Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a663a3a2f34382d3438203d3e203533313533.roa
File:                     323830343a3733383a663a3a2f34382d3438203d3e203533313533.roa (raw, json)
Hash identifier:          xWe8RtJr8hJDrBVcRC6QtBrKmnVKslYLrjR6EstR6VU=
Subject key identifier:   8F:81:F9:2B:6B:33:B8:4D:D4:8D:A6:2C:7A:9E:0E:16:27:9E:9C:37
Certificate issuer:       /CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
Certificate serial:       2BB6A66E8B97D4522F010DA45F466E7F8CAB5EF9
Authority key identifier: 85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a663a3a2f34382d3438203d3e203533313533.roa
Signing time:             Mon 05 May 2025 18:46:04 +0000
ROA not before:           Mon 05 May 2025 18:41:04 +0000
ROA not after:            Mon 04 May 2026 18:46:04 +0000
asID:                     53153
IP address blocks:        2804:738:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl
                          rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 12:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:b6:a6:6e:8b:97:d4:52:2f:01:0d:a4:5f:46:6e:7f:8c:ab:5e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85CB838E34B41EAF2AA18ECCB28128B775E7DF08
        Validity
            Not Before: May  5 18:41:04 2025 GMT
            Not After : May  4 18:46:04 2026 GMT
        Subject: CN=8F81F92B6B33B84DD48DA62C7A9E0E16279E9C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:e5:88:b9:d4:77:77:37:71:36:e6:d8:ef:
                    da:3a:0a:2a:3e:4c:32:18:97:45:f1:b3:b2:c4:a5:
                    16:1e:94:48:4d:04:a1:bb:df:0e:06:e8:c2:2e:96:
                    2c:0c:ee:bb:79:6f:d2:0d:0d:cb:45:ec:47:40:df:
                    d5:95:42:d1:34:89:a9:15:63:19:85:83:40:c3:05:
                    e3:3b:13:e8:f6:96:e3:b4:c8:05:93:94:e2:70:a4:
                    bb:e6:3f:2b:22:c0:50:2f:c8:b8:3e:5e:17:b3:d3:
                    2d:cc:b5:12:16:36:a4:8c:43:71:97:2b:d6:6d:49:
                    f4:19:8e:be:41:57:62:7f:91:04:a6:e1:fe:5b:6e:
                    39:52:f1:49:c0:99:20:64:36:1a:d0:85:6b:37:59:
                    51:24:65:1f:86:79:f9:30:8f:5c:c3:83:ab:a8:a2:
                    ac:74:2c:ca:67:d6:86:8d:eb:53:6a:d9:62:89:0f:
                    6f:a1:00:3a:3c:0a:3f:89:ac:5b:23:56:e9:ad:7c:
                    40:2a:b1:c5:91:eb:a6:b3:18:48:5a:0d:f4:9a:4d:
                    82:2c:93:1f:55:a8:af:88:78:50:cb:85:10:5d:9c:
                    3a:b1:fb:63:cf:06:6c:c5:e0:34:08:c7:1b:d9:55:
                    85:92:89:91:66:47:78:4d:4f:78:4d:d1:70:e6:14:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:81:F9:2B:6B:33:B8:4D:D4:8D:A6:2C:7A:9E:0E:16:27:9E:9C:37
            X509v3 Authority Key Identifier:
                keyid:85:CB:83:8E:34:B4:1E:AF:2A:A1:8E:CC:B2:81:28:B7:75:E7:DF:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85CB838E34B41EAF2AA18ECCB28128B775E7DF08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nsdtLtmqpH3PPmbrsLsHXhm7jxkPrTsdJrnvgNzRBJh/0/323830343a3733383a663a3a2f34382d3438203d3e203533313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:738:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:83:17:8e:70:d6:10:7c:7b:2b:21:79:53:a3:4a:c6:6e:7e:
         ae:34:5c:dc:84:c4:d4:a3:01:6b:39:28:95:21:b1:07:cf:4f:
         3c:b0:62:1e:e3:6f:53:1d:ed:d9:7e:43:e3:4e:ae:c4:6e:f5:
         97:a2:17:7d:3c:c4:a9:24:e2:5b:a4:a9:51:a9:eb:6c:c7:d8:
         a2:3c:ca:e6:cd:1b:e5:24:ec:db:d6:8d:c6:40:bb:ab:46:cc:
         aa:e2:0c:4c:6c:fd:1b:e2:77:46:c6:0e:b9:6e:0f:d5:32:1d:
         61:2b:d8:b3:c4:f2:05:40:56:cc:0e:0f:0e:22:0c:0c:4a:43:
         f6:b8:90:9f:16:c1:4a:1a:ce:46:79:53:01:41:9f:f1:78:9b:
         48:f8:79:d5:c0:6d:58:7a:e9:b4:9d:69:fa:85:b1:4e:10:c7:
         27:1a:b1:a6:44:cf:4f:a7:e1:2e:24:c3:24:ce:b4:ab:47:83:
         30:67:d8:9c:98:98:6d:33:b8:ab:2a:61:b9:00:e0:dc:f5:11:
         56:d9:a6:43:e6:aa:bf:c7:54:6c:ec:19:cc:53:f0:db:50:1e:
         36:03:ed:47:80:65:13:76:6e:b3:65:15:3a:a2:40:22:6f:31:
         e7:b1:ee:c7:9a:68:3a:ce:fc:68:e6:36:df:9b:27:b3:1a:8a:
         c4:c1:bc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:06:58 2025 by rpki-client