Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a32303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a32303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          bgl6g1KptSAPpt8GNqaiZknQ0BsdfiZw5DD67RDYZX8=
Subject key identifier:   9B:A2:49:A1:CB:18:B9:0C:EE:8C:0C:8A:88:E0:B7:9A:02:3C:57:DC
Certificate issuer:       /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial:       72641CC793C6B7B806463A966C994DD1C8D7AD3D
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a32303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 03 Jun 2025 00:27:03 +0000
ROA not before:           Tue 03 Jun 2025 00:22:03 +0000
ROA not after:            Tue 02 Jun 2026 00:27:03 +0000
asID:                     264936
IP address blocks:        2804:3034:20::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 19:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:64:1c:c7:93:c6:b7:b8:06:46:3a:96:6c:99:4d:d1:c8:d7:ad:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Validity
            Not Before: Jun  3 00:22:03 2025 GMT
            Not After : Jun  2 00:27:03 2026 GMT
        Subject: CN=9BA249A1CB18B90CEE8C0C8A88E0B79A023C57DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:09:41:78:00:8b:d5:7d:92:bb:7b:9e:4d:
                    00:8f:6a:70:13:27:68:ca:12:06:19:8c:20:ac:e6:
                    02:82:e2:44:f7:17:ab:88:82:4c:47:ce:fc:b5:27:
                    95:30:c5:25:e8:e2:ae:bd:36:47:08:2a:f8:d8:80:
                    cd:08:3a:ed:e9:d8:c0:76:be:d2:c8:6b:1d:6e:0a:
                    ea:4f:61:e3:59:78:32:78:73:c6:fa:8a:a3:da:e2:
                    58:cc:3a:fa:15:44:12:d4:d1:b3:0e:f3:35:54:39:
                    f7:15:a5:16:8c:2c:4b:eb:3f:2b:32:53:ed:da:a7:
                    7d:9c:37:f4:29:4f:9f:63:c6:f6:fd:e5:2e:d6:94:
                    6c:12:76:28:e4:9a:fd:62:5e:2e:d7:3f:06:e8:e4:
                    04:c2:33:59:09:96:1e:3d:91:3b:7d:f0:d8:bb:4c:
                    79:7a:cc:ba:7e:ab:a5:df:94:a8:17:80:81:56:13:
                    0a:e5:c7:72:50:41:04:0f:87:35:4b:c0:46:53:43:
                    6b:e4:05:35:bc:6f:7f:57:58:92:3b:37:86:e2:ef:
                    75:a7:d8:2f:69:ca:ca:87:79:e0:dd:02:4a:f4:a9:
                    3a:28:07:77:18:0b:15:1a:73:b3:23:4d:3f:c0:34:
                    1d:a7:80:26:29:6f:a3:9b:1b:33:78:78:28:2e:3b:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A2:49:A1:CB:18:B9:0C:EE:8C:0C:8A:88:E0:B7:9A:02:3C:57:DC
            X509v3 Authority Key Identifier:
                keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a32303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:01:7b:82:63:eb:ad:51:93:e4:ad:26:6a:1d:76:fc:ea:6f:
         c0:c8:b2:b2:ae:a0:40:9f:45:b4:a6:42:b2:75:23:3a:aa:04:
         8b:5d:de:6b:54:92:24:13:c3:1e:20:48:3a:ac:7e:f1:26:67:
         28:45:93:22:a2:10:69:df:97:4b:6e:47:e3:f4:39:74:73:bc:
         7d:39:cd:31:c6:bb:69:06:60:50:76:42:a8:2f:fd:4f:b8:91:
         30:7d:d2:5a:29:86:11:02:20:67:be:6c:8b:ab:3a:b8:ef:36:
         35:22:bb:3f:c9:a0:16:19:8b:a5:ce:e1:96:fa:0e:a0:fc:8d:
         fb:bb:b7:17:fb:d4:b5:aa:66:d5:b9:12:87:dd:56:86:92:f5:
         98:6a:29:7b:d1:3f:20:ca:95:b0:23:30:d7:bc:cc:72:4d:44:
         47:74:21:89:55:1b:8c:01:24:77:e1:ca:7d:b2:43:e2:13:a2:
         e4:38:85:aa:3d:b0:ce:e3:94:f3:0e:b6:48:7b:7f:b7:44:89:
         bf:06:18:38:6f:77:0a:34:2a:a0:85:e1:5c:56:3c:15:4a:90:
         a3:9f:9a:ad:2b:da:3c:e1:a1:8a:b0:cf:30:00:53:ce:b0:b4:
         24:c2:c1:4b:fe:34:8b:cf:cb:d8:7f:3b:73:93:81:dd:ed:72:
         86:3a:bd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 02:36:43 2025 by rpki-client