Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/323830343a343962633a3a2f33322d313238203d3e20323637323030.roa
File:                     323830343a343962633a3a2f33322d313238203d3e20323637323030.roa (raw, json)
Hash identifier:          EvvdOMRO18qJIkP4vpkVMRYoH9wo69hfjDTOnk69vJQ=
Subject key identifier:   DD:60:87:6E:C2:71:67:61:D1:D6:30:9F:25:5D:6D:C0:CE:D5:82:9F
Certificate issuer:       /CN=18EBC5963DCD1282AB48ECABA9F118AE558F786C
Certificate serial:       3DAAC8D8FC82C504D279B86A3D56FD4BC2DE2784
Authority key identifier: 18:EB:C5:96:3D:CD:12:82:AB:48:EC:AB:A9:F1:18:AE:55:8F:78:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/323830343a343962633a3a2f33322d313238203d3e20323637323030.roa
Signing time:             Thu 06 Mar 2025 03:49:35 +0000
ROA not before:           Thu 06 Mar 2025 03:44:35 +0000
ROA not after:            Thu 05 Mar 2026 03:49:35 +0000
asID:                     267200
IP address blocks:        2804:49bc::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.crl
                          rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:aa:c8:d8:fc:82:c5:04:d2:79:b8:6a:3d:56:fd:4b:c2:de:27:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18EBC5963DCD1282AB48ECABA9F118AE558F786C
        Validity
            Not Before: Mar  6 03:44:35 2025 GMT
            Not After : Mar  5 03:49:35 2026 GMT
        Subject: CN=DD60876EC2716761D1D6309F255D6DC0CED5829F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:39:6f:c8:f6:0f:5f:ad:80:0c:dd:59:3a:da:
                    6a:9a:e5:98:c0:8d:3c:b1:22:a0:f9:d2:a1:4d:1b:
                    1d:45:2e:88:55:65:64:a3:16:7c:04:11:5e:5e:23:
                    c2:83:92:a6:fb:37:73:0a:83:20:bc:d9:1e:82:39:
                    15:80:bb:dd:63:96:c9:7e:9e:8d:a8:75:85:3e:61:
                    c2:a6:73:f8:ef:36:6d:4f:4a:7d:6b:a2:03:28:c7:
                    71:ae:39:af:50:c3:c8:42:8d:2a:f3:63:39:f9:f8:
                    6b:a3:13:5d:8f:2b:aa:1a:56:35:69:24:77:f5:32:
                    48:81:8f:b0:a4:60:ce:39:dc:0c:e9:6a:61:f3:35:
                    16:fb:18:c6:ab:4f:f3:4b:f1:63:34:c6:e1:a4:8a:
                    5a:9f:ef:94:db:91:a5:69:ab:8e:9f:f8:26:2f:6a:
                    31:a6:53:44:a4:64:32:30:de:4b:54:07:19:71:f4:
                    47:87:78:b4:59:58:b4:8c:b1:73:5a:34:66:83:a7:
                    9d:6c:29:4d:66:8f:32:07:1f:06:f0:97:c6:a0:71:
                    78:f6:62:a2:ee:5c:f9:0a:9d:40:6f:e8:c6:27:73:
                    e8:17:34:e0:95:8b:fb:17:7a:f4:2f:68:8c:61:81:
                    e6:cb:59:82:6d:25:e6:22:5d:ca:c8:89:34:68:83:
                    7f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:60:87:6E:C2:71:67:61:D1:D6:30:9F:25:5D:6D:C0:CE:D5:82:9F
            X509v3 Authority Key Identifier:
                keyid:18:EB:C5:96:3D:CD:12:82:AB:48:EC:AB:A9:F1:18:AE:55:8F:78:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18EBC5963DCD1282AB48ECABA9F118AE558F786C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BNybkS1HMdZy82twDDwpJ4iAZC55E31UGSGxUkHvuKUw/1/323830343a343962633a3a2f33322d313238203d3e20323637323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:28:03:00:80:62:8d:8f:93:f3:a5:ce:ba:fe:84:b6:b0:af:
         7a:c5:b4:8c:db:97:9a:e7:a7:9e:29:0e:d7:f4:36:b2:42:44:
         ca:8d:12:46:4d:67:35:ad:18:58:2c:7b:33:2d:44:88:8b:3e:
         c1:b7:2d:e0:3b:a9:11:87:cb:8d:bf:ff:71:54:0c:f9:21:fd:
         64:5e:61:02:5f:2a:64:b3:41:4d:ca:32:45:52:9f:fc:6f:91:
         01:17:fe:98:52:cc:ff:c1:b2:07:e0:e4:9e:41:c2:f8:36:ac:
         34:fa:6f:e7:46:92:2d:7e:4c:f2:e7:96:41:02:93:d4:fb:28:
         58:d6:f0:80:21:ef:40:cd:b6:ac:8a:fa:a5:5c:4a:0d:76:ac:
         83:e6:b9:bc:b3:4f:56:ad:ba:8a:48:da:e0:bc:eb:e1:c5:53:
         a1:52:59:47:73:c1:27:61:04:33:47:7d:af:ea:38:cc:44:b3:
         b2:fc:9d:28:17:be:4b:b9:93:ad:60:35:f0:a6:77:7a:00:74:
         9f:98:5a:c9:59:ce:f7:1d:cf:9b:bd:49:98:ba:41:5c:af:4a:
         35:2f:f2:dd:c6:ad:a6:e1:7b:86:01:6f:d4:7a:0f:2d:be:13:
         e4:82:c4:ff:6b:92:a2:c7:cb:86:76:89:23:6d:db:fc:07:0c:
         f2:88:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:16:49 2025 by rpki-client