Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa
File:                     323830343a323831383a3a2f33332d3333203d3e20323633393430.roa (raw, json)
Hash identifier:          iYBIbPhtc/RMjPQ51OW7VDp5yw4FzsXsMLD0uzooSnY=
Subject key identifier:   F3:B5:6A:95:C9:32:94:A4:1D:14:F0:BC:53:C9:08:72:03:58:E5:0D
Certificate issuer:       /CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
Certificate serial:       550A30ADF3492A52A233AD3DF1B6B5FE68009C71
Authority key identifier: 1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa
Signing time:             Wed 09 Apr 2025 14:26:37 +0000
ROA not before:           Wed 09 Apr 2025 14:21:37 +0000
ROA not after:            Wed 08 Apr 2026 14:26:37 +0000
asID:                     263940
IP address blocks:        2804:2818::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl
                          rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 16:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0a:30:ad:f3:49:2a:52:a2:33:ad:3d:f1:b6:b5:fe:68:00:9c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0
        Validity
            Not Before: Apr  9 14:21:37 2025 GMT
            Not After : Apr  8 14:26:37 2026 GMT
        Subject: CN=F3B56A95C93294A41D14F0BC53C908720358E50D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:8d:d8:7f:1d:0d:01:31:66:a0:f8:1c:a1:
                    59:5f:a7:ef:60:eb:66:39:12:ab:0a:1a:fe:e9:c7:
                    a9:53:aa:47:64:89:bc:47:24:82:87:fa:58:a8:ad:
                    f8:3c:b9:7b:46:45:89:ba:ff:0a:0f:e6:a7:21:9d:
                    98:b7:d1:77:3f:ea:a7:2e:85:fe:75:48:b0:5d:3d:
                    62:34:c3:f8:52:60:b7:ff:99:01:26:44:3f:b0:c6:
                    40:16:4d:dc:26:8b:e7:7f:0c:e1:be:45:d8:07:4b:
                    9b:38:b1:31:30:07:a0:e5:6b:34:64:fb:f0:4a:60:
                    f6:90:3d:74:7d:97:e4:07:f7:f6:10:60:95:e9:95:
                    62:df:9c:34:c0:c4:12:29:bf:83:ca:e4:a9:da:6a:
                    d2:78:e5:03:e4:2a:de:db:c2:70:86:c5:bb:bc:a5:
                    23:f9:ad:ff:89:0e:f7:c8:86:22:a0:00:8a:2b:b8:
                    fc:01:34:4c:19:2d:2e:17:ad:57:26:d5:2b:0f:6d:
                    43:f6:92:63:2f:88:8d:a1:32:23:de:7d:e1:51:d6:
                    00:ea:91:64:5f:dd:0e:e7:c1:22:fb:45:a2:39:42:
                    25:5a:28:fb:c7:eb:c3:9b:9e:53:75:98:35:84:88:
                    f6:08:be:3e:80:f8:31:0d:eb:de:0c:63:d8:7e:f8:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B5:6A:95:C9:32:94:A4:1D:14:F0:BC:53:C9:08:72:03:58:E5:0D
            X509v3 Authority Key Identifier:
                keyid:1C:27:36:B7:CF:C9:C7:EA:5B:9C:A9:D4:E0:02:80:39:6A:DF:13:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C2736B7CFC9C7EA5B9CA9D4E00280396ADF13B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a3a2f33332d3333203d3e20323633393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2818::/33

    Signature Algorithm: sha256WithRSAEncryption
         2d:68:81:67:30:29:4a:1c:ff:fa:fb:51:9a:e0:a4:51:78:14:
         51:ff:2a:10:a3:a2:b2:2c:83:71:b2:7c:b4:43:2a:35:36:30:
         13:01:b2:4c:0c:ec:2e:0b:86:cc:dc:48:43:f9:10:01:82:e8:
         63:3f:a6:ed:d8:d0:e0:44:9d:98:25:26:40:cc:4f:12:11:1b:
         90:a6:2b:09:0d:2b:bb:ad:01:11:01:de:04:e8:03:64:f5:dd:
         2e:0d:1c:f2:95:34:60:73:40:49:ca:bc:0f:35:96:7b:21:13:
         fb:9f:a6:17:18:9a:62:30:c5:50:17:54:2a:4d:a9:2e:ec:b2:
         6e:c5:27:09:b2:c0:a8:98:8a:89:3b:ad:0e:63:33:15:4d:7b:
         3c:b1:ec:42:a1:9c:44:da:ee:3c:73:97:73:08:1d:20:de:3e:
         ba:33:f8:57:25:21:ad:2d:7c:ca:97:18:6d:40:d7:e0:aa:be:
         b6:6f:de:f2:68:cf:b0:63:4a:c5:32:24:fb:b6:9c:97:45:93:
         e5:3c:5a:04:e9:6e:cf:ef:8f:84:69:0a:b7:15:04:04:cb:06:
         5c:7b:d0:a6:dc:17:5c:1c:37:d5:92:c4:da:16:7f:da:5e:a4:
         59:9f:ad:4a:f6:31:3f:9c:2e:f0:aa:e9:b8:d3:43:d7:03:86:
         6e:79:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:30:39 2025 by rpki-client