Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d313238203d3e203631353833.roa
File:                     323830343a313864383a3a2f33322d313238203d3e203631353833.roa (raw, json)
Hash identifier:          ALrk4GkwzW/CUCGGH5nZ+mNUu7DGUl6592H+MPhd8GQ=
Subject key identifier:   09:B5:AE:13:5F:51:AD:17:EB:6E:FC:97:F3:69:1E:B0:09:A0:21:E7
Certificate issuer:       /CN=3CB1370100AB2291FE24983311386BE8544EB443
Certificate serial:       5216306EED93F6FC7642E85C92445B1B4F69C836
Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d313238203d3e203631353833.roa
Signing time:             Wed 28 May 2025 18:47:33 +0000
ROA not before:           Wed 28 May 2025 18:42:33 +0000
ROA not after:            Wed 27 May 2026 18:47:33 +0000
asID:                     61583
IP address blocks:        2804:18d8::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl
                          rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 02:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:16:30:6e:ed:93:f6:fc:76:42:e8:5c:92:44:5b:1b:4f:69:c8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443
        Validity
            Not Before: May 28 18:42:33 2025 GMT
            Not After : May 27 18:47:33 2026 GMT
        Subject: CN=09B5AE135F51AD17EB6EFC97F3691EB009A021E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a0:3c:73:b5:b6:67:d2:9b:ea:86:e7:90:24:
                    fe:ff:34:c2:1f:41:5f:09:95:09:1b:e5:4e:f8:7f:
                    0b:63:d8:e2:af:3d:c9:47:4f:cc:99:df:a4:56:c3:
                    d5:69:17:88:38:1e:d4:57:6a:2d:38:d2:05:4c:c1:
                    ac:ba:d4:50:50:27:4c:03:af:26:8e:3b:db:9f:4b:
                    98:9e:72:74:94:19:c8:e8:90:32:09:0c:a4:e5:d7:
                    46:6b:ed:0b:cc:c2:9d:8f:de:8a:83:15:11:08:00:
                    37:35:a0:68:53:17:d0:d7:cf:68:24:50:0c:39:c8:
                    be:07:9a:f2:b3:d9:57:4e:dd:24:f5:e5:5d:19:1e:
                    b4:e8:78:1c:76:e3:a8:67:44:e9:7d:98:58:52:21:
                    bb:4c:25:82:35:cf:49:a3:1f:1b:19:fa:2e:0d:02:
                    8d:d1:a8:78:c8:c5:28:58:68:61:00:35:dc:86:6a:
                    5c:d6:d7:19:29:3a:2c:73:fd:b4:d4:07:b4:e5:bd:
                    e6:7d:e2:24:29:67:dc:1b:ec:e7:13:0e:1b:2d:fa:
                    c1:5e:5f:99:e9:69:d1:2a:61:0c:92:4b:92:ee:0b:
                    5f:f6:e0:46:5b:88:10:75:f6:4c:c6:eb:34:c3:b2:
                    5b:d4:2a:8e:ec:0d:41:4f:f7:8f:b1:d2:28:8f:22:
                    2d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B5:AE:13:5F:51:AD:17:EB:6E:FC:97:F3:69:1E:B0:09:A0:21:E7
            X509v3 Authority Key Identifier:
                keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d313238203d3e203631353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:1e:e9:b3:27:b4:cc:7a:d7:8d:75:94:7b:05:9c:f6:7d:b0:
