Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa
File:                     323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa (raw, json)
Hash identifier:          hgJQ8Vjqueyk1GwahELX69iIT0SJ2dgb/WhmX5aXSoU=
Subject key identifier:   9B:8A:1F:3C:1A:3D:71:96:6F:04:A5:C1:1A:F9:7A:DF:72:81:10:C5
Certificate issuer:       /CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
Certificate serial:       5B4ED8907CEB3A53D9EFDBBF3D9F9151E08D08B9
Authority key identifier: 5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa
Signing time:             Thu 19 Jun 2025 13:57:52 +0000
ROA not before:           Thu 19 Jun 2025 13:52:52 +0000
ROA not after:            Thu 18 Jun 2026 13:57:52 +0000
asID:                     265394
IP address blocks:        2804:3368:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 10:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4e:d8:90:7c:eb:3a:53:d9:ef:db:bf:3d:9f:91:51:e0:8d:08:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
        Validity
            Not Before: Jun 19 13:52:52 2025 GMT
            Not After : Jun 18 13:57:52 2026 GMT
        Subject: CN=9B8A1F3C1A3D71966F04A5C11AF97ADF728110C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:65:c0:69:04:dd:4f:61:7e:9a:50:43:5d:
                    a5:35:0e:1c:16:5f:94:51:78:01:aa:91:6d:bb:b5:
                    70:76:49:0e:2d:44:39:fe:ca:f1:51:39:64:8f:40:
                    6c:fe:fe:8d:fc:e5:46:41:b4:bc:da:ba:f8:16:b2:
                    38:55:57:9b:5f:ad:7a:c3:e1:9f:a6:57:f6:6a:48:
                    bb:d0:fb:cf:41:ef:1c:57:e5:88:3b:3a:a3:b9:22:
                    bd:99:e3:17:7a:37:c7:52:cd:16:68:28:3d:5a:66:
                    15:7a:59:bd:70:69:0c:92:c8:fb:2d:19:54:3b:85:
                    ce:eb:0b:4c:a8:f7:ce:17:7a:c3:00:73:14:4b:e8:
                    b2:48:25:8d:6d:5a:ab:40:1b:81:f2:a7:2f:e1:7f:
                    6c:3b:4e:b3:a9:f0:d2:7a:29:a3:18:3d:c9:ca:68:
                    b8:6a:80:0a:aa:1d:fa:e5:bc:7c:d6:f8:9d:7a:38:
                    6a:1d:7f:a2:63:3b:1c:c9:1f:be:ae:b1:11:ed:f9:
                    2d:28:ac:76:f7:62:25:7c:62:e5:e5:67:e9:6f:91:
                    0d:73:84:f7:f6:a9:53:92:eb:95:5d:b4:5e:50:4d:
                    87:5d:d5:b3:8b:d9:7c:8c:fe:ac:a2:e2:f9:bd:dc:
                    26:c8:4c:a6:7b:92:7b:a2:4e:62:5f:c3:38:44:15:
                    3a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8A:1F:3C:1A:3D:71:96:6F:04:A5:C1:1A:F9:7A:DF:72:81:10:C5
            X509v3 Authority Key Identifier:
                keyid:5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a383030303a3a2f33332d3333203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3368:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:e9:9f:59:d6:3e:1d:b2:d2:79:c6:e4:1e:1e:0a:06:ed:
         26:4f:f6:20:87:b3:36:82:7e:81:02:97:8d:2c:a9:f8:1a:7b:
         48:22:3d:cd:a1:de:f9:2d:df:fe:a1:07:2e:88:a7:b9:4a:ae:
         a7:d5:2a:d2:ee:3b:65:03:c1:82:e2:bf:72:2a:6f:ed:45:1a:
         0a:db:4c:e3:0a:29:7c:8d:26:f2:22:f2:17:93:40:4e:c1:a1:
         e1:85:bb:c1:88:ad:a6:a1:c6:78:36:ee:77:92:30:9d:a6:f3:
         02:61:c4:22:61:56:01:8c:f2:45:45:3f:f3:5f:8f:fa:b5:31:
         3f:68:fe:ca:6c:ec:64:87:7b:ea:e2:b7:ce:2a:c1:ed:9f:5f:
         cf:e3:39:f3:21:7d:6d:4b:f5:32:cb:9f:e2:c0:9f:05:0e:db:
         a5:5d:36:68:c2:9d:85:fa:f7:46:76:6e:f9:78:37:2e:81:0c:
         e6:5b:25:47:c1:a3:ef:1a:17:14:16:ab:18:73:43:ab:60:ae:
         db:3f:53:6c:fc:e2:d9:1b:af:be:43:47:45:48:7a:22:4b:9f:
         b6:66:94:39:cf:14:2a:44:1d:0f:43:5d:c3:ba:9b:4b:6b:63:
         d5:b6:76:e2:5d:51:27:84:08:55:ca:ac:e5:14:6e:d3:10:c2:
         f7:08:93:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:40:39 2025 by rpki-client