Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa
File:                     323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa (raw, json)
Hash identifier:          3ANBCqQIukCjm+DMeGW2doYHW+nHMK9Agdw7h5lTu0g=
Subject key identifier:   88:10:83:30:3D:A2:C2:F0:A7:4C:16:88:AE:C4:E3:1D:A8:F7:25:AA
Certificate issuer:       /CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
Certificate serial:       123264EFBED70D450E3F162B3DB9AB2A81D0184D
Authority key identifier: AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa
Signing time:             Thu 29 May 2025 18:50:14 +0000
ROA not before:           Thu 29 May 2025 18:45:14 +0000
ROA not after:            Thu 28 May 2026 18:50:14 +0000
asID:                     262503
IP address blocks:        2804:2be0:9200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl
                          rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 09:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:32:64:ef:be:d7:0d:45:0e:3f:16:2b:3d:b9:ab:2a:81:d0:18:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC64B2D1771AB30E18883CDD14001A82D9905F98
        Validity
            Not Before: May 29 18:45:14 2025 GMT
            Not After : May 28 18:50:14 2026 GMT
        Subject: CN=881083303DA2C2F0A74C1688AEC4E31DA8F725AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:01:25:96:3e:61:be:4a:26:5f:bf:23:72:
                    11:08:74:87:ee:f7:bf:08:0c:af:03:e8:9b:be:2b:
                    af:08:2c:45:60:8c:f0:57:25:4c:d5:04:55:7a:98:
                    3b:63:b9:7f:55:7f:35:8f:fa:4d:88:3c:b5:74:27:
                    05:e3:63:5c:62:9c:a5:f6:6c:1d:85:ac:0c:b9:4b:
                    b2:01:97:95:8c:0c:17:fe:f1:1e:9a:85:4a:d9:3e:
                    29:0a:eb:fa:b1:c6:83:da:bb:44:60:d6:26:25:6f:
                    83:40:39:5d:65:4f:7c:7f:26:91:96:9d:b1:64:9c:
                    53:76:42:c9:a6:f5:89:4a:12:1b:3e:56:9e:9f:f8:
                    1d:3e:a6:1b:7f:92:39:11:b6:be:b0:2a:50:3c:2f:
                    e8:fe:14:c8:a6:ea:3a:52:27:44:90:1d:69:d6:80:
                    be:0c:94:1f:19:e7:e6:46:e7:61:cf:1d:ed:6b:a2:
                    ad:ba:ae:e7:c7:fb:cc:58:6c:2c:79:32:4f:d7:e7:
                    a4:86:93:8f:e5:8d:1d:93:ce:d0:61:71:f3:68:7c:
                    1d:f2:bf:df:e6:e4:c3:e9:af:14:f3:2f:7b:e7:c2:
                    c1:53:1b:48:c8:84:67:9c:90:8f:8c:de:8f:ca:9d:
                    68:d1:d8:91:c9:8b:28:64:64:e2:8d:a5:e3:3e:e5:
                    0b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:83:30:3D:A2:C2:F0:A7:4C:16:88:AE:C4:E3:1D:A8:F7:25:AA
            X509v3 Authority Key Identifier:
                keyid:AC:64:B2:D1:77:1A:B3:0E:18:88:3C:DD:14:00:1A:82:D9:90:5F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/AC64B2D1771AB30E18883CDD14001A82D9905F98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC64B2D1771AB30E18883CDD14001A82D9905F98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/323830343a326265303a393230303a3a2f34302d3430203d3e20323632353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2be0:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:37:b1:4c:f4:18:e7:76:6c:9b:e6:86:85:02:ef:34:62:d0:
         6e:c6:43:6f:81:df:e7:09:4c:97:fb:39:ac:7c:cf:67:d9:a5:
         61:ff:ec:28:59:bc:58:1b:a7:58:cb:53:c3:f7:e5:e6:bc:1b:
         8e:ec:0a:49:92:02:1e:6c:89:4d:d1:1d:65:fc:4c:94:33:41:
         03:1d:f4:85:72:34:3e:8c:14:ca:34:57:fc:32:a9:c4:70:5f:
         9a:ee:4a:04:8b:74:4f:9f:c4:a5:27:6c:0c:d2:a9:53:a3:99:
         18:bf:a1:6f:c1:13:be:17:aa:a6:9c:6b:e2:2c:4e:0b:09:6b:
         77:6e:39:51:40:80:d0:60:df:06:e5:93:fc:82:f4:6e:24:be:
         33:05:d7:3c:ad:dd:3a:0d:c2:90:27:ad:af:5a:5f:0a:31:5e:
         ca:98:29:1f:9c:13:4d:a5:94:48:a2:75:21:43:4d:e3:ff:9d:
         ac:a9:12:31:c9:09:b3:e1:3d:8d:1d:66:71:d7:34:05:71:6c:
         16:45:87:aa:d9:88:76:5c:88:de:5e:9a:92:27:5a:67:74:bf:
         46:a1:34:a6:fe:6b:52:f8:03:fa:ad:39:93:15:36:ad:9e:10:
         88:9b:49:26:64:ef:94:4d:43:e9:46:84:78:51:22:98:ba:96:
         ea:15:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 19:49:52 2025 by rpki-client