Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa
File:                     323830343a333762633a3a2f33322d3332203d3e20323636343333.roa (raw, json)
Hash identifier:          GCJghJccnE7+LrxXikNqUo+7cp/majrAplA7/0bl/Sk=
Subject key identifier:   0A:4E:0F:C1:4B:F0:2B:56:AE:23:B0:89:44:A2:F2:AB:2A:00:C4:ED
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       3F7892F4F69DB082A159E32BD87587E5391C3134
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa
Signing time:             Mon 09 Jun 2025 19:15:40 +0000
ROA not before:           Mon 09 Jun 2025 19:10:40 +0000
ROA not after:            Mon 08 Jun 2026 19:15:40 +0000
asID:                     266433
IP address blocks:        2804:37bc::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:78:92:f4:f6:9d:b0:82:a1:59:e3:2b:d8:75:87:e5:39:1c:31:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jun  9 19:10:40 2025 GMT
            Not After : Jun  8 19:15:40 2026 GMT
        Subject: CN=0A4E0FC14BF02B56AE23B08944A2F2AB2A00C4ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:00:98:b9:e5:33:c9:6e:81:86:1f:10:c7:
                    d7:2b:09:ae:af:10:53:dc:ac:a3:4c:70:06:05:19:
                    38:c2:e2:d2:24:37:1a:6c:d0:75:4f:46:3e:75:f0:
                    39:68:f3:e4:7f:0e:fb:e8:bb:f2:47:1d:42:8d:1a:
                    49:d2:45:22:da:57:a7:33:49:72:e8:37:41:bb:39:
                    d9:2c:93:c2:56:75:2d:45:d2:1e:3e:03:1f:b8:4e:
                    3b:59:73:57:88:91:04:10:84:97:5c:07:38:63:a4:
                    43:aa:76:ec:3b:ba:fd:d8:ae:8c:e3:4e:61:25:ce:
                    a6:a9:1f:03:fd:7a:f1:2f:0d:04:fb:6c:e1:88:19:
                    a4:76:3b:2c:9a:06:e2:f5:f7:70:82:9c:65:01:4b:
                    04:9b:cc:6a:32:42:47:42:0d:7a:d0:40:4f:08:a2:
                    df:76:6d:41:4c:a8:87:51:42:f9:83:c2:1b:ef:fd:
                    90:1a:73:ed:13:a9:6f:f1:3e:bb:e4:bf:34:3a:7d:
                    cf:8d:dc:e5:b3:c7:0d:aa:c6:3e:ab:26:92:2c:ab:
                    f2:0b:e8:26:7e:a2:0a:80:ac:17:14:76:fe:1f:51:
                    c2:69:2f:3e:06:b9:6a:57:41:1c:c6:ab:e7:55:00:
                    2d:74:94:62:d5:b0:bf:ca:54:64:82:30:04:0a:2e:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4E:0F:C1:4B:F0:2B:56:AE:23:B0:89:44:A2:F2:AB:2A:00:C4:ED
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:05:30:21:62:1d:54:ba:54:25:30:21:d8:a6:57:b6:a5:84:
         8a:4e:ef:a5:27:bc:d7:cf:24:d0:53:20:25:c9:01:f3:f0:1f:
         d9:1c:aa:98:92:40:5f:97:82:bc:18:3b:fc:ef:1c:ed:86:78:
         10:c6:45:36:66:02:ed:c1:07:a8:2b:e3:3a:0e:3c:bb:04:75:
         74:c1:65:ff:34:88:93:e3:59:b8:a9:93:c0:ea:82:54:3a:b3:
         50:c4:c1:d5:2f:e2:0a:74:14:2c:e9:72:4f:61:e3:59:50:4f:
         6f:8e:b0:6a:f5:4b:0a:61:f2:5d:67:9f:93:c0:7b:6c:f6:11:
         c3:30:fa:12:c2:29:83:d5:85:bb:7d:eb:63:9f:07:56:2d:2c:
         54:21:70:3a:f7:83:db:cd:36:83:e0:8a:ed:3f:6c:f2:22:a6:
         37:b4:e5:ba:bf:3e:29:cf:0e:db:a6:bb:3c:63:a1:cd:39:45:
         f8:06:96:e2:4c:1f:16:13:5f:69:a0:b0:6a:e7:ce:55:84:2a:
         25:5c:59:8c:45:1c:b3:3f:cb:e9:14:18:cc:5c:0c:d3:f3:3c:
         4c:37:dd:87:3b:96:db:36:a2:25:7f:b6:a0:96:ee:fa:b4:64:
         fd:8b:dd:37:50:c2:31:8e:e8:72:12:1d:b1:a6:10:25:9b:1f:
         4d:72:19:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:36:17 2025 by rpki-client