Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          zHyOsBXwztnpgmzj3idSOTwWX090y9azShHDXyZ//Rs=
Subject key identifier:   18:4A:7B:0C:8D:90:4D:1E:F0:1C:21:88:49:C3:A3:8D:F7:E9:0B:F2
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       503F7B0372FE2013E5C8BDC73A58A796A2D25FB2
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:50 +0000
ROA not before:           Tue 03 Jun 2025 15:56:50 +0000
ROA not after:            Tue 02 Jun 2026 16:01:50 +0000
asID:                     267991
IP address blocks:        2804:5654:6000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3f:7b:03:72:fe:20:13:e5:c8:bd:c7:3a:58:a7:96:a2:d2:5f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:50 2025 GMT
            Not After : Jun  2 16:01:50 2026 GMT
        Subject: CN=184A7B0C8D904D1EF01C218849C3A38DF7E90BF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:53:1d:ee:b8:45:03:51:9a:9a:d0:70:0d:
                    dc:b6:42:b7:df:07:e6:e7:b7:c1:f1:32:92:3c:9f:
                    fa:e6:c8:a7:d8:e5:b2:22:41:65:4f:3a:dc:b9:a7:
                    49:33:8d:81:1c:9c:2a:40:f1:ca:2a:ca:4d:b1:cb:
                    5e:d7:6a:73:de:98:38:bd:0a:a9:a9:a7:40:43:c0:
                    b0:e0:f4:b6:ec:b9:24:fb:e6:4d:21:cf:84:28:24:
                    9e:a2:69:3f:ee:91:b6:f1:01:2a:34:84:6f:3f:f4:
                    39:b3:ee:6b:b8:04:81:a0:5c:60:7f:1a:44:22:a6:
                    29:e2:69:3a:6f:dd:50:ba:e8:d8:99:7b:8b:7f:5c:
                    c7:8f:ec:a7:f7:b3:06:cf:d1:52:11:12:4b:9c:54:
                    38:ad:d5:d8:ab:ab:5e:ce:31:50:14:dc:a9:9e:25:
                    cc:b8:96:24:dd:f8:c4:4f:2f:a6:99:38:31:d4:16:
                    e0:84:ce:b6:9e:57:e5:01:1f:a1:f9:d6:cf:84:ad:
                    5d:04:0c:7c:4a:01:d6:ce:2e:72:86:5d:63:23:c1:
                    e6:63:e9:ff:80:a9:6f:8e:92:e6:23:6f:51:b9:55:
                    3a:ca:9b:fa:a3:bd:27:49:1b:0d:1c:a1:21:a1:ec:
                    72:7f:92:dd:b7:6f:f2:e1:05:de:00:26:52:d3:11:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4A:7B:0C:8D:90:4D:1E:F0:1C:21:88:49:C3:A3:8D:F7:E9:0B:F2
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a363030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:fc:d6:03:99:33:90:16:99:e2:b9:99:1c:48:2e:de:d1:43:
         e1:73:c1:86:b1:98:41:61:1e:9f:54:bf:c4:fb:58:d5:66:d8:
         ed:3f:ec:ee:bb:bd:10:76:b1:ce:ea:82:67:18:f1:91:f2:b9:
         3a:c5:d8:38:66:66:77:f6:d2:ac:52:29:fa:6a:52:22:de:b7:
         71:71:39:21:5d:19:05:98:8c:e8:e7:eb:6b:03:a0:1e:31:f0:
         21:39:43:23:1f:40:f9:30:af:05:b5:10:46:20:c8:a3:83:72:
         7b:ed:d9:6f:e2:66:9b:b2:1f:45:0b:65:9e:74:c0:2b:db:fa:
         4f:e8:d5:1c:17:e2:04:d8:c5:f4:c9:a4:53:71:ed:dd:83:fd:
         60:e7:50:e0:ce:1e:3d:58:9d:28:5b:48:91:ab:47:8a:7b:88:
         d8:23:13:4f:54:e9:85:57:85:13:6b:56:0e:76:c8:1f:5f:b7:
         34:59:f9:e1:ca:41:a6:0b:f1:6e:3b:1d:0d:be:de:ed:c9:7d:
         49:98:bc:06:f9:ee:9e:64:db:ba:c5:9d:b4:06:df:21:7a:84:
         d5:45:3e:99:25:30:8f:ff:ce:4e:f2:e8:ac:db:d6:5c:91:e6:
         c4:8b:6b:90:6a:ad:20:e2:e7:e5:27:b8:bf:47:8c:36:ac:c5:
         b4:8e:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:14:49 2025 by rpki-client