Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a3a2f33332d3333203d3e20323635333934.roa
File:                     323830343a333336383a3a2f33332d3333203d3e20323635333934.roa (raw, json)
Hash identifier:          tt0bjam4bcpAgiidMpuy4bjMCw1GLpt9nyKf1Xh/Zg4=
Subject key identifier:   16:21:EE:AC:30:46:7B:C2:65:40:AC:B3:F1:48:43:6C:AC:E9:85:5A
Certificate issuer:       /CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
Certificate serial:       55ECEBE45E11787555A26D397FB1FF8A8B8D9DCE
Authority key identifier: 5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a3a2f33332d3333203d3e20323635333934.roa
Signing time:             Thu 19 Jun 2025 13:57:50 +0000
ROA not before:           Thu 19 Jun 2025 13:52:50 +0000
ROA not after:            Thu 18 Jun 2026 13:57:50 +0000
asID:                     265394
IP address blocks:        2804:3368::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl
                          rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 07:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ec:eb:e4:5e:11:78:75:55:a2:6d:39:7f:b1:ff:8a:8b:8d:9d:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC
        Validity
            Not Before: Jun 19 13:52:50 2025 GMT
            Not After : Jun 18 13:57:50 2026 GMT
        Subject: CN=1621EEAC30467BC26540ACB3F148436CACE9855A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f3:08:47:10:e3:34:84:44:03:3d:87:8a:09:
                    b1:33:76:1f:59:96:ce:19:fc:0c:e4:1e:a1:a2:50:
                    b3:7d:1a:fc:24:4e:12:30:e5:53:6c:74:fd:48:1e:
                    50:c6:ce:03:d1:6d:79:78:ee:9e:a4:34:86:fe:16:
                    6b:6d:88:97:30:ed:6d:46:ad:6e:31:6e:48:00:1d:
                    e2:9c:28:5c:5e:9a:b3:82:2a:93:79:14:cb:ca:a9:
                    24:40:43:50:01:c7:d1:4d:c4:22:ee:a5:02:72:7f:
                    ff:d6:64:48:86:ba:36:2f:86:f9:aa:00:41:34:a9:
                    20:f0:6a:03:75:7e:08:3c:e1:8f:e0:a9:70:2e:89:
                    76:d9:23:6d:d7:fc:89:cc:5f:ca:e0:e8:a3:4a:ee:
                    df:81:d0:e8:92:47:7a:16:dd:a3:f0:3f:d3:de:74:
                    f8:f2:7b:57:30:f2:7c:d1:c4:4d:fc:51:e6:e5:e4:
                    bc:dc:5f:69:73:18:1f:df:09:8c:20:cf:db:47:85:
                    6e:4d:e6:0c:d0:1d:4a:da:d1:79:e8:cb:9c:9b:9b:
                    2d:60:15:ec:5a:7f:31:e3:2e:cc:06:fc:a9:ed:2f:
                    bb:2d:3f:71:ba:ff:12:ed:98:b1:b6:f4:e5:b2:43:
                    0a:2a:4b:af:7f:40:d3:de:fd:02:6b:80:b0:2f:c2:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:21:EE:AC:30:46:7B:C2:65:40:AC:B3:F1:48:43:6C:AC:E9:85:5A
            X509v3 Authority Key Identifier:
                keyid:5D:48:A8:5F:13:B3:AB:15:4E:87:C4:DB:64:D8:69:CA:AE:AE:FA:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5D48A85F13B3AB154E87C4DB64D869CAAEAEFABC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/48i7aj18NvxsUHHwVCyRzDuJrASFB2h5tBezbkJ1bD95/0/323830343a333336383a3a2f33332d3333203d3e20323635333934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3368::/33

    Signature Algorithm: sha256WithRSAEncryption
         78:85:41:8e:fe:7c:f4:de:89:9c:31:57:76:10:f5:99:72:37:
         a6:22:57:ec:5d:0a:88:99:d2:9b:0d:16:c2:a3:be:f8:db:5c:
         25:c4:ae:78:d2:b9:f2:83:ca:fc:32:89:9e:1d:e0:fb:a3:4e:
         83:fb:d8:a6:2f:54:9f:7d:72:c4:d2:dc:dc:1a:f6:c2:bb:6a:
         e8:ba:5a:55:13:a0:f9:e7:25:e0:39:3b:3c:08:88:d1:16:ef:
         c6:c8:3b:9c:69:ee:f9:9b:12:0b:a2:e9:d3:8a:26:23:9c:c5:
         03:67:b4:9b:53:29:c9:65:0d:c8:25:50:e5:74:f1:00:04:de:
         c3:22:f8:ed:00:69:b2:e7:85:f4:eb:97:56:24:77:f7:55:18:
         aa:e9:47:b6:42:ea:b5:1e:36:3e:33:29:d6:97:6c:29:a7:19:
         16:3d:7f:af:3d:78:bb:a4:d3:01:8d:6d:6e:60:7b:36:88:f7:
         a2:ca:df:54:da:fd:0d:aa:75:15:59:ba:6c:d2:ac:21:e1:ff:
         3f:80:b4:31:ef:33:20:ac:82:fd:b8:08:8d:77:a5:ea:ca:cb:
         ee:ae:94:d2:94:30:52:27:7a:69:79:fe:d6:51:34:c3:05:8f:
         00:cc:d6:45:f8:9a:9e:a5:7a:95:5f:af:32:6e:02:cc:13:a7:
         d2:23:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 13:49:33 2025 by rpki-client