Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/323830313a38303a333962303a3a2f34382d313238203d3e20323730393532.roa
File:                     323830313a38303a333962303a3a2f34382d313238203d3e20323730393532.roa (raw, json)
Hash identifier:          7aAciMgDLBJEBYJPSmQ58TZcmXCPfgvPT8O/nDQNtJA=
Subject key identifier:   CE:13:CE:6A:03:DB:EF:FA:BF:C7:95:46:35:5B:03:F0:4C:7B:64:FA
Certificate issuer:       /CN=30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40
Certificate serial:       11DDE8C86E4B2952A090744F66070BC49396BF6D
Authority key identifier: 30:C4:94:92:F9:41:EF:8C:6D:5F:0D:8E:EB:CA:53:E7:C0:3A:9B:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/323830313a38303a333962303a3a2f34382d313238203d3e20323730393532.roa
Signing time:             Thu 03 Apr 2025 19:16:38 +0000
ROA not before:           Thu 03 Apr 2025 19:11:38 +0000
ROA not after:            Thu 02 Apr 2026 19:16:38 +0000
asID:                     270952
IP address blocks:        2801:80:39b0::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.crl
                          rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 15:37:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:dd:e8:c8:6e:4b:29:52:a0:90:74:4f:66:07:0b:c4:93:96:bf:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40
        Validity
            Not Before: Apr  3 19:11:38 2025 GMT
            Not After : Apr  2 19:16:38 2026 GMT
        Subject: CN=CE13CE6A03DBEFFABFC79546355B03F04C7B64FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:a8:60:42:6b:17:43:79:11:9b:71:42:6f:
                    b4:75:e7:ca:fc:1c:07:d2:85:77:9e:b8:16:68:9f:
                    6c:39:17:29:e1:f3:73:ff:aa:b5:b4:3a:2c:ab:4f:
                    d7:4f:9f:91:fd:69:21:bc:df:0c:83:82:9d:8e:d9:
                    78:33:be:fa:66:07:31:5c:1c:10:63:5c:d6:28:13:
                    f3:b5:f0:41:c8:22:cd:35:a6:dd:b2:ab:14:d2:14:
                    10:8f:63:bb:32:27:c1:85:4a:db:b9:8c:c6:8e:f5:
                    04:da:6f:07:d6:d3:84:b2:94:25:a5:9c:a6:0b:15:
                    e9:34:41:ca:9c:5e:62:84:c6:22:17:91:27:3d:c0:
                    8e:2f:1a:3e:28:fa:f6:07:df:b9:84:36:5e:b9:82:
                    35:18:42:83:a9:94:dc:fb:23:fd:8e:df:ca:d2:7a:
                    31:69:00:d8:c5:c3:57:da:21:62:49:02:9a:a7:c0:
                    1f:42:5c:46:78:01:ce:d5:d3:8b:fa:5d:06:a1:15:
                    8b:ef:78:89:fd:d5:97:10:cf:b2:8a:92:e6:00:c3:
                    86:5b:13:a4:a3:91:08:1c:b7:12:f2:a2:10:cb:77:
                    21:ef:b8:75:35:fa:08:c9:1a:c0:f3:63:be:75:c0:
                    48:b4:2d:06:37:83:14:db:22:0a:58:e1:82:f6:95:
                    e1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:13:CE:6A:03:DB:EF:FA:BF:C7:95:46:35:5B:03:F0:4C:7B:64:FA
            X509v3 Authority Key Identifier:
                keyid:30:C4:94:92:F9:41:EF:8C:6D:5F:0D:8E:EB:CA:53:E7:C0:3A:9B:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30C49492F941EF8C6D5F0D8EEBCA53E7C03A9B40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/996ZhSKuBpszQgxz89YGBffsdqMVRGRQL5x6RfuteTzA/0/323830313a38303a333962303a3a2f34382d313238203d3e20323730393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:39b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:54:b1:93:fc:9c:68:09:fe:85:54:55:e7:6b:26:18:55:6a:
         7c:6f:69:7a:75:5e:48:05:ae:d7:6a:8b:ec:ec:e1:02:5e:1f:
         39:dd:a4:51:5f:d0:76:2b:68:1e:b0:7b:65:61:7e:50:03:99:
         d9:17:45:16:73:a2:e5:d8:4b:4b:ba:d8:3d:e7:d2:2c:72:f2:
         d9:77:fc:6c:9f:84:72:16:a3:fb:7a:bd:8e:41:3f:f8:f4:31:
         a5:71:98:70:4a:62:5c:1d:bf:ca:d9:4d:b1:a2:3c:57:ce:e9:
         18:75:03:ba:a8:ee:a6:03:31:38:fe:39:34:f2:e5:95:26:c8:
         76:61:9f:df:0d:44:99:e2:cb:31:47:8c:09:f6:89:a3:7a:8c:
         19:cf:4e:0e:20:ef:74:6b:60:0b:4c:67:a7:8d:7f:be:07:68:
         00:e1:05:f7:7b:d0:3f:6e:8d:82:33:38:96:81:11:49:35:92:
         cc:b7:81:ec:9f:f3:c2:07:a1:58:b8:9b:72:07:ea:f7:95:04:
         fd:53:da:29:7f:52:27:8f:3c:70:31:d9:6f:d5:b6:6d:56:52:
         9c:17:d9:38:d4:69:2f:85:28:c8:68:61:84:d8:6d:e7:27:8e:
         b3:22:24:99:b0:5f:ac:d3:3f:85:29:54:74:ef:50:b1:93:b7:
         c3:c2:5c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 19:50:10 2025 by rpki-client