Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/323830343a343863633a3a2f33332d3333203d3e20323637313435.roa
File:                     323830343a343863633a3a2f33332d3333203d3e20323637313435.roa (raw, json)
Hash identifier:          L2eax2W/p0AzDbU62q45YCkXbId03LyLtEs/c9sfyQY=
Subject key identifier:   E2:AB:9F:8D:64:71:1D:04:CB:24:FB:F0:63:58:60:78:93:37:E4:85
Certificate issuer:       /CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
Certificate serial:       0C3FE4F7812154358E19696039B9BAB7147065F8
Authority key identifier: 3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/323830343a343863633a3a2f33332d3333203d3e20323637313435.roa
Signing time:             Mon 23 Jun 2025 18:28:44 +0000
ROA not before:           Mon 23 Jun 2025 18:23:44 +0000
ROA not after:            Mon 22 Jun 2026 18:28:44 +0000
asID:                     267145
IP address blocks:        2804:48cc::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl
                          rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 05 Jul 2025 06:52:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:3f:e4:f7:81:21:54:35:8e:19:69:60:39:b9:ba:b7:14:70:65:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED
        Validity
            Not Before: Jun 23 18:23:44 2025 GMT
            Not After : Jun 22 18:28:44 2026 GMT
        Subject: CN=E2AB9F8D64711D04CB24FBF0635860789337E485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:41:d8:a6:73:9b:f0:d2:86:2e:8f:9a:0d:
                    1b:6d:3f:e4:68:84:aa:4e:e4:a0:d6:65:60:a6:4e:
                    e9:e1:b4:bc:2c:91:48:dd:2c:71:4e:3e:69:ca:30:
                    e2:d0:c9:ad:b7:3b:a4:ae:f1:eb:63:48:a9:07:14:
                    19:1b:12:b2:b7:48:a4:96:c6:f4:b8:ad:f0:f3:86:
                    93:e8:d5:84:82:0d:7a:a5:14:75:78:06:68:a1:83:
                    c1:fe:58:f6:1f:1c:e5:d1:6a:0c:a2:0b:a5:2a:d1:
                    24:2b:43:29:b5:37:39:cd:d1:d9:f3:8d:d4:fa:8d:
                    04:c1:f1:50:fe:02:35:c5:0e:43:58:f9:05:4c:7a:
                    98:c6:4d:3c:3b:72:06:93:9b:ac:9a:51:c9:68:16:
                    2d:83:df:42:d8:a1:99:c1:14:64:a6:60:7c:eb:ec:
                    1f:7b:73:44:a6:be:2d:d9:92:e0:67:45:0e:cd:a7:
                    96:ab:69:1d:7b:b3:89:60:db:c4:02:44:1e:fc:01:
                    05:49:08:90:20:3f:be:ae:54:c6:54:56:59:c6:80:
                    c8:a0:77:dc:32:e2:6d:d9:a1:5c:5f:99:35:05:24:
                    ea:c7:f3:c9:42:da:5e:17:81:53:ad:de:d0:85:62:
                    2a:0b:6c:40:ec:ce:25:77:15:2e:81:40:27:cc:4d:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AB:9F:8D:64:71:1D:04:CB:24:FB:F0:63:58:60:78:93:37:E4:85
            X509v3 Authority Key Identifier:
                keyid:3A:CA:CB:0D:E5:9E:3F:7F:5D:3F:B4:9A:B3:DF:C4:C9:80:8D:CA:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3ACACB0DE59E3F7F5D3FB49AB3DFC4C9808DCAED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DJi5D3FMbW1kNWCtNMepb2i1FoZpHPJntfBoMKsNNjcJ/0/323830343a343863633a3a2f33332d3333203d3e20323637313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:48cc::/33

    Signature Algorithm: sha256WithRSAEncryption
         9d:6a:df:ec:06:40:3a:4c:d5:31:d7:4f:1e:93:11:6c:a3:96:
         c9:00:54:55:bc:c7:a0:d6:da:b5:2a:a5:7b:5c:53:95:be:e7:
         9f:30:d3:df:62:b4:dc:05:95:c5:5b:2a:d4:17:e1:22:8b:9f:
         c1:77:1f:37:ad:ff:13:b6:3a:01:ec:2f:41:73:e2:08:e7:a5:
         95:0f:f9:d3:51:6c:95:8c:04:29:8b:ca:78:ca:db:26:98:ff:
         71:97:8b:a0:d6:1c:56:06:7c:a8:e2:37:01:24:ee:9a:38:ce:
         4e:8f:d1:d5:ab:a7:f2:73:c4:31:d9:42:b4:83:3d:76:ce:11:
         00:0d:c6:ad:82:46:fc:b3:10:b0:03:4e:b0:b9:06:b4:1b:b6:
         e1:f8:fd:3f:8d:c5:0c:8e:ed:ab:e2:52:c0:f9:74:17:01:7d:
         60:ed:93:da:00:30:50:fe:68:3d:43:77:90:cb:44:e3:e3:3f:
         fb:57:56:91:88:d8:e0:cb:b6:af:2b:8b:d5:3f:7b:81:e1:92:
         d9:ee:a2:6a:11:1b:2a:61:e5:2a:f5:71:b3:28:fd:a6:47:a7:
         c2:c9:ea:fc:80:35:e6:b4:06:ec:15:06:53:7f:91:d1:92:90:
         5f:3d:62:02:1e:3e:0e:a1:3d:22:90:1d:0d:ed:05:a1:93:54:
         2b:2c:45:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:19:01 2025 by rpki-client