Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          jNRlE2sbLp0JxGKhI1nfC4O8jA6jGd1U7y1oOENnOEI=
Subject key identifier:   59:55:C3:49:19:E7:C6:36:2C:BD:7A:43:93:D9:7B:E3:0F:DB:57:7F
Certificate issuer:       /CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
Certificate serial:       50EBE9E82317E0E8E16D66E0D145D7B9E55CC984
Authority key identifier: 3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Tue 03 Jun 2025 00:27:03 +0000
ROA not before:           Tue 03 Jun 2025 00:22:03 +0000
ROA not after:            Tue 02 Jun 2026 00:27:03 +0000
asID:                     264936
IP address blocks:        2804:3034::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 19:19:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:eb:e9:e8:23:17:e0:e8:e1:6d:66:e0:d1:45:d7:b9:e5:5c:c9:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8F0CFC9B35F328402AD269F14D94BF6C5C7372
        Validity
            Not Before: Jun  3 00:22:03 2025 GMT
            Not After : Jun  2 00:27:03 2026 GMT
        Subject: CN=5955C34919E7C6362CBD7A4393D97BE30FDB577F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:a2:70:2a:69:88:d2:ce:75:95:be:cb:02:
                    82:af:61:18:8d:c2:ab:a1:ac:9f:1c:cf:e5:62:80:
                    24:f4:35:4f:c7:c7:d8:2d:72:d2:d4:97:fc:50:3f:
                    6b:66:ec:ef:d1:c5:51:e1:b8:ba:40:9f:7f:f4:f9:
                    cd:f6:7b:1e:2e:68:5c:ea:cb:32:5b:30:45:9f:9b:
                    a8:d1:7b:51:e1:82:07:07:1c:f8:1f:21:5c:83:85:
                    4f:46:a5:23:0e:0c:ff:2d:b3:c0:2d:bd:99:06:04:
                    d0:2b:5f:a7:58:0a:7f:d1:bc:b3:3d:90:18:6c:45:
                    be:70:5c:ac:b6:85:67:ef:69:a9:99:2c:31:e6:61:
                    a1:da:ab:14:a9:19:23:65:50:7d:3b:f4:ac:cc:ba:
                    c7:25:74:25:4b:e6:ea:64:3d:cd:c7:78:f1:1c:45:
                    1c:2a:6d:59:97:32:3d:ad:ae:ec:79:4a:35:64:95:
                    b9:11:1d:2d:1e:58:30:8e:e8:49:cb:06:d2:a0:10:
                    cb:57:55:d3:05:8b:40:a8:05:6d:1f:07:40:0d:15:
                    77:db:88:d0:56:1b:7f:82:f7:12:cd:df:0a:38:2d:
                    0c:03:7e:e7:0a:22:4b:30:ff:f2:f5:14:e0:ca:10:
                    1c:bd:9c:da:55:cf:4a:21:a9:12:41:b7:ec:54:9a:
                    23:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:55:C3:49:19:E7:C6:36:2C:BD:7A:43:93:D9:7B:E3:0F:DB:57:7F
            X509v3 Authority Key Identifier:
                keyid:3C:8F:0C:FC:9B:35:F3:28:40:2A:D2:69:F1:4D:94:BF:6C:5C:73:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8F0CFC9B35F328402AD269F14D94BF6C5C7372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/0/323830343a333033343a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034::/44

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:8b:02:bf:2a:c4:67:68:e3:e5:77:78:f7:12:b9:3d:ff:
         59:80:00:97:4b:22:8d:14:6a:73:9e:1c:92:b8:08:70:24:fa:
         12:8f:c1:99:ee:f5:ff:4c:61:fe:3f:2f:a0:b2:bb:f3:03:03:
         12:1f:35:b1:b7:d3:00:13:54:df:5e:78:03:11:b7:bd:a5:be:
         ec:89:58:ce:b3:0a:f8:a2:6e:9b:25:e2:30:a4:81:95:7b:52:
         09:df:a6:24:8a:72:75:7c:60:25:74:ad:7c:39:ca:e1:f6:21:
         47:6d:16:03:a5:e1:11:15:93:5f:28:d1:17:bd:f5:16:1a:c7:
         e9:6e:53:ce:e7:3d:90:45:fc:d2:9a:83:25:69:80:4f:40:aa:
         f8:1d:af:a6:7b:ef:15:02:48:5c:74:76:36:4a:8c:28:b8:70:
         ba:f7:6f:ce:2a:7e:4e:3d:af:54:fc:30:cb:ef:7a:f8:ed:25:
         43:20:dd:cb:08:22:e9:9f:bd:e1:27:7b:04:13:3e:4c:f9:6d:
         94:27:34:bf:53:5f:22:63:45:bb:88:39:7d:26:12:ff:38:90:
         18:72:4c:34:7d:b3:c5:ae:10:be:f2:4b:21:b7:81:60:b6:52:
         73:f6:08:27:b7:a9:86:a3:7b:13:8b:9e:a0:51:ec:c4:d4:cc:
         58:e5:c6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:15:30 2025 by rpki-client