Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa
File:                     323830343a313934303a3a2f33322d3332203d3e203631373832.roa (raw, json)
Hash identifier:          G6VXz5bTDwkeChq2Ui8GQI7yvuSH87TLFEOQ4AGktSE=
Subject key identifier:   EA:6B:25:A9:49:A1:76:54:50:A0:85:B9:28:8A:44:92:AD:68:B0:BC
Certificate issuer:       /CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
Certificate serial:       4E72E9A8D7109DF490051A182F1642F4F3D8608A
Authority key identifier: 79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa
Signing time:             Mon 28 Apr 2025 19:21:15 +0000
ROA not before:           Mon 28 Apr 2025 19:16:15 +0000
ROA not after:            Mon 27 Apr 2026 19:21:15 +0000
asID:                     61782
IP address blocks:        2804:1940::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl
                          rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:38:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:72:e9:a8:d7:10:9d:f4:90:05:1a:18:2f:16:42:f4:f3:d8:60:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3
        Validity
            Not Before: Apr 28 19:16:15 2025 GMT
            Not After : Apr 27 19:21:15 2026 GMT
        Subject: CN=EA6B25A949A1765450A085B9288A4492AD68B0BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:51:b5:27:89:9b:50:01:26:22:dc:a0:ec:
                    a8:a6:81:f7:c8:c9:e4:c7:20:80:e9:75:ad:47:e2:
                    92:4f:c7:bc:15:3d:88:26:cd:53:79:42:f3:7a:df:
                    df:5a:27:ca:2d:f8:1d:89:fd:63:43:54:cb:93:d3:
                    48:ea:35:11:e5:ee:0d:32:46:d4:52:5d:06:54:9a:
                    02:9c:57:b3:27:bf:14:31:f0:77:ec:0e:06:34:f7:
                    e4:18:32:fc:ff:b6:cd:46:3a:d6:82:52:88:3c:e4:
                    c2:14:d0:43:12:69:05:5c:b2:fe:65:3d:fc:7c:15:
                    70:65:a3:26:87:94:da:fa:45:2e:0e:d5:41:f6:62:
                    4d:72:86:1b:6e:84:8e:43:5d:d3:a4:89:a0:30:b0:
                    46:5e:b3:bb:6c:aa:ab:13:25:11:8a:50:61:46:e3:
                    20:5d:43:90:4c:75:bb:2d:39:10:15:0b:5c:a9:eb:
                    52:0c:19:4b:36:53:4f:cd:d9:a8:38:ce:ea:87:23:
                    78:3a:7f:9d:5d:cf:66:05:a6:34:a0:8d:63:6a:68:
                    92:64:53:d0:02:af:0c:f6:24:c9:6e:88:be:27:74:
                    f3:1b:0d:c5:52:d6:1b:b4:81:3d:b9:03:61:68:38:
                    58:77:db:1a:ae:4c:59:c1:42:29:b4:94:cf:ed:c9:
                    a9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6B:25:A9:49:A1:76:54:50:A0:85:B9:28:8A:44:92:AD:68:B0:BC
            X509v3 Authority Key Identifier:
                keyid:79:E7:F0:D1:11:FA:B5:A4:37:6D:D9:C7:CF:E7:FD:B6:92:E5:C8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79E7F0D111FAB5A4376DD9C7CFE7FDB692E5C8B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GgWMa9C63pxKm1T7N1MnSzu9jn6e5ZvL9qujTLqTKnLV/0/323830343a313934303a3a2f33322d3332203d3e203631373832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1940::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:4c:1b:32:da:f9:67:d7:f7:1d:03:e8:02:e5:16:46:4d:90:
         bc:7f:ff:23:bc:5f:52:14:53:aa:59:5f:a6:de:b6:ce:d8:aa:
         ae:1f:7d:a4:ce:57:e7:61:3b:1e:d0:2e:ad:1e:ed:0f:35:e5:
         ef:64:c9:ce:89:c7:75:a4:66:ae:44:5d:a0:15:24:1d:9e:1e:
         06:31:01:32:e8:bf:fa:42:68:fd:1b:a0:37:0f:45:3c:4a:c8:
         57:50:f8:db:06:84:5d:b0:e0:e1:f2:a7:d2:89:c7:ab:43:23:
         1e:ea:5b:0d:5f:68:96:18:79:84:c7:c8:7a:3c:06:16:cc:ff:
         20:fa:d0:fb:55:0f:18:1b:38:5b:db:67:7e:7c:61:c3:80:5b:
         cb:96:99:6f:fd:dc:4d:1c:32:7f:cf:06:da:f2:0e:a0:f8:a5:
         98:c5:17:91:c1:2d:a2:e2:8f:fe:56:e3:c4:c6:dc:e9:43:ec:
         17:97:df:93:fa:84:45:f6:b0:a6:36:60:2d:06:9b:07:7b:66:
         1d:63:cf:c3:b6:8a:cd:a8:e0:f3:02:da:8c:94:e6:c6:5b:67:
         47:87:41:d3:2e:1a:31:24:aa:5d:f8:9e:7b:73:fd:b3:79:9d:
         1f:b8:ad:9f:9d:0c:a6:f4:f1:75:a9:93:7b:74:3d:2c:2f:9a:
         7d:4c:0b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:52:09 2025 by rpki-client