         df:6b:62:c3:76:92:8a:6c:f8:0f:b6:5b:71:14:21:06:de:65:
         ec:3a:eb:cf:aa:26:7c:6f:f7:53:48:87:8c:03:98:10:90:49:
         e3:c5:c5:eb:26:a5:e5:54:c9:b6:74:2d:08:4a:28:b1:72:cd:
         ba:7d:c6:7a:f4:ed:11:ab:fe:6c:f3:50:41:60:24:53:b8:56:
         5d:98:e0:00:c4:52:7e:d9:be:79:d4:60:1a:be:dd:18:73:47:
         eb:20:06:4b:07:0b:a6:34:d7:eb:bd:13:fa:25:cb:31:93:1a:
         c7:53:d7:88:0b:8a:23:8c:7a:8f:55:e1:90:65:28:3b:72:7b:
         4c:c7:6d:c2:d3:19:1b:9e:aa:5c:e1:9b:d9:46:fa:2e:a2:63:
         fe:79:06:e2:e5:42:24:2a:7b:9f:27:7f:3e:d9:fe:38:7f:26:
         be:45:c0:e0:b7:7c:a0:ab:10:03:6d:f9:48:0e:52:4e:20:02:
         a1:f8:0b:29:39:9c:c2:fc:e7:18:f8:7d:a8:07:52:cb:88:10:
         f7:6a:28:e8:64:f7:c2:4d:c5:7c:54:a4:d4:b5:c7:53:13:47:
         c7:21:5d:a9:33:d7:a4:21:2f:3f:6e:eb:e7:b0:17:bd:c3:3d:
         7d:9f:7a:86
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUUhYwbu2T9vx2QuhckkRbG09pyDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0NCMTM3MDEwMEFCMjI5MUZFMjQ5ODMzMTEzODZCRTg1
NDRFQjQ0MzAeFw0yNTA1MjgxODQyMzNaFw0yNjA1MjcxODQ3MzNaMDMxMTAvBgNV
BAMTKDA5QjVBRTEzNUY1MUFEMTdFQjZFRkM5N0YzNjkxRUIwMDlBMDIxRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQoDxztbZn0pvqhueQJP7/NMIf
QV8JlQkb5U74fwtj2OKvPclHT8yZ36RWw9VpF4g4HtRXai040gVMway61FBQJ0wD
ryaOO9ufS5iecnSUGcjokDIJDKTl10Zr7QvMwp2P3oqDFREIADc1oGhTF9DXz2gk
UAw5yL4HmvKz2VdO3ST15V0ZHrToeBx246hnROl9mFhSIbtMJYI1z0mjHxsZ+i4N
Ao3RqHjIxShYaGEANdyGalzW1xkpOixz/bTUB7TlveZ94iQpZ9wb7OcTDhst+sFe
X5npadEqYQySS5LuC1/24EZbiBB19kzG6zTDslvUKo7sDUFP94+x0iiPIi1fAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUCbWuE19RrRfrbvyX82kesAmgIecwHwYDVR0j
BBgwFoAUPLE3AQCrIpH+JJgzEThr6FROtEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOFVvU2t2U1NOd29ZTkFkNlBNekFVdVVjaFc2WUJhdWd6cEhRTERTTVZF
c0ovMC8zQ0IxMzcwMTAwQUIyMjkxRkUyNDk4MzMxMTM4NkJFODU0NEVCNDQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDQjEzNzAxMDBBQjIyOTFG
RTI0OTgzMzExMzg2QkU4NTQ0RUI0NDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhVb1NrdlNTTndvWU5BZDZQTXpBVXVVY2hXNllCYXVnenBIUUxEU01WRXNKLzAv
MzIzODMwMzQzYTMxMzg2NDM4M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNjMx
MzUzODMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQY2DANBgkqhkiG9w0BAQsFAAOCAQEAlB7psye0
zHrXjXWUewWc9n2w32tiw3aSimz4D7ZbcRQhBt5l7Drrz6omfG/3U0iHjAOYEJBJ
48XF6yal5VTJtnQtCEoosXLNun3GevTtEav+bPNQQWAkU7hWXZjgAMRSftm+edRg
Gr7dGHNH6yAGSwcLpjTX670T+iXLMZMax1PXiAuKI4x6j1XhkGUoO3J7TMdtwtMZ
G56qXOGb2Ub6LqJj/nkG4uVCJCp7nyd/Ptn+OH8mvkXA4Ld8oKsQA235SA5STiAC
ofgLKTmcwvznGPh9qAdSy4gQ92oo6GT3wk3FfFSk1LXHUxNHxyFdqTPXpCEvP27r
57AXvcM9fZ96hg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:33 2025 by rpki-client