Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33322d313238203d3e20323638303932.roa
File:                     323830343a353765303a3a2f33322d313238203d3e20323638303932.roa (raw, json)
Hash identifier:          qR22rhQbVDCb/xDW5Ocg/QpTXFaTtIDThAcQOtDX2tQ=
Subject key identifier:   82:6D:70:7F:84:D7:59:E4:FA:69:BB:01:9F:31:1D:59:65:E7:99:9B
Certificate issuer:       /CN=44918B3038EF4B7A42902D37F428845CE629D46C
Certificate serial:       2B7ECB421798DB806C516DCB56CD11C46DF9E4C2
Authority key identifier: 44:91:8B:30:38:EF:4B:7A:42:90:2D:37:F4:28:84:5C:E6:29:D4:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44918B3038EF4B7A42902D37F428845CE629D46C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33322d313238203d3e20323638303932.roa
Signing time:             Thu 03 Jul 2025 17:58:30 +0000
ROA not before:           Thu 03 Jul 2025 17:53:30 +0000
ROA not after:            Thu 02 Jul 2026 17:58:30 +0000
asID:                     268092
IP address blocks:        2804:57e0::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/44918B3038EF4B7A42902D37F428845CE629D46C.crl
                          rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/44918B3038EF4B7A42902D37F428845CE629D46C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44918B3038EF4B7A42902D37F428845CE629D46C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 13:06:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7e:cb:42:17:98:db:80:6c:51:6d:cb:56:cd:11:c4:6d:f9:e4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44918B3038EF4B7A42902D37F428845CE629D46C
        Validity
            Not Before: Jul  3 17:53:30 2025 GMT
            Not After : Jul  2 17:58:30 2026 GMT
        Subject: CN=826D707F84D759E4FA69BB019F311D5965E7999B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c4:2d:1b:54:1b:bc:20:9c:38:40:f4:9c:0f:
                    27:50:48:c0:d3:15:e4:df:c3:a5:1b:49:52:c1:d5:
                    4b:64:94:78:e5:48:98:2f:34:2c:af:a3:a0:dc:d0:
                    e2:d5:91:0f:96:0a:0a:21:64:58:55:60:67:33:7f:
                    b2:c8:f4:15:3e:5f:e5:cf:cf:01:60:7e:4f:82:eb:
                    66:73:c4:8b:db:39:f1:46:a5:a4:b6:4d:0b:c3:3a:
                    0f:46:2a:bc:ab:9f:d6:1f:0a:8a:e2:ec:22:e6:bf:
                    01:6b:ad:b3:77:48:30:57:d1:b6:e8:93:5c:d3:d5:
                    c0:80:e4:88:87:bb:8a:45:29:0b:ed:fe:3d:71:61:
                    8f:66:91:2b:9c:82:91:f3:3d:07:7f:ae:63:6e:a6:
                    80:dc:10:5a:01:39:48:88:e8:e7:83:62:3b:93:4c:
                    68:78:e8:93:cc:91:d6:bf:a2:72:fa:f5:3e:8f:ca:
                    cf:76:fd:29:4b:d4:a1:1c:55:eb:41:f2:24:67:ff:
                    01:d6:12:f7:54:77:2e:e7:b8:54:df:da:5c:74:3f:
                    51:55:0b:c4:d6:02:b2:d4:5d:79:53:f9:40:b3:7c:
                    3e:5e:ba:3d:68:27:a3:68:b7:48:26:a2:b1:cf:c8:
                    07:0b:15:92:f6:9d:90:33:ed:30:cc:9f:c5:9f:07:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:6D:70:7F:84:D7:59:E4:FA:69:BB:01:9F:31:1D:59:65:E7:99:9B
            X509v3 Authority Key Identifier:
                keyid:44:91:8B:30:38:EF:4B:7A:42:90:2D:37:F4:28:84:5C:E6:29:D4:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/44918B3038EF4B7A42902D37F428845CE629D46C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44918B3038EF4B7A42902D37F428845CE629D46C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/323830343a353765303a3a2f33322d313238203d3e20323638303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:5c:2f:21:79:dc:b5:45:e2:8f:02:0e:77:bc:33:78:5d:19:
         5a:0e:56:40:bd:88:d3:bb:f3:54:79:82:81:1b:fc:2f:86:3e:
         51:dc:66:62:02:5b:5c:80:f6:93:c7:ab:26:77:df:a5:ec:9a:
         57:e4:bb:b7:22:e4:a6:74:57:94:6d:a5:81:09:7f:58:7e:ac:
         b2:a8:dc:f6:b1:23:6c:97:1f:92:ab:6f:4b:29:49:06:d3:49:
         51:00:22:84:00:30:76:1e:ce:da:b5:3f:43:49:de:24:48:15:
         e9:b1:3d:ae:5b:0c:ce:7d:c7:ff:44:b9:96:05:f1:c6:ac:ca:
         72:11:a7:70:1f:c0:3d:62:9e:ca:45:93:2c:ec:d7:78:81:86:
         4f:b1:cf:f6:71:b3:19:cd:29:63:06:56:ed:74:49:f2:58:24:
         b4:36:d0:c6:9b:7b:4c:b1:53:de:f9:b1:49:41:4b:92:70:95:
         98:eb:7d:67:bc:fb:4d:a2:8f:16:9a:16:36:c5:24:97:a2:d1:
         94:cb:87:a5:19:a1:00:23:ea:76:b0:35:fe:fd:09:08:13:ab:
         62:fa:12:25:3d:9c:5f:63:11:aa:a7:a2:86:0c:a0:4b:21:04:
         fa:bc:83:90:e6:0a:c1:f3:3f:37:b2:0c:45:99:2d:f6:b3:c5:
         0b:fd:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:57:06 2025 by rpki-client