Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/323830343a353234383a3a2f33362d3336203d3e20323638353038.roa
File:                     323830343a353234383a3a2f33362d3336203d3e20323638353038.roa (raw, json)
Hash identifier:          Q2ga1fh8zdnAx248rFjzCCrVwQVWJmop5W+Ur+9+uAo=
Subject key identifier:   C0:93:7F:94:FB:76:F9:34:03:BE:D5:9F:EF:4A:12:B6:0A:63:BC:77
Certificate issuer:       /CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
Certificate serial:       1CB523BDD7F5DD2375A69B7481A5FB49D9DE73B4
Authority key identifier: 18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/323830343a353234383a3a2f33362d3336203d3e20323638353038.roa
Signing time:             Sat 15 Mar 2025 16:57:41 +0000
ROA not before:           Sat 15 Mar 2025 16:52:41 +0000
ROA not after:            Sat 14 Mar 2026 16:57:41 +0000
asID:                     268508
IP address blocks:        2804:5248::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl
                          rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 13:35:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b5:23:bd:d7:f5:dd:23:75:a6:9b:74:81:a5:fb:49:d9:de:73:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18B10F2F5D78AD441A46176F9DF278F0DE73D40E
        Validity
            Not Before: Mar 15 16:52:41 2025 GMT
            Not After : Mar 14 16:57:41 2026 GMT
        Subject: CN=C0937F94FB76F93403BED59FEF4A12B60A63BC77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b9:53:c2:5b:db:e7:31:0f:29:a7:f4:13:1a:
                    0b:5e:8f:a2:b1:fe:88:4e:ad:00:a0:ee:4d:c2:17:
                    41:aa:84:36:fe:44:90:08:77:7c:c0:7a:77:43:45:
                    ca:cc:e2:04:3a:ec:68:8d:d1:b4:fa:1e:65:45:82:
                    ff:f7:f1:98:1a:a5:7d:5b:24:fd:fc:0f:38:34:98:
                    02:71:7d:f2:33:cd:7d:cd:e3:3e:ba:03:f2:fe:07:
                    fd:91:6d:9e:3e:66:3f:6d:76:13:4a:12:9a:df:0a:
                    4f:d0:ca:66:df:6a:97:89:d9:2a:1b:0b:3b:cd:b1:
                    3a:f3:fc:dc:23:39:1a:a7:9d:e7:c5:5e:96:cb:23:
                    85:4b:6e:6e:5f:d0:f7:87:7f:af:44:3a:51:15:aa:
                    11:03:56:b6:04:9b:a6:aa:4d:e5:f3:24:13:ca:a0:
                    ad:c8:fe:cb:17:ba:14:93:49:6f:f1:99:b0:f6:40:
                    2a:ac:7f:d6:59:cc:5e:fc:bc:48:28:78:12:bb:b0:
                    b8:4a:54:20:7e:bc:c4:cf:f8:8a:14:bc:72:fc:33:
                    c6:4b:b7:37:5c:cf:87:0d:04:d6:35:ce:ca:ae:81:
                    cc:2e:c7:2c:8a:75:ab:e4:ae:5a:c4:c3:27:26:98:
                    cd:4f:9a:d3:fc:2f:9e:40:54:49:e6:c2:4f:5f:c9:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:93:7F:94:FB:76:F9:34:03:BE:D5:9F:EF:4A:12:B6:0A:63:BC:77
            X509v3 Authority Key Identifier:
                keyid:18:B1:0F:2F:5D:78:AD:44:1A:46:17:6F:9D:F2:78:F0:DE:73:D4:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18B10F2F5D78AD441A46176F9DF278F0DE73D40E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ChscaDSF5ioaTrS9sQ5txuVtsb2ZcVQapFyjH2tke1V/0/323830343a353234383a3a2f33362d3336203d3e20323638353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5248::/36

    Signature Algorithm: sha256WithRSAEncryption
         5f:d3:62:38:58:f8:83:0d:37:6d:cb:a0:08:6a:c5:cb:a4:87:
         cd:82:52:0e:5b:34:53:19:83:3a:cc:45:61:38:bb:b0:f9:db:
         b4:6a:b2:75:0f:ec:ba:a2:3d:e1:59:3f:54:fa:0a:2c:ec:a6:
         ba:77:08:2a:00:57:89:74:0b:ff:37:c1:68:aa:c8:fd:02:a2:
         a6:de:dc:cf:57:14:17:05:8e:5e:91:62:e4:6d:cb:5d:8a:a5:
         e6:04:9f:08:ef:24:0a:bb:5c:45:33:56:35:dd:6e:df:b1:21:
         3c:e4:7c:50:7e:b9:26:7c:06:81:96:0c:5f:0d:63:11:94:20:
         64:25:97:ee:d4:53:c7:c2:48:4e:b8:f8:31:e8:37:9d:4d:95:
         2e:50:e0:73:bb:77:93:8b:1b:03:d5:cc:14:34:5c:2f:7f:92:
         1c:ad:61:b4:0a:fb:b8:d0:50:52:2e:33:be:1f:ec:ed:7c:22:
         50:57:9c:87:b6:21:33:67:e6:7e:1e:2b:68:89:9f:50:95:ed:
         68:72:a5:35:9e:a1:2a:af:79:02:28:0c:d0:d5:77:59:46:52:
         7c:4b:97:5b:5c:5e:2e:e0:e3:03:ee:f1:97:1d:60:55:e5:7a:
         e6:50:3b:1b:3e:f2:8c:f3:5c:3a:51:ac:d3:bb:e4:c6:52:ef:
         7a:4b:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:32:05 2025 by rpki-client