Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/323830343a313131343a3a2f33322d3438203d3e20323632343836.roa
File:                     323830343a313131343a3a2f33322d3438203d3e20323632343836.roa (raw, json)
Hash identifier:          e6SG3NE64Xm0AY9011cIcWLhrIvj1oXheAG1ZQJRSFU=
Subject key identifier:   5A:E0:76:C4:40:AA:B4:07:F3:B3:17:E4:A3:26:82:E7:06:AA:6C:BA
Certificate issuer:       /CN=04E2212E8119A88F829030DBA9530D79080ABB93
Certificate serial:       7510F11021B2F3297788DC6F2A20FCA64F3C78EF
Authority key identifier: 04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/323830343a313131343a3a2f33322d3438203d3e20323632343836.roa
Signing time:             Tue 01 Jul 2025 18:22:47 +0000
ROA not before:           Tue 01 Jul 2025 18:17:47 +0000
ROA not after:            Tue 30 Jun 2026 18:22:47 +0000
asID:                     262486
IP address blocks:        2804:1114::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl
                          rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Jul 2025 08:44:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:10:f1:10:21:b2:f3:29:77:88:dc:6f:2a:20:fc:a6:4f:3c:78:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04E2212E8119A88F829030DBA9530D79080ABB93
        Validity
            Not Before: Jul  1 18:17:47 2025 GMT
            Not After : Jun 30 18:22:47 2026 GMT
        Subject: CN=5AE076C440AAB407F3B317E4A32682E706AA6CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e0:1b:3f:4b:a7:fa:38:f4:67:49:77:50:ff:
                    45:71:d6:3e:cb:16:59:65:c5:69:06:0e:80:02:47:
                    a3:45:03:ab:29:e6:73:e7:98:cb:d0:1b:88:b0:2c:
                    2c:a2:16:04:29:cc:ce:eb:cb:8f:dc:76:91:af:6a:
                    73:be:72:87:26:1d:88:64:9e:33:06:a7:b9:60:7e:
                    62:02:9d:0f:46:25:3d:f0:2a:82:29:c5:62:12:ae:
                    6e:92:1b:b9:8f:10:61:98:dd:ad:99:e4:3f:ed:b7:
                    4e:12:8e:d3:ce:6f:24:f7:6e:1e:a1:17:73:0d:97:
                    bf:7a:63:95:b0:98:87:55:b1:81:ab:fa:dc:2c:c6:
                    ed:e3:4d:8b:6e:93:6e:7a:6f:c3:36:01:08:34:a1:
                    c6:da:72:72:47:eb:56:88:a0:14:2f:b2:6c:b2:7c:
                    89:2c:7a:ef:33:a7:aa:d4:ec:f7:cd:96:23:24:84:
                    50:7c:a9:21:71:e8:f5:4f:3c:b7:e4:ae:27:8d:49:
                    6c:01:a6:3f:c9:12:17:a3:21:c1:28:bb:36:cf:eb:
                    78:92:24:ac:a8:14:f8:24:58:06:db:08:f9:d2:b2:
                    88:b6:c3:41:12:b5:bc:63:4d:e8:2b:d0:8e:c9:7b:
                    97:23:fb:fb:51:67:13:7f:37:26:07:24:3b:9f:05:
                    af:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E0:76:C4:40:AA:B4:07:F3:B3:17:E4:A3:26:82:E7:06:AA:6C:BA
            X509v3 Authority Key Identifier:
                keyid:04:E2:21:2E:81:19:A8:8F:82:90:30:DB:A9:53:0D:79:08:0A:BB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/04E2212E8119A88F829030DBA9530D79080ABB93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E2212E8119A88F829030DBA9530D79080ABB93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBNuNLxTMdujHJgpckxebufj41zFQVBG7FbJxPNBVVCN/0/323830343a313131343a3a2f33322d3438203d3e20323632343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1114::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:0d:66:9b:ba:7d:4d:60:40:40:5e:76:72:f2:e9:8b:ec:6a:
         57:66:57:93:f0:82:c5:9f:1c:39:6b:31:15:ea:72:2e:7c:cd:
         57:3e:0d:72:d8:b8:aa:aa:ac:29:98:97:a9:eb:06:cd:46:57:
         64:d5:45:4f:63:d3:c5:b9:83:7d:96:f5:b1:3c:6c:9f:4c:e4:
         0a:57:a5:b0:5f:77:0a:5b:54:57:6a:e5:29:78:c9:89:d2:eb:
         1c:16:98:cb:25:e5:ab:90:25:fe:c0:3f:fe:fa:8b:18:42:b0:
         33:3e:98:35:79:cd:56:40:c9:15:97:7b:2b:99:1e:10:8d:09:
         8a:85:f2:96:ac:c0:c1:b9:6f:58:4d:59:b7:cb:a6:68:11:40:
         d0:fc:17:a5:dc:68:a9:78:7b:35:85:d5:81:68:da:23:ad:6b:
         3f:ef:b3:07:af:cf:d2:ed:eb:fb:40:b1:73:42:25:b2:1a:b8:
         9e:f2:55:6b:f2:89:9a:ed:c8:39:0e:63:79:f5:f9:16:e7:7a:
         d1:f3:b2:84:ea:79:9b:79:2d:a4:14:ef:5f:58:8c:d9:aa:af:
         f2:0d:20:4d:7c:d6:7a:40:40:ee:a9:b3:a0:16:d6:bd:2c:0a:
         0f:0b:62:54:3e:d3:c3:82:9e:ef:ab:b6:eb:45:1b:e1:6d:1e:
         21:ba:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 20:02:40 2025 by rpki-client