Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          0qgpnSQRUIKijg6N/JYyex6klY+xX61jWe+PdLjlSLw=
Subject key identifier:   99:90:B8:CE:89:FE:19:E0:51:91:96:11:90:04:F6:55:8C:E8:6A:98
Certificate issuer:       /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial:       52DE1AABA539AD9EA99949B08C34692B84E23D09
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 03 Jun 2025 00:27:04 +0000
ROA not before:           Tue 03 Jun 2025 00:22:04 +0000
ROA not after:            Tue 02 Jun 2026 00:27:04 +0000
asID:                     264936
IP address blocks:        2804:3034:30::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:de:1a:ab:a5:39:ad:9e:a9:99:49:b0:8c:34:69:2b:84:e2:3d:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Validity
            Not Before: Jun  3 00:22:04 2025 GMT
            Not After : Jun  2 00:27:04 2026 GMT
        Subject: CN=9990B8CE89FE19E0519196119004F6558CE86A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1d:24:83:ba:1e:28:88:f0:f3:a9:07:82:43:
                    d9:ae:0b:c6:53:f8:b5:73:52:72:3f:fc:cf:bc:d2:
                    40:22:c8:cc:48:5c:1f:75:b1:b1:00:30:09:a6:55:
                    a9:61:cf:4d:f7:e9:84:44:41:55:52:a8:b7:6e:7c:
                    7a:fd:44:ff:fd:04:27:d8:96:93:6f:53:d3:2b:f4:
                    a3:e0:04:3a:37:2c:7b:8c:76:92:8f:f8:55:0b:60:
                    6a:33:08:f4:30:4a:d8:8a:23:6a:2b:f5:7b:cc:b3:
                    5f:49:72:4c:96:73:41:ab:59:58:e6:30:7c:b8:e9:
                    2a:31:c7:c7:3f:48:08:1e:7a:53:92:89:19:5d:0f:
                    2e:89:9d:6e:f8:dc:ef:34:52:dc:71:98:80:9b:41:
                    4e:20:26:74:39:9f:a4:c0:e6:6e:57:6f:f3:d8:d1:
                    d9:fa:53:17:fb:bc:a0:3b:6c:ae:44:a1:7f:76:cd:
                    2b:90:5c:5c:97:f1:61:f4:07:88:20:d8:5e:28:cf:
                    84:b4:cb:f1:53:c6:ef:1d:0a:71:c2:8c:33:cc:af:
                    76:3a:91:33:3a:cc:c1:8c:29:bf:0b:9f:3c:a3:4b:
                    5e:0a:0c:86:54:c9:60:86:78:dc:f1:0b:7d:a3:ac:
                    8e:6e:cf:69:84:b5:32:3e:9f:19:0e:ff:7d:0f:8e:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:90:B8:CE:89:FE:19:E0:51:91:96:11:90:04:F6:55:8C:E8:6A:98
            X509v3 Authority Key Identifier:
                keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a33303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:88:36:a6:52:8a:f4:38:62:94:a3:63:89:3e:96:b2:b0:
         20:82:16:4c:3a:9e:bf:1d:eb:81:67:fe:bb:16:46:93:6e:43:
         17:07:a7:6d:78:00:ea:8b:0a:24:fc:9b:7f:d9:e6:e9:7c:e4:
         7f:a8:f9:94:d6:38:86:7c:01:63:14:15:2b:dc:6f:f3:d8:ab:
         74:4a:9c:e6:0d:bb:97:87:43:6f:ae:72:22:8b:c8:8e:d6:a5:
         f8:cf:d9:ed:00:35:d4:cf:49:d5:46:5b:5c:ef:2c:87:7f:f4:
         7f:8e:d0:b5:06:05:cf:87:9f:08:8b:c3:94:17:86:3d:0b:05:
         cf:1c:d6:52:24:d2:4f:3f:f3:58:5f:57:bf:04:5d:f9:56:45:
         c5:d3:19:54:2f:c1:36:ac:40:d7:c3:2b:0d:7f:96:1b:b1:fb:
         94:c7:83:ef:5b:84:51:4e:1a:7c:6b:93:8a:cd:a7:2d:87:72:
         29:0f:1b:e5:7b:77:c2:ad:e0:ef:15:86:88:f2:18:ab:bf:b6:
         a2:7e:f9:08:8f:43:97:e6:28:48:df:a2:bc:3d:13:65:88:8a:
         fd:d0:1a:49:46:61:b3:69:0f:8e:93:bd:ea:3b:04:dd:e7:07:
         34:ea:95:6a:d5:a1:48:3d:d3:12:51:27:c1:a7:e8:9f:5e:6a:
         a6:c3:36:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:38:32 2025 by rpki-client