Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a383a3a2f33302d313238203d3e203134383430.roa
File:                     323830343a383a3a2f33302d313238203d3e203134383430.roa (raw, json)
Hash identifier:          frigbEFULPdy1PgELAsAV6DgUeEDZqk8iidvtdoKVHY=
Subject key identifier:   B8:DC:31:37:A5:53:FA:03:B8:30:0E:48:2B:73:0F:36:2C:F4:03:8C
Certificate issuer:       /CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
Certificate serial:       60D6B350B55C5F56C6C56DCBCC40511F89F2507E
Authority key identifier: 4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a383a3a2f33302d313238203d3e203134383430.roa
Signing time:             Tue 13 May 2025 17:07:04 +0000
ROA not before:           Tue 13 May 2025 17:02:04 +0000
ROA not after:            Tue 12 May 2026 17:07:04 +0000
asID:                     14840
IP address blocks:        2804:8::/30 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl
                          rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 07 Jun 2025 02:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:d6:b3:50:b5:5c:5f:56:c6:c5:6d:cb:cc:40:51:1f:89:f2:50:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7
        Validity
            Not Before: May 13 17:02:04 2025 GMT
            Not After : May 12 17:07:04 2026 GMT
        Subject: CN=B8DC3137A553FA03B8300E482B730F362CF4038C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a1:0d:25:ea:09:df:ed:1e:94:65:76:9d:a0:
                    63:53:9e:7a:93:12:f7:e0:12:18:ba:05:03:4b:a2:
                    9a:9e:c4:40:3f:5f:51:8f:2e:f1:14:bf:15:85:d4:
                    41:cc:10:7c:3e:0e:26:db:8c:ce:9d:d4:4f:a6:bc:
                    21:6e:eb:b6:dd:36:7c:15:66:99:6a:c6:8a:83:9c:
                    7c:c4:b8:9b:d6:4c:10:bd:cd:e8:af:00:c9:f8:ab:
                    96:8b:32:e5:96:dd:d5:aa:9a:02:ee:02:28:b8:4c:
                    31:df:e9:1d:49:50:91:3c:9e:19:60:c2:28:06:ae:
                    75:86:31:a2:ee:d2:47:46:15:b1:fd:10:14:9a:75:
                    25:35:8b:22:c0:82:97:96:67:fa:7c:50:4d:05:9c:
                    e5:91:08:5e:0c:26:b3:f9:9f:8a:36:d9:86:44:8f:
                    7d:49:16:69:79:be:d0:23:ed:10:66:70:b7:cc:2a:
                    51:bd:30:ff:f5:15:16:17:22:a8:59:41:ec:68:12:
                    97:d3:17:ff:b7:6e:8a:94:7c:8b:e4:68:14:a4:26:
                    81:6e:90:41:6b:f8:0d:65:e2:19:7d:22:6e:f3:1d:
                    30:0e:7c:0c:70:04:a8:a8:da:51:f6:b1:93:7c:44:
                    56:5f:46:66:f7:81:5d:b2:db:f6:0a:c1:71:6b:6d:
                    40:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DC:31:37:A5:53:FA:03:B8:30:0E:48:2B:73:0F:36:2C:F4:03:8C
            X509v3 Authority Key Identifier:
                keyid:4E:87:B4:46:2F:90:42:B5:2A:A4:D6:5A:C7:D2:FD:92:C2:70:2D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E87B4462F9042B52AA4D65AC7D2FD92C2702DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcKTasYok2N6u4yrpQLacSNxZC93tKsNRY6iiAs2zZee/0/323830343a383a3a2f33302d313238203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8::/30

    Signature Algorithm: sha256WithRSAEncryption
         c4:a5:12:f5:5f:33:d7:f6:0e:1f:f0:e1:85:a7:f1:67:01:db:
         bc:d9:e4:ba:72:be:75:74:84:e9:be:59:9b:cf:89:5b:45:9c:
         88:5a:c2:c3:3d:ee:03:cb:ea:d7:cd:e5:45:e6:8e:7d:e2:5a:
         b5:f0:9e:ec:39:62:e1:59:35:63:c7:a6:19:1a:dc:22:3c:f9:
         62:b8:e8:d4:e6:5f:73:2b:c5:93:48:b1:53:20:98:21:c3:79:
         2b:27:94:b9:25:bd:49:81:9c:b7:89:b2:34:fc:80:20:7a:e9:
         6c:10:7c:9c:bf:ca:28:60:53:58:fa:69:8a:30:c7:2a:b0:67:
         41:92:8a:5b:40:4a:6c:3c:5c:ea:d3:90:21:63:9a:c0:d4:c8:
         7f:24:90:51:78:03:df:34:a1:56:f6:4e:f5:49:e9:67:37:71:
         49:28:0f:9b:a0:ea:e2:25:88:ee:66:c2:94:b7:50:7d:5a:26:
         17:8b:f7:e7:d7:07:c4:eb:dd:81:6f:a7:34:b5:33:4c:0d:c2:
         80:b2:d5:82:88:9a:04:6d:14:45:11:e2:9a:c2:4a:90:ca:df:
         7b:a2:9a:dc:c6:a6:26:bf:58:16:88:79:93:4d:cd:e3:0e:50:
         45:09:c8:ae:f9:c7:c6:9d:dc:61:4d:1a:34:ef:2f:0d:3c:2e:
         1f:05:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 14:08:56 2025 by rpki-client