d:47:
                    9e:03:55:70:13:37:77:ff:71:af:87:59:65:a2:7f:
                    37:49:70:ee:bf:39:db:80:37:b1:56:78:36:63:39:
                    13:45:a2:30:f1:99:39:34:a7:cd:95:ab:c2:73:c1:
                    81:53:07:eb:9c:1d:08:66:2b:a0:7f:8d:71:72:56:
                    fb:6c:79:a0:0c:be:6c:6f:6e:28:01:8c:c3:7f:d4:
                    ce:ac:6e:72:e9:04:e9:36:1a:76:d4:50:6a:cd:64:
                    61:94:54:76:29:44:1f:52:4d:df:d9:32:bf:da:a9:
                    64:cb:79:7c:cb:8b:b8:75:be:21:28:f2:19:c9:24:
                    ba:cd:ab:8e:f5:8b:85:42:77:f6:f7:d6:fc:a3:04:
                    38:35:fe:28:a9:19:e4:58:62:9a:29:23:cf:d5:c6:
                    70:42:76:da:50:30:1c:8e:07:15:24:9d:ea:d7:6c:
                    8c:b8:0c:f1:f8:b5:89:d6:3b:b9:8e:1c:de:18:09:
                    84:41:50:21:1d:81:67:d3:84:0e:58:8a:7c:b2:e6:
                    c5:08:b5:58:7d:03:ba:09:ab:79:07:59:75:02:5b:
                    e9:f3:39:a6:2c:17:74:ee:03:e5:0e:3c:0b:2a:e1:
                    9b:bf:9e:eb:82:8d:a3:22:22:13:74:79:b0:a3:3c:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:6C:8B:51:03:E4:D1:2E:F3:CE:81:C6:42:93:54:B1:27:8A:C7:50
            X509v3 Authority Key Identifier:
                keyid:FE:70:BF:48:21:B2:1D:C5:90:5F:DD:74:ED:03:C1:36:A1:6A:28:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/FE70BF4821B21DC5905FDD74ED03C136A16A2830.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE70BF4821B21DC5905FDD74ED03C136A16A2830.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4DZt8pGh9FXMNWL8MwuuApsBsAd3LHVvLzdkAqsQB9H/0/323830343a313939383a3a2f33322d3438203d3e203631383035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1998::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:00:4d:0f:28:f6:71:eb:f1:31:0e:66:e4:3a:7b:4c:de:1e:
         e3:7c:37:a0:98:01:6d:2f:48:30:c4:b2:9b:7f:75:3a:b9:c5:
         27:76:73:92:dd:56:c9:0b:66:50:4e:f4:f4:17:fe:c7:57:2f:
         31:6e:32:34:4d:6f:88:ae:96:ec:c4:32:a3:95:ce:8e:47:a4:
         6d:14:1b:cc:cc:fb:b5:11:49:56:83:c7:2f:c7:9e:ec:e3:b3:
         2c:5d:6d:b1:d1:09:55:b2:21:d2:3a:1a:85:de:e3:43:6b:2c:
         08:10:9a:47:2d:e2:be:d1:65:a5:6e:a8:4e:d2:99:fc:ea:06:
         6d:97:90:12:99:1f:d8:2e:fd:26:69:15:0a:16:5e:2b:12:6e:
         45:e4:4c:85:69:81:b4:b8:f0:ce:61:c7:3a:37:e2:a4:f2:f5:
         02:ba:d7:d8:20:05:39:aa:bf:d1:8d:7c:61:50:39:06:e1:a9:
         2d:f8:ed:a6:a3:47:9e:2c:81:1c:ef:3f:ab:24:76:71:20:a0:
         61:a9:f0:70:cb:b5:d6:39:16:e0:b5:15:56:9d:ba:eb:92:79:
         ef:41:12:2d:ab:2f:63:a1:b8:00:3d:38:c0:c8:a4:ac:c4:5b:
         fb:a5:e2:af:8d:1c:e5:8f:f9:09:d7:93:d1:6e:08:1c:2a:63:
         c7:ba:dd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:00:26 2025 by rpki-client