Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f33322d3438203d3e20323635313839.roa
File:                     323830343a326330383a3a2f33322d3438203d3e20323635313839.roa (raw, json)
Hash identifier:          dOJPXi7WNMSUZZol5GfqPpg43GsP1CZUPW3CPKHFiBI=
Subject key identifier:   52:84:F5:7F:1D:44:A4:B6:62:4F:AA:0F:F6:18:78:68:BE:FE:3B:3F
Certificate issuer:       /CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
Certificate serial:       3B01910FFA53485E2051122663892A0BAB023D63
Authority key identifier: 37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f33322d3438203d3e20323635313839.roa
Signing time:             Wed 14 May 2025 16:14:10 +0000
ROA not before:           Wed 14 May 2025 16:09:10 +0000
ROA not after:            Wed 13 May 2026 16:14:10 +0000
asID:                     265189
IP address blocks:        2804:2c08::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl
                          rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 01:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:01:91:0f:fa:53:48:5e:20:51:12:26:63:89:2a:0b:ab:02:3d:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37F55E9132B65DF93AC7E8F542B2A3115CFE1A79
        Validity
            Not Before: May 14 16:09:10 2025 GMT
            Not After : May 13 16:14:10 2026 GMT
        Subject: CN=5284F57F1D44A4B6624FAA0FF6187868BEFE3B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:96:34:28:88:b3:be:08:47:e8:1b:ad:40:f6:
                    08:c8:22:2b:84:8c:a7:1d:74:4d:f9:dc:4f:78:6d:
                    27:28:b6:1d:fc:80:ce:b5:b4:5f:ce:3d:03:6b:4b:
                    1a:11:e7:cf:17:17:b6:b9:44:0d:6c:9b:dd:c3:ad:
                    ab:58:bf:74:ff:06:90:92:6a:e1:f6:eb:a1:31:31:
                    ef:7b:e6:a6:62:1d:42:0a:18:1d:79:83:72:d1:46:
                    de:1a:98:d1:93:26:ba:b2:75:1e:02:b3:d8:79:68:
                    d8:6e:77:85:49:45:94:39:ee:9a:35:96:3b:4d:89:
                    ee:79:9d:23:f5:20:0b:c2:0a:4d:29:3b:dc:11:55:
                    75:b8:04:dd:d4:a2:c5:6c:5e:a9:74:bb:0b:b1:ec:
                    68:53:4a:0f:d5:38:4c:38:62:7a:8b:11:60:b6:b0:
                    7b:56:64:66:4f:f0:9a:ae:61:b2:0e:91:72:a8:bc:
                    59:26:7a:bc:57:78:10:b7:4f:21:23:6e:c8:f7:84:
                    49:fd:7d:50:33:a4:d2:7f:a1:fc:48:92:61:58:da:
                    d2:97:d1:04:cd:47:5a:e4:bf:f5:0e:f1:85:3d:f3:
                    7e:d5:76:2e:6d:98:3e:d8:07:0c:fa:51:f7:2d:1d:
                    b2:ad:e7:23:0d:a7:a5:b5:28:54:0f:c1:d6:cd:7c:
                    09:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:84:F5:7F:1D:44:A4:B6:62:4F:AA:0F:F6:18:78:68:BE:FE:3B:3F
            X509v3 Authority Key Identifier:
                keyid:37:F5:5E:91:32:B6:5D:F9:3A:C7:E8:F5:42:B2:A3:11:5C:FE:1A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/37F55E9132B65DF93AC7E8F542B2A3115CFE1A79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BcxPSTRM3uig1zsp3gqs9UbsKeME4tg4yhymTfytPte/1/323830343a326330383a3a2f33322d3438203d3e20323635313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c08::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:98:28:1d:f0:a9:ef:e5:57:64:ec:3d:97:20:3e:1a:f3:29