Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa
File:                     323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa (raw, json)
Hash identifier:          ugOQ0uOArF5mb7Es6mKB3ouzjPIoi3hhDRVjXgmrlEQ=
Subject key identifier:   30:8C:D4:B1:F2:9F:C4:AC:2D:F7:78:FA:4A:4C:8C:49:5D:18:DB:30
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       542C37C6C235FED46D1C1B031FE43F9B25E3F79C
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa
Signing time:             Thu 08 May 2025 19:04:25 +0000
ROA not before:           Thu 08 May 2025 18:59:25 +0000
ROA not after:            Thu 07 May 2026 19:04:25 +0000
asID:                     266544
IP address blocks:        2804:3da4:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 22:21:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:2c:37:c6:c2:35:fe:d4:6d:1c:1b:03:1f:e4:3f:9b:25:e3:f7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: May  8 18:59:25 2025 GMT
            Not After : May  7 19:04:25 2026 GMT
        Subject: CN=308CD4B1F29FC4AC2DF778FA4A4C8C495D18DB30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4b:13:93:d7:34:b4:b3:9f:f7:89:dc:8b:f4:
                    30:8b:0d:6c:8d:df:99:3b:ec:3b:ef:ed:9f:73:ab:
                    54:f3:81:f2:77:0d:82:c9:f2:6d:b2:a3:13:c6:6e:
                    8c:34:4d:29:0f:e8:e4:91:0a:a9:89:4d:87:ac:83:
                    5d:77:b7:20:93:df:2a:7e:3d:99:5a:76:4d:dc:e1:
                    18:f8:af:ab:2f:41:c2:bc:9d:e6:e2:63:d2:fc:84:
                    55:93:68:54:a1:ec:2f:d8:40:1e:2b:c1:99:75:b4:
                    f4:41:f5:52:ed:90:41:1b:cd:d2:c3:d9:73:62:7e:
                    5a:e7:52:04:8a:e0:be:f7:fe:42:bd:0e:4e:a1:90:
                    c0:a7:e7:48:e0:b8:b6:aa:69:af:3d:01:b7:a9:f9:
                    e0:9e:03:08:5b:de:ad:f6:ab:b0:17:f9:d8:7a:e4:
                    4c:de:6d:2a:3e:1c:c1:b0:e7:aa:93:1d:45:bb:55:
                    55:c4:43:1d:69:f2:1a:f2:30:3b:02:de:fb:55:3f:
                    d1:54:f9:85:71:1c:63:2a:26:80:7c:71:7b:94:e1:
                    4c:73:0e:da:c9:73:fc:49:7b:8b:6c:10:8b:fa:79:
                    83:5a:85:b4:3e:31:d2:4a:0c:37:79:3c:81:34:b1:
                    69:33:6e:5c:29:a3:1c:cd:58:fa:72:b2:80:1b:d7:
                    24:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8C:D4:B1:F2:9F:C4:AC:2D:F7:78:FA:4A:4C:8C:49:5D:18:DB:30
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a666666663a3a2f34382d3438203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da4:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:83:53:a5:09:82:29:82:78:16:18:85:3d:d6:a8:b9:10:ba:
         d3:4f:59:45:8f:b6:f7:28:70:7f:e6:03:47:07:62:97:c1:3d:
         df:89:08:57:91:6c:eb:c6:b2:94:a8:c2:13:84:f5:da:76:f9:
         7b:2d:2b:cc:a5:fa:15:a3:c9:55:b6:8f:6c:51:f6:e9:a6:f7:
         3c:2e:de:64:a4:d5:3c:9d:ba:07:11:d9:e2:fc:00:a6:19:1e:
         90:b0:42:4a:a1:52:d2:d6:5f:ca:92:83:36:94:69:f2:c6:85:
         52:b9:61:b3:6a:b7:d0:f7:c8:c4:7d:35:c4:3d:85:db:f0:3b:
         45:63:48:b2:87:5b:dc:dc:84:d5:22:27:c4:c3:e7:a7:ad:ba:
         08:9b:79:fc:b0:3e:07:5f:e7:fc:84:59:41:0b:74:67:34:99:
         f4:81:c3:90:60:f7:b6:fb:20:dc:57:a3:88:58:57:2d:62:5c:
         19:30:e3:d9:ae:07:d4:89:0f:77:2c:62:76:41:01:cb:c2:35:
         bc:94:9e:e0:8f:b3:1e:b4:35:cf:ea:b3:c1:6a:48:62:4d:73:
         4e:e5:47:88:80:9e:43:e4:f5:8c:bd:32:69:a7:32:11:dc:40:
         3a:9a:b3:d8:92:36:75:02:41:db:04:f2:a4:5e:07:3a:4b:72:
         d0:1e:90:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 14:36:00 2025 by rpki-client