Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a633030303a3a2f33362d3336203d3e20323637393931.roa
File:                     323830343a353635343a633030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier:          YhmsoPEQPEFes6Z/I02BCPLt2Fym+fXVmyM4JIPyk7I=
Subject key identifier:   A6:64:BF:F8:4B:CA:9D:5A:AA:79:09:CD:74:58:03:56:FF:08:3B:00
Certificate issuer:       /CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
Certificate serial:       61760E879CB638B9B5F592459676763C762FFD45
Authority key identifier: 18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a633030303a3a2f33362d3336203d3e20323637393931.roa
Signing time:             Tue 03 Jun 2025 16:01:52 +0000
ROA not before:           Tue 03 Jun 2025 15:56:52 +0000
ROA not after:            Tue 02 Jun 2026 16:01:52 +0000
asID:                     267991
IP address blocks:        2804:5654:c000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl
                          rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 11:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:76:0e:87:9c:b6:38:b9:b5:f5:92:45:96:76:76:3c:76:2f:fd:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18440E47EE1A9F2521181FB35A2394A0DE92CC7C
        Validity
            Not Before: Jun  3 15:56:52 2025 GMT
            Not After : Jun  2 16:01:52 2026 GMT
        Subject: CN=A664BFF84BCA9D5AAA7909CD74580356FF083B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:e2:04:5e:f6:21:c5:b0:57:1b:8b:cf:25:
                    a4:ab:9d:e9:f1:21:0b:83:f8:ca:59:14:7b:d6:3f:
                    6a:5a:b5:b3:30:8b:90:c0:5b:fa:57:ae:98:a5:03:
                    ec:a1:ab:41:ce:49:9a:e3:f8:4c:fd:65:10:c3:c7:
                    06:c0:9d:e5:62:cd:b2:c0:c3:44:60:b4:36:7a:67:
                    05:46:04:3e:56:4e:1e:11:c9:b0:74:b3:cd:d3:d4:
                    77:c7:9e:42:9b:3d:f4:2b:62:9e:70:dc:e8:eb:e6:
                    6f:44:ad:ba:0f:78:ca:9f:b1:77:08:95:9c:c6:44:
                    e6:45:0a:ef:58:1e:4f:28:62:89:01:e1:de:f6:15:
                    35:c4:e3:3e:8a:69:d9:c8:e4:48:37:ea:45:43:23:
                    0b:da:ed:77:36:d1:a9:f1:c9:92:aa:83:2f:c0:5c:
                    b2:d5:96:36:14:47:30:f1:dc:c8:dd:8f:48:1a:0b:
                    2e:fd:4e:61:69:7c:90:3e:88:06:58:89:f5:e0:cb:
                    ee:c9:24:f3:60:6f:4a:8b:50:03:3a:e9:4e:71:80:
                    46:4b:83:79:23:9f:aa:a7:95:5c:13:cd:d9:15:af:
                    fb:e7:a9:63:1a:f8:fb:e3:d6:f3:8b:f7:bb:e3:a1:
                    05:31:9b:75:1b:67:cf:e1:56:1a:ae:0b:b7:4d:ea:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:64:BF:F8:4B:CA:9D:5A:AA:79:09:CD:74:58:03:56:FF:08:3B:00
            X509v3 Authority Key Identifier:
                keyid:18:44:0E:47:EE:1A:9F:25:21:18:1F:B3:5A:23:94:A0:DE:92:CC:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18440E47EE1A9F2521181FB35A2394A0DE92CC7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a633030303a3a2f33362d3336203d3e20323637393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5654:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:24:3e:ae:92:31:6e:0a:59:65:9f:0a:ae:67:70:e3:83:3e:
         5f:79:a2:27:b6:60:54:6a:7a:fa:fa:09:12:9d:b3:f1:8d:18:
         8d:62:89:9a:78:f8:91:43:dd:17:99:5a:29:46:8a:e2:5d:53:
         5e:6a:30:95:27:b9:4f:33:a4:18:6d:dd:cf:23:a5:ee:0c:9b:
         af:1d:2e:e0:9c:85:7a:34:f6:77:9b:04:b1:21:c5:7d:cc:b5:
         81:93:6a:0a:0a:8d:f5:84:be:28:b4:4c:48:3f:13:f4:5d:27:
         cf:15:38:c4:3b:70:5a:ac:12:6c:99:50:cc:ce:78:d7:52:6e:
         07:d6:39:9f:f3:67:83:44:2f:ec:23:85:80:2a:fc:d7:a6:ea:
         64:fe:ff:98:63:5c:82:45:65:9c:56:b8:a0:9e:7b:f6:47:95:
         7c:33:7d:8c:a7:5f:1a:53:36:40:7d:df:b2:30:da:89:5d:bb:
         5f:b3:64:c3:1e:32:59:42:24:c7:a3:c3:6c:7d:2f:85:bb:b2:
         b1:f2:a7:05:91:db:0a:89:9e:c8:32:10:b6:94:8c:34:79:d4:
         81:57:cc:ba:1e:e2:85:62:71:ed:b4:df:6f:07:e7:46:f8:bf:
         28:18:b3:d0:ca:2e:68:98:0a:d0:bb:2e:17:24:b9:52:e7:fc:
         32:9e:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:02:58 2025 by rpki-client