Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/323830343a343962343a3a2f33322d313238203d3e20323637313938.roa
File:                     323830343a343962343a3a2f33322d313238203d3e20323637313938.roa (raw, json)
Hash identifier:          +C3HOPFMpdApHWqh4Zzwo7r4uKAX9X5SZMEJFiYQ1Hk=
Subject key identifier:   B8:2C:7A:9C:A0:E8:44:B0:5D:0F:6A:41:3C:C5:C6:6F:34:E5:A3:22
Certificate issuer:       /CN=4A878B171A89865FE50F9279FA62C99093D05B86
Certificate serial:       238BA98D19A1D93E80E45736D619CFCD310C68A5
Authority key identifier: 4A:87:8B:17:1A:89:86:5F:E5:0F:92:79:FA:62:C9:90:93:D0:5B:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A878B171A89865FE50F9279FA62C99093D05B86.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/323830343a343962343a3a2f33322d313238203d3e20323637313938.roa
Signing time:             Fri 23 May 2025 12:16:06 +0000
ROA not before:           Fri 23 May 2025 12:11:06 +0000
ROA not after:            Fri 22 May 2026 12:16:06 +0000
asID:                     267198
IP address blocks:        2804:49b4::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.crl
                          rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A878B171A89865FE50F9279FA62C99093D05B86.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 22:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:8b:a9:8d:19:a1:d9:3e:80:e4:57:36:d6:19:cf:cd:31:0c:68:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A878B171A89865FE50F9279FA62C99093D05B86
        Validity
            Not Before: May 23 12:11:06 2025 GMT
            Not After : May 22 12:16:06 2026 GMT
        Subject: CN=B82C7A9CA0E844B05D0F6A413CC5C66F34E5A322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:00:9f:1a:a8:0c:91:c0:d3:a5:32:87:f0:94:
                    f7:bc:6b:eb:cb:4a:6e:ca:d1:a6:eb:d9:d3:75:52:
                    10:73:5b:b1:ab:8d:70:48:aa:2f:47:09:07:d7:fa:
                    72:4d:c4:fd:7e:c3:be:88:56:3e:1c:dc:45:85:5b:
                    14:8a:21:ee:7d:34:61:46:7e:ce:18:24:26:3a:ea:
                    a3:43:52:84:47:ba:67:a5:d6:00:81:f0:e7:fd:5e:
                    a0:87:a6:8a:08:04:bf:29:62:82:cc:fd:57:16:c0:
                    b5:cb:ff:f6:d4:be:95:d6:15:f4:c3:03:83:42:da:
                    d3:ae:52:95:c6:2a:7e:66:b3:95:24:9c:88:dd:b5:
                    31:98:6d:0d:28:ea:c0:e4:4e:2f:6d:80:ca:b2:e6:
                    92:eb:97:84:c7:12:f7:84:bb:4c:61:b8:61:c5:03:
                    18:9c:fc:0f:7d:2e:f0:0e:8d:ef:64:29:97:9c:d4:
                    69:f9:df:24:54:db:91:f6:88:fe:6a:cb:6f:fc:08:
                    ff:28:4b:38:6f:73:fb:6a:26:e3:94:09:eb:85:a0:
                    e6:d7:00:b8:50:a3:f5:10:51:fb:53:7e:44:bb:52:
                    be:07:b2:a1:3a:94:12:bf:dc:fc:f1:32:1f:27:b2:
                    a1:cb:41:c6:02:4f:31:27:9c:7b:9c:46:68:e0:be:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2C:7A:9C:A0:E8:44:B0:5D:0F:6A:41:3C:C5:C6:6F:34:E5:A3:22
            X509v3 Authority Key Identifier:
                keyid:4A:87:8B:17:1A:89:86:5F:E5:0F:92:79:FA:62:C9:90:93:D0:5B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/4A878B171A89865FE50F9279FA62C99093D05B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A878B171A89865FE50F9279FA62C99093D05B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7g7BPKh1W1roRodADrM5SBC7k8o7pTETYth8yo3oSNdj/0/323830343a343962343a3a2f33322d313238203d3e20323637313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:a4:08:3f:df:a8:3b:e6:11:bc:b6:27:f2:53:21:6c:a8:d1:
         db:2e:f1:4e:c5:4a:e4:ae:01:36:36:a2:a3:2b:04:c7:5c:bf:
         fa:ef:dd:4f:17:5b:2d:fd:1e:f6:fa:a2:c5:e7:44:55:d8:62:
         85:14:a1:02:6f:49:42:ce:83:2b:84:a7:c3:80:94:e7:50:93:
         89:b3:84:db:96:fa:43:08:a0:6c:55:da:71:fb:0d:30:d6:ef:
         c3:e3:f7:73:f4:0f:05:e3:6c:59:10:a9:1e:95:f2:9e:69:18:
         0a:82:75:e7:f5:4e:f6:dd:f8:62:39:0f:f5:35:ca:2b:a8:fe:
         60:9b:11:32:65:8a:ea:65:f3:67:73:77:fe:74:bb:96:32:7d:
         a4:06:21:19:8f:d4:e4:59:51:95:8e:7d:a3:32:50:1c:ff:46:
         f3:b5:e6:ca:51:3d:30:33:f3:a7:75:90:ef:25:86:c6:e6:d3:
         36:52:d2:e5:e3:9f:55:5c:88:0a:f7:17:0b:f5:63:da:f5:3b:
         f8:9f:c0:7f:60:c7:23:cc:ac:df:7d:b0:ba:0f:39:b9:50:03:
         15:9a:ad:c2:67:4e:e3:d8:64:35:75:47:40:6a:59:83:86:b9:
         b5:95:bd:5a:f8:d2:57:a1:be:05:32:b3:6f:4a:c1:5e:8b:38:
         48:bc:3c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 06:26:45 2025 by rpki-client