Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa
File:                     323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa (raw, json)
Hash identifier:          wiUe41e1GGCXRQ5TQn5GsCw4mIRs6zXPuXW+Qiil6lE=
Subject key identifier:   3D:4E:C3:92:68:EC:FC:4B:C0:52:19:EC:7C:13:29:D8:AC:41:E7:CC
Certificate issuer:       /CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
Certificate serial:       7BC1DC7BFAA554100A88C4C6712C6AD14073D383
Authority key identifier: 19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa
Signing time:             Sat 31 May 2025 16:01:52 +0000
ROA not before:           Sat 31 May 2025 15:56:52 +0000
ROA not after:            Sat 30 May 2026 16:01:52 +0000
asID:                     28572
IP address blocks:        2804:6e3c:4800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl
                          rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c1:dc:7b:fa:a5:54:10:0a:88:c4:c6:71:2c:6a:d1:40:73:d3:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19EAE38D15F5899D3609C411EB1A1C6B42DFB009
        Validity
            Not Before: May 31 15:56:52 2025 GMT
            Not After : May 30 16:01:52 2026 GMT
        Subject: CN=3D4EC39268ECFC4BC05219EC7C1329D8AC41E7CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5b:38:d2:c9:96:5a:a8:0d:59:55:66:b2:be:
                    3e:22:6a:6e:bd:d1:aa:c0:9a:c5:07:c2:74:90:37:
                    73:ef:b7:9a:dc:03:3c:ab:e4:d6:ea:d4:5d:78:cd:
                    7a:c4:75:01:b4:01:bc:f9:2a:9d:9d:78:f1:23:26:
                    8b:51:a2:41:8d:d2:62:1b:01:b7:60:2b:3a:be:56:
                    e1:38:b0:68:83:35:b5:9e:59:11:94:9f:0a:99:17:
                    0e:6f:9b:03:84:ba:61:22:06:4f:84:ed:81:04:60:
                    d8:00:b5:a1:85:15:f4:5c:62:48:d1:41:34:b2:a9:
                    41:60:cd:15:49:d0:81:7c:53:e4:c7:c8:e0:e6:0d:
                    a0:5a:5d:5e:9f:21:34:0c:a5:64:f2:e8:1e:12:92:
                    c7:08:d5:82:e4:29:d7:a8:90:0e:69:44:c7:83:fc:
                    9d:de:0f:c4:fa:cd:f5:42:bc:21:e9:59:93:ae:82:
                    a9:cd:4e:8b:69:6a:81:f0:fa:79:99:b1:68:6c:52:
                    57:18:86:0f:9a:f3:88:48:d1:fb:d6:d1:28:a2:2b:
                    a5:79:94:98:ff:f5:f5:1a:92:9a:fd:b1:7b:57:ad:
                    08:82:f8:01:b7:9e:b8:72:8d:e2:ed:81:ac:1f:8d:
                    28:3b:4b:20:7d:1e:0c:ec:ba:c3:00:87:6f:3c:2c:
                    37:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4E:C3:92:68:EC:FC:4B:C0:52:19:EC:7C:13:29:D8:AC:41:E7:CC
            X509v3 Authority Key Identifier:
                keyid:19:EA:E3:8D:15:F5:89:9D:36:09:C4:11:EB:1A:1C:6B:42:DF:B0:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19EAE38D15F5899D3609C411EB1A1C6B42DFB009.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNZmfczX8xLpULCAXWBxajkwBHDJJksJhJK4PoawxASQ/0/323830343a366533633a343830303a3a2f33382d3338203d3e203238353732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e3c:4800::/38

    Signature Algorithm: sha256WithRSAEncryption
         38:94:35:f2:e5:83:d7:35:98:02:b6:32:b6:4e:64:d8:e5:24:
         89:b0:8a:a3:ba:98:00:b4:34:5b:a2:44:4f:42:b9:48:b1:af:
         45:0a:a1:61:5a:e4:4f:43:c5:a5:72:aa:a5:46:0f:e7:de:c0:
         30:15:98:65:d2:fd:e5:7c:02:d7:e1:65:b5:92:2b:e7:62:d6:
         d7:97:ea:f7:eb:d7:a6:ad:c8:dd:27:a1:7a:cc:83:08:14:56:
         b7:57:27:83:f7:c5:ea:94:8d:d1:6d:2c:14:4a:0f:1b:f7:a2:
         56:90:21:93:ec:6c:53:30:81:d1:79:a5:14:5a:07:43:57:e4:
         2f:16:3d:a9:bb:91:69:36:c2:71:e5:cb:00:e3:f7:68:ce:c7:
         81:db:1a:c0:c3:0f:04:e4:fd:cc:e6:e7:e5:f9:10:d8:02:63:
         f9:97:6a:a2:5e:49:df:e9:0c:03:fd:3b:03:50:cd:b2:fd:1e:
         7d:18:96:ae:54:7b:53:43:e6:34:03:ad:23:9c:a9:ad:7b:d1:
         d3:c7:76:94:a8:29:46:b2:35:72:06:73:9a:9e:5c:02:a2:31:
         a9:74:2f:9b:e8:8e:e2:b5:f0:1d:3d:eb:32:c3:d6:8d:99:4b:
         88:ab:7d:d1:4e:ab:e0:b6:ee:4a:d5:60:97:ae:3b:07:38:3a:
         fd:15:63:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:15:04 2025 by rpki-client