Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a3a2f33322d3336203d3e20323632363338.roa
File:                     323830343a3736303a3a2f33322d3336203d3e20323632363338.roa (raw, json)
Hash identifier:          NnmkY7Sd7N5JKm67Yh/ykhrAvKe7A/VN1ib+nTxdnOQ=
Subject key identifier:   8D:DD:E5:89:DD:6C:50:9C:24:02:29:FB:1B:29:57:6A:5F:DB:E4:7F
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       3F6AEB37F0CD35ED3FC7FD53B3934741C319B0CF
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a3a2f33322d3336203d3e20323632363338.roa
Signing time:             Mon 17 Feb 2025 15:57:07 +0000
ROA not before:           Mon 17 Feb 2025 15:52:07 +0000
ROA not after:            Mon 16 Feb 2026 15:57:07 +0000
asID:                     262638
IP address blocks:        2804:760::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl
                          rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 16:28:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:6a:eb:37:f0:cd:35:ed:3f:c7:fd:53:b3:93:47:41:c3:19:b0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Feb 17 15:52:07 2025 GMT
            Not After : Feb 16 15:57:07 2026 GMT
        Subject: CN=8DDDE589DD6C509C240229FB1B29576A5FDBE47F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:89:49:f9:8f:5c:8a:ec:9b:05:3a:9c:55:
                    33:3c:36:b5:dd:1a:26:18:29:43:a6:8c:7f:2b:84:
                    b3:4e:fe:19:16:b8:52:14:36:d0:55:60:fc:38:47:
                    3a:1b:59:35:5b:86:4f:48:10:f7:bf:f1:07:62:af:
                    17:11:7b:dc:67:12:0c:76:27:f2:cd:f0:6d:27:35:
                    31:c7:73:14:8e:d4:43:f8:d4:96:d1:95:90:a8:f5:
                    cd:5d:e5:69:d0:01:ea:47:8d:f5:4a:a4:7a:f7:83:
                    b7:2e:21:2e:b5:fe:56:0d:eb:28:69:3f:a7:0c:15:
                    5d:23:60:17:80:ea:ae:d1:2d:71:8e:6f:5b:b1:22:
                    05:06:f2:dd:ed:2b:16:8b:ea:71:bd:8d:ef:0d:66:
                    90:b2:c5:ca:58:b2:27:13:4f:b8:9d:c2:47:3a:5d:
                    a6:7f:a8:17:47:46:e7:5e:d5:f9:45:ad:e6:7e:9a:
                    05:b6:80:9a:de:06:a4:47:b5:17:d4:83:f8:2d:62:
                    ae:62:d1:46:04:57:3a:5a:d6:39:34:1a:16:ac:05:
                    b6:60:fd:44:57:a5:10:44:38:43:ee:c9:79:09:14:
                    2a:c1:87:17:8b:c1:91:44:d5:bb:70:69:1a:15:5f:
                    8e:69:62:b8:31:2f:f0:c9:8d:ce:1b:b2:a8:0a:e2:
                    84:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:E5:89:DD:6C:50:9C:24:02:29:FB:1B:29:57:6A:5F:DB:E4:7F
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/323830343a3736303a3a2f33322d3336203d3e20323632363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:760::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:7a:98:15:00:7d:ee:6d:d5:fc:4c:69:ed:9b:60:5d:e2:8e:
         6b:7e:5c:ee:f7:d5:14:05:50:77:e2:ed:87:de:8f:b0:05:77:
         09:72:fc:f0:7d:ce:8e:30:bf:e4:c8:4c:b7:d6:a1:98:b1:e9:
         af:0f:c4:2c:46:ac:cb:71:2b:df:e6:c2:30:59:0a:eb:5e:ee:
         fb:06:88:bb:0f:80:b2:2e:d0:85:75:58:ad:92:6a:b3:c7:57:
         05:10:d5:2b:c5:47:77:2a:86:73:8e:14:1f:48:e1:e4:6e:70:
         2c:cb:54:db:dc:25:2a:aa:2c:16:25:27:dd:24:85:94:43:c0:
         8e:04:05:76:a7:96:bc:54:68:4a:3e:04:84:01:1c:c6:71:1a:
         e7:34:ac:6a:3f:4b:e8:d7:3f:50:14:e8:7c:50:d4:0e:6c:4e:
         f0:12:1a:17:39:32:7f:e5:8a:33:29:93:97:a8:44:a1:16:55:
         17:98:a3:59:f2:40:de:7a:94:9c:a5:cf:5e:e8:50:80:6b:0c:
         9d:6b:9e:37:e7:5c:f9:ca:7e:8b:09:6f:31:e6:43:dd:3f:24:
         f0:54:73:93:9a:db:47:92:97:32:6a:4b:fb:d6:09:94:cb:5e:
         b4:fa:2b:3b:ad:e9:e4:8a:7d:3c:88:7e:28:df:dc:3a:74:76:
         1f:76:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:23:53 2025 by rpki-client