Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3332203d3e20323636353434.roa
File:                     323830343a336461343a3a2f33322d3332203d3e20323636353434.roa (raw, json)
Hash identifier:          ipwGkCTBQmX1cvsr0PUrqqEYXfnH+zyF+gvJgN8s0SY=
Subject key identifier:   FE:9F:94:3A:7D:13:C6:5E:DC:2C:B7:A8:79:B9:C6:B4:EB:E8:D0:43
Certificate issuer:       /CN=3806DB121C9269AE400CDA71100F88AF76F0469C
Certificate serial:       043C4DC3DABCFA7449D2F4A54D987D2CA3CD00C0
Authority key identifier: 38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3332203d3e20323636353434.roa
Signing time:             Fri 20 Jun 2025 18:27:25 +0000
ROA not before:           Fri 20 Jun 2025 18:22:25 +0000
ROA not after:            Fri 19 Jun 2026 18:27:25 +0000
asID:                     266544
IP address blocks:        2804:3da4::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl
                          rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 10 Aug 2025 14:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3c:4d:c3:da:bc:fa:74:49:d2:f4:a5:4d:98:7d:2c:a3:cd:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3806DB121C9269AE400CDA71100F88AF76F0469C
        Validity
            Not Before: Jun 20 18:22:25 2025 GMT
            Not After : Jun 19 18:27:25 2026 GMT
        Subject: CN=FE9F943A7D13C65EDC2CB7A879B9C6B4EBE8D043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4a:f3:9d:01:00:bc:bd:12:33:c0:fb:bd:af:
                    4f:33:6b:5e:53:6f:c3:db:f6:49:e6:23:7f:ed:55:
                    13:b1:6c:9a:19:f3:0e:ad:b5:8f:20:48:f3:46:62:
                    2b:64:1f:c5:1b:89:0b:5b:44:36:96:90:d0:42:1b:
                    d5:ce:54:58:68:fa:d5:a0:63:b3:3d:a2:4a:a6:b4:
                    37:4b:12:0f:3c:e2:63:ec:5a:0e:d0:0c:59:0d:53:
                    dc:cc:ae:29:51:f2:9e:f4:37:25:98:cd:61:11:39:
                    1c:e0:41:79:f5:ca:eb:31:ce:4b:2d:8c:99:aa:ad:
                    24:61:84:05:28:e7:f3:ca:d3:fa:cb:ac:5a:6f:da:
                    59:d5:19:83:b7:de:5b:ef:2d:b2:55:76:8a:f7:45:
                    65:8a:ae:92:46:ea:f6:29:1d:32:b8:91:c8:8e:be:
                    a5:51:eb:ac:aa:f6:39:72:aa:ff:1a:5a:80:3d:9f:
                    41:a5:da:18:27:3f:ee:b5:d8:c0:ef:aa:1d:54:93:
                    14:6a:25:5a:3e:17:bb:0b:d5:11:00:46:37:25:5b:
                    d2:3e:95:97:28:a4:d5:70:aa:e4:f1:01:9b:bc:59:
                    03:eb:5e:32:ff:99:2a:de:72:43:a5:54:31:b8:d2:
                    76:39:40:a1:c5:87:27:93:96:8d:a9:08:bc:59:28:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:9F:94:3A:7D:13:C6:5E:DC:2C:B7:A8:79:B9:C6:B4:EB:E8:D0:43
            X509v3 Authority Key Identifier:
                keyid:38:06:DB:12:1C:92:69:AE:40:0C:DA:71:10:0F:88:AF:76:F0:46:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/3806DB121C9269AE400CDA71100F88AF76F0469C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3806DB121C9269AE400CDA71100F88AF76F0469C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a3a2f33322d3332203d3e20323636353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:41:5f:32:d3:a7:67:1c:9f:3e:a1:b1:de:53:7c:ff:2d:00:
         f2:29:c3:82:91:26:ce:f8:e3:af:3f:a6:6c:8f:f7:ed:f8:3e:
         b8:89:6a:ab:bf:19:3c:b0:a7:ad:96:df:65:f6:a1:58:83:b8:
         a7:3d:77:6b:11:b5:16:22:97:6a:4d:95:ba:57:72:99:30:39:
         e4:51:f6:87:09:e8:d9:3a:6b:8d:06:3c:70:c3:4e:e5:e0:7c:
         38:f5:dd:41:3b:2a:fe:bb:3a:c0:9a:a2:09:c9:eb:bc:2e:8a:
         ec:b5:7f:b0:dd:c5:dd:14:05:55:c6:66:02:33:f9:c8:a9:da:
         f1:ac:a0:56:fd:11:54:8f:51:e5:d3:ee:28:53:29:a8:28:83:
         9b:1a:db:76:96:23:94:db:2a:9d:68:12:b3:69:a9:04:e3:07:
         4c:53:bb:32:ea:ee:4c:53:0c:0b:c1:99:7d:3c:e3:29:59:f2:
         72:5f:68:af:cd:4d:2f:74:9e:c3:50:61:bf:ba:f4:26:eb:24:
         14:51:02:d7:a2:d3:9b:9e:a3:17:8a:71:cf:10:00:68:9a:f0:
         26:7a:3f:f8:f6:12:8a:88:17:8a:84:21:4e:b7:b6:ed:2f:48:
         f2:eb:ee:e7:c3:df:04:bc:c3:5e:76:d0:97:19:ea:fe:eb:30:
         44:11:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:51:36 2025 by rpki-client