Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/323830343a3662633a3a2f33322d3438203d3e203533303738.roa
File:                     323830343a3662633a3a2f33322d3438203d3e203533303738.roa (raw, json)
Hash identifier:          22jKhp6IQBEep/A5PAYZ6IjnqJvqll8uYCP1oyLN4to=
Subject key identifier:   0E:18:55:24:18:B7:9A:57:19:5D:F8:66:83:FE:F8:88:56:E6:25:EA
Certificate issuer:       /CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
Certificate serial:       33E0892E0364025399AA0B57BF5F081530EFBDEB
Authority key identifier: 3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/323830343a3662633a3a2f33322d3438203d3e203533303738.roa
Signing time:             Tue 27 May 2025 15:04:33 +0000
ROA not before:           Tue 27 May 2025 14:59:33 +0000
ROA not after:            Tue 26 May 2026 15:04:33 +0000
asID:                     53078
IP address blocks:        2804:6bc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl
                          rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 13:28:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e0:89:2e:03:64:02:53:99:aa:0b:57:bf:5f:08:15:30:ef:bd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E5F41F3AF740E9427F8ED235C120098AA0C21
        Validity
            Not Before: May 27 14:59:33 2025 GMT
            Not After : May 26 15:04:33 2026 GMT
        Subject: CN=0E18552418B79A57195DF86683FEF88856E625EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:95:c7:37:5d:76:70:7d:c9:0c:bc:a6:d7:52:
                    b9:1f:31:f8:87:46:ce:28:41:fa:c4:c5:37:84:60:
                    7d:0c:5c:8e:a9:47:e4:69:1d:81:2f:ab:69:28:15:
                    51:2a:76:c5:a7:59:9a:ad:51:92:c5:b0:9e:c1:38:
                    0e:76:2e:ec:43:d7:74:84:9e:35:14:bf:c2:bd:e5:
                    5b:f4:ca:61:cb:9d:cb:a2:a1:3e:ce:a6:9f:00:04:
                    74:f3:9b:f4:8c:11:4f:68:8f:84:7b:d5:c2:e7:35:
                    7b:63:b3:8e:99:91:6d:23:c0:ec:80:64:c0:5a:7e:
                    6c:3e:d7:b1:7c:8b:e2:8d:cd:07:2f:ac:ab:48:08:
                    70:63:c5:36:3a:c3:97:f7:7a:86:29:1f:30:41:84:
                    72:be:7e:85:a0:ad:7a:05:58:8c:dc:5f:ae:7e:eb:
                    c6:64:1d:f5:b0:f5:9f:d1:7a:0c:72:e4:56:03:e9:
                    65:79:ac:bf:7f:3e:0d:05:69:f1:58:56:46:76:6c:
                    17:2c:bf:09:42:85:3d:b2:f1:e6:d3:af:f7:d3:88:
                    5b:49:b5:e7:f0:05:ad:8c:5a:20:25:37:80:53:93:
                    6e:3b:fb:f4:ed:1c:4d:b0:fe:66:bb:41:21:8e:0a:
                    43:99:89:2d:70:9a:f8:59:d1:47:16:4b:75:8f:49:
                    1e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:18:55:24:18:B7:9A:57:19:5D:F8:66:83:FE:F8:88:56:E6:25:EA
            X509v3 Authority Key Identifier:
                keyid:3C:8E:5F:41:F3:AF:74:0E:94:27:F8:ED:23:5C:12:00:98:AA:0C:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C8E5F41F3AF740E9427F8ED235C120098AA0C21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKqabSxJDm9Kdkh3y3FM3VFUTKYAQHUb5XVsFqpnwiSb/0/323830343a3662633a3a2f33322d3438203d3e203533303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:77:39:79:e7:53:05:58:fa:42:b5:5d:e8:79:17:1b:1e:a4:
         01:41:c0:c9:96:91:d9:7e:77:63:df:01:0f:fe:3d:a9:d7:e6:
         02:5c:52:f3:d8:cf:e3:f9:a9:45:b4:d7:0e:01:ac:e4:90:0b:
         6a:5a:89:5f:02:7b:60:78:b1:24:d9:ae:91:e3:f0:ac:7c:a1:
         92:51:8e:16:48:96:b8:21:f8:70:6f:a0:20:95:ce:35:eb:64:
         38:9c:e5:1c:ea:8b:d9:7c:f6:16:4a:c4:82:e3:85:0c:95:b0:
         c9:d0:0c:c7:7b:dd:5b:28:04:a1:d0:f9:6b:5e:04:29:44:47:
         2a:98:4e:34:1c:f9:85:59:dd:43:30:1e:72:d2:0e:48:a1:09:
         dc:64:71:b2:6c:2e:b0:d0:c2:fe:11:06:24:bc:6f:d2:c8:44:
         9f:cb:52:e0:fc:8a:af:fd:41:78:31:41:49:c3:3b:5f:f5:dd:
         a2:76:4e:bf:61:50:f0:84:f0:bd:53:79:3c:3b:6d:6d:d8:84:
         33:0d:46:9e:32:76:b0:24:b2:c7:b7:30:68:96:cd:d1:0e:c8:
         3d:6c:bf:82:38:8f:83:97:a8:00:b8:5b:4f:8e:d5:a2:5a:b5:
         ae:00:2c:5b:81:c0:2a:45:89:ab:5a:7c:11:a3:c8:d4:0a:3b:
         b8:3b:f0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:23:33 2025 by rpki-client