Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d3332203d3e20323633303335.roa
File:                     323830343a6133383a3a2f33322d3332203d3e20323633303335.roa (raw, json)
Hash identifier:          JF+vt37xu7OxUG8guYjCdH1ca2d+IC4yEayqQxlRp6M=
Subject key identifier:   14:2A:E5:0F:8B:11:8D:1A:45:E5:EF:4E:D8:0A:B7:0B:36:F3:7C:F9
Certificate issuer:       /CN=3811D3CF68BD6E1D457066AF72C5B80697140952
Certificate serial:       7D217E5A8BB4F50EE59DAAF066131182D5FAE8C8
Authority key identifier: 38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d3332203d3e20323633303335.roa
Signing time:             Thu 05 Jun 2025 13:44:06 +0000
ROA not before:           Thu 05 Jun 2025 13:39:06 +0000
ROA not after:            Thu 04 Jun 2026 13:44:06 +0000
asID:                     263035
IP address blocks:        2804:a38::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl
                          rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 16:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:21:7e:5a:8b:b4:f5:0e:e5:9d:aa:f0:66:13:11:82:d5:fa:e8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3811D3CF68BD6E1D457066AF72C5B80697140952
        Validity
            Not Before: Jun  5 13:39:06 2025 GMT
            Not After : Jun  4 13:44:06 2026 GMT
        Subject: CN=142AE50F8B118D1A45E5EF4ED80AB70B36F37CF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c4:68:ee:7d:de:e5:96:0d:b6:27:53:96:6b:
                    0c:2e:21:ef:96:3f:b0:cf:8e:66:e6:fe:16:ab:d4:
                    df:95:a2:2e:65:fb:c5:aa:c0:3c:6f:19:35:45:38:
                    c6:60:07:21:85:9f:95:07:ed:4d:7a:50:93:15:2a:
                    2d:c8:26:91:63:9c:f0:64:4b:f1:4c:0e:c3:0d:f0:
                    4e:93:ff:b5:80:15:80:84:5b:7b:7a:5d:eb:0b:80:
                    60:f7:27:c3:f9:55:11:07:b9:99:b2:8e:94:45:98:
                    b3:1d:05:b9:f9:84:3f:37:ac:bd:d7:21:67:99:19:
                    32:4d:2f:cc:5a:77:c6:e5:d5:ac:ef:26:f3:5a:22:
                    61:56:b5:bc:b7:7b:79:bf:bf:e4:d6:7a:0b:05:bf:
                    9e:db:d6:cb:f4:9f:c8:b4:42:c7:11:35:43:15:ab:
                    51:25:c3:a5:0a:6b:4e:12:4c:05:dd:d2:23:3a:77:
                    9a:85:28:19:5b:c5:a7:8b:e8:69:ae:1b:9a:3b:8e:
                    53:d5:6a:fc:54:07:99:3e:8a:5a:37:5b:e8:ac:5c:
                    d0:e4:3d:62:57:91:8a:61:87:3a:f0:8e:d0:1a:36:
                    c7:73:63:36:13:c1:18:36:d8:b8:75:a1:7a:a1:e8:
                    b9:53:0b:04:76:04:d8:18:68:e1:b4:0a:b5:b1:c5:
                    85:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:E5:0F:8B:11:8D:1A:45:E5:EF:4E:D8:0A:B7:0B:36:F3:7C:F9
            X509v3 Authority Key Identifier:
                keyid:38:11:D3:CF:68:BD:6E:1D:45:70:66:AF:72:C5:B8:06:97:14:09:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/3811D3CF68BD6E1D457066AF72C5B80697140952.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3811D3CF68BD6E1D457066AF72C5B80697140952.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJMrdUgjzryGyyqwai14eez9zVjZtby6zGr1qBtAoJD2/0/323830343a6133383a3a2f33322d3332203d3e20323633303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a38::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:50:a0:5b:04:37:41:e4:29:d6:eb:13:7f:ed:84:8f:24:ff:
         d0:d0:7a:0f:55:be:00:6d:ff:ed:3a:4f:49:47:95:47:87:52:
         0f:a6:1d:8c:c4:f8:3a:b9:f2:b2:a4:86:72:e0:aa:0b:32:21:
         1f:23:fa:56:0f:a2:1f:04:a9:9b:b6:99:42:58:30:43:11:0e:
         4d:2f:b3:25:c3:83:9f:58:de:e1:a5:db:47:d0:ce:83:b4:d1:
         7e:8a:67:21:89:80:fb:0d:a9:46:40:68:58:68:57:f9:f9:33:
         63:5d:7d:4d:5b:ad:f7:81:1a:6a:7c:30:11:c1:bf:40:08:a4:
         2b:9e:0b:7b:71:6f:a7:01:ac:e3:96:a4:8c:7e:b2:39:77:df:
         4a:f4:4d:27:e8:6e:5c:9e:60:de:49:c8:a5:f1:38:f4:2c:19:
         29:0c:92:17:ee:fa:92:2f:99:bc:cd:7c:a8:2e:1b:08:2a:8d:
         a6:5c:06:3d:28:bc:2c:65:15:2c:3e:0f:b6:b1:97:eb:72:44:
         d9:38:a5:07:ca:3a:2d:e2:85:07:b3:c4:60:cd:43:12:f1:7b:
         2c:17:5d:f6:3b:22:85:11:dd:3c:16:0c:4b:30:fa:c8:33:53:
         49:5b:ef:bf:49:4b:ee:4a:f1:4d:2f:a2:15:93:d2:fd:20:51:
         e2:ab:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:25:34 2025 by rpki-client