Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa
File:                     323830343a323836303a3a2f33322d313238203d3e20323633393539.roa (raw, json)
Hash identifier:          oVXD5VaDUqeD9Go0IkrJ158heEh4rOl0USTusw94FRI=
Subject key identifier:   4D:85:CC:7F:96:68:15:31:99:46:20:48:B7:CA:82:39:3A:2A:3D:45
Certificate issuer:       /CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
Certificate serial:       44BED073B2DA32716974C4FED0E8F4239EDE988F
Authority key identifier: 8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa
Signing time:             Mon 12 May 2025 14:39:02 +0000
ROA not before:           Mon 12 May 2025 14:34:02 +0000
ROA not after:            Mon 11 May 2026 14:39:02 +0000
asID:                     263959
IP address blocks:        2804:2860::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl
                          rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 07:02:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:be:d0:73:b2:da:32:71:69:74:c4:fe:d0:e8:f4:23:9e:de:98:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F
        Validity
            Not Before: May 12 14:34:02 2025 GMT
            Not After : May 11 14:39:02 2026 GMT
        Subject: CN=4D85CC7F9668153199462048B7CA82393A2A3D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:12:b1:92:0c:0f:3f:db:25:e3:2b:f1:f0:
                    1e:f3:47:ba:db:9b:a5:de:5a:04:ac:83:7c:dc:2c:
                    20:06:40:19:ea:cb:d5:b2:1d:fe:ac:32:20:81:dc:
                    61:57:fd:77:25:4f:86:86:55:ec:b1:e5:33:81:a6:
                    85:aa:9a:cf:d5:59:16:0a:54:76:de:41:c8:50:ad:
                    90:4c:ae:06:01:39:dc:dc:8a:4d:22:fb:83:6b:ba:
                    a3:25:01:bc:1a:1b:e8:40:0e:70:02:51:a1:1d:42:
                    a6:a8:0f:0d:f3:81:6f:34:46:8d:95:dc:4f:69:3c:
                    ba:c2:7a:bd:0a:f8:0f:f2:05:b4:1e:18:30:1b:13:
                    8c:a8:cf:4e:29:6b:5a:05:d4:27:79:1c:45:ab:5d:
                    42:ea:b8:d3:96:f5:c7:a1:d8:cb:3c:ed:3a:a4:e4:
                    cf:ff:1b:28:8d:9a:6d:34:75:10:c8:3d:85:85:08:
                    8e:b2:d0:2e:86:1c:0a:61:cb:8f:e8:b6:a3:7e:72:
                    68:f8:f3:1e:ed:7b:8c:c6:d5:47:61:33:75:e8:5d:
                    0b:2c:19:dc:53:bc:db:55:42:53:2d:a1:43:99:57:
                    13:64:00:9c:dd:98:e4:14:e8:9c:41:9d:e4:63:76:
                    69:e3:64:f6:e9:0c:9f:aa:ca:03:2a:ef:e5:53:a4:
                    c1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:85:CC:7F:96:68:15:31:99:46:20:48:B7:CA:82:39:3A:2A:3D:45
            X509v3 Authority Key Identifier:
                keyid:8C:B5:A2:51:6F:71:3C:FF:E9:D1:50:4E:79:A4:BD:3B:9A:FB:0A:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CB5A2516F713CFFE9D1504E79A4BD3B9AFB0A0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XFzedyrYLLAHmXBafK7CK3jptMofo7H1mSCWQPR5MaC/0/323830343a323836303a3a2f33322d313238203d3e20323633393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2860::/32

    Signature Algorithm: sha256WithRSAEncryption
         97:a4:b8:a1:52:30:82:6e:63:69:5c:03:95:84:1d:5d:00:8f:
         3d:3c:d6:d3:73:a3:68:d1:39:49:10:f3:89:b2:fc:9f:f2:06:
         7f:e8:59:4a:80:e8:e9:a5:e3:67:4d:bb:11:cd:1d:96:fb:6c:
         b2:75:44:da:28:8f:5e:9a:5a:ec:1a:3c:43:59:45:e8:95:2e:
         05:7e:3b:0a:40:96:3a:7d:2f:b5:99:04:d1:c3:c6:b5:57:a3:
         b8:4d:1a:04:d1:f7:e1:a7:3b:2a:8a:b2:78:58:c2:6f:9d:e5:
         53:26:89:a8:ea:a7:0e:58:33:58:6b:9c:a6:57:08:63:b6:16:
         b7:38:df:43:23:55:33:b5:0b:9d:85:7a:21:ae:cd:bd:db:6c:
         9c:9a:80:0d:77:d4:fc:ba:c0:57:04:9d:c1:f3:62:3e:95:53:
         b3:ec:9a:c4:e0:ea:b4:c3:ea:ff:b6:3f:d1:98:40:5e:c7:d9:
         0d:3d:67:03:55:e1:81:62:54:9a:4a:81:4b:b0:c7:2c:6d:66:
         78:ef:30:67:9d:38:47:61:3c:cb:24:f2:3c:f9:8e:23:3d:e1:
         7f:6c:ed:03:01:19:df:b5:b1:94:0d:63:57:f9:a3:93:84:44:
         5e:a4:e6:74:49:08:8f:2e:d9:a1:16:ca:32:a3:f6:8f:8d:d4:
         4d:b8:19:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:07:46 2025 by rpki-client