Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/323830343a346438303a3a2f33322d3438203d3e20323638323030.roa
File:                     323830343a346438303a3a2f33322d3438203d3e20323638323030.roa (raw, json)
Hash identifier:          GXuSU+LX+9lYC57S8xL+s1YpmanN4MuivW4AVmIYJow=
Subject key identifier:   9B:7A:28:1A:ED:81:57:1C:2A:2D:D8:6A:08:95:39:92:06:D3:46:E2
Certificate issuer:       /CN=83C1DD6482FD32CE6CB494B03457BD659437962E
Certificate serial:       455606D179ABA895942AFF4EFDE4E1EE2E2B5DD3
Authority key identifier: 83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/323830343a346438303a3a2f33322d3438203d3e20323638323030.roa
Signing time:             Wed 05 Mar 2025 19:05:57 +0000
ROA not before:           Wed 05 Mar 2025 19:00:57 +0000
ROA not after:            Wed 04 Mar 2026 19:05:57 +0000
asID:                     268200
IP address blocks:        2804:4d80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl
                          rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 14:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:56:06:d1:79:ab:a8:95:94:2a:ff:4e:fd:e4:e1:ee:2e:2b:5d:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83C1DD6482FD32CE6CB494B03457BD659437962E
        Validity
            Not Before: Mar  5 19:00:57 2025 GMT
            Not After : Mar  4 19:05:57 2026 GMT
        Subject: CN=9B7A281AED81571C2A2DD86A0895399206D346E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:94:f9:20:d8:68:f0:6f:cb:08:b0:0e:22:
                    43:14:9d:26:0d:82:f4:58:77:01:1f:01:a6:2f:24:
                    eb:b1:ec:44:a7:bb:c2:d8:60:91:a8:ee:45:e0:43:
                    46:7e:6b:c9:bc:8c:5f:6c:20:b7:cf:d9:64:45:5b:
                    fd:ea:7d:9a:4b:e0:b9:fd:ef:18:48:7e:60:fc:55:
                    6f:92:0f:0d:ba:7c:d2:13:16:58:8c:a9:4e:fd:56:
                    ec:a2:33:e4:3b:4c:57:b6:08:55:0d:c3:2e:6b:a8:
                    5c:98:a4:ab:44:26:98:1d:a3:4b:13:6f:3c:0b:78:
                    f3:89:5e:1d:9a:e0:5c:48:32:29:16:7a:db:2b:77:
                    79:5e:4d:e5:0e:29:eb:54:a2:b6:0a:e1:78:a0:f6:
                    1a:d3:0b:35:e8:cf:7a:e9:72:43:41:4a:12:72:1f:
                    80:0b:46:c9:23:c7:e9:9a:f2:4a:ea:90:d7:1d:ff:
                    48:71:0e:8e:9e:01:b3:79:52:cd:56:f0:0d:21:fe:
                    af:4a:3b:da:2f:0b:c3:b8:cd:37:93:38:e0:54:6c:
                    4f:0d:9d:96:0b:b7:80:4f:22:0a:e4:2f:63:5c:77:
                    56:7a:fe:fb:91:5d:ed:3b:49:19:91:6a:b7:c9:40:
                    0c:dd:3e:5b:a4:fe:13:59:c8:24:0d:ac:10:32:10:
                    98:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7A:28:1A:ED:81:57:1C:2A:2D:D8:6A:08:95:39:92:06:D3:46:E2
            X509v3 Authority Key Identifier:
                keyid:83:C1:DD:64:82:FD:32:CE:6C:B4:94:B0:34:57:BD:65:94:37:96:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/83C1DD6482FD32CE6CB494B03457BD659437962E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/83C1DD6482FD32CE6CB494B03457BD659437962E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/1/323830343a346438303a3a2f33322d3438203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:43:73:50:be:3b:99:b7:3c:57:09:be:1d:bb:4c:6d:54:1c:
         1d:4e:79:18:81:b2:24:47:f5:8c:64:2d:f0:9b:57:68:42:46:
         ad:41:74:b9:8d:b5:f7:d7:fb:b0:cb:55:68:a2:c0:0a:7c:1d:
         1b:65:12:b6:39:06:77:7f:31:0b:27:cb:11:88:c2:c6:f7:c3:
         4a:98:08:f7:6e:87:1c:d0:c9:50:71:9e:3a:64:e8:25:7a:7f:
         d0:e4:60:bf:a8:75:cd:b6:26:36:39:4f:4b:22:e0:bd:21:ce:
         db:a6:11:68:38:66:52:e7:06:f7:d4:65:c6:4e:99:60:ee:3f:
         ea:5d:64:3a:53:0e:dd:a5:ef:f7:c7:be:5c:fa:6c:bc:8b:cd:
         30:96:31:a7:65:05:f2:32:60:f3:e0:7b:32:48:f1:29:3d:a0:
         93:f5:0b:8e:8f:e3:d4:fb:45:98:77:04:d8:9f:c8:45:7f:e2:
         87:48:8f:d9:80:1d:ad:8b:c8:5a:11:25:15:a8:2c:98:91:e2:
         15:50:8e:1d:f6:54:87:4f:75:a0:81:72:cd:c0:3e:7c:aa:49:
         78:7c:18:47:64:0f:9e:04:19:44:16:0f:39:50:4e:00:29:d3:
         12:77:50:20:89:2d:52:e9:2f:95:7d:b2:db:4e:4b:f3:5b:40:
         e4:55:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:57:51 2025 by rpki-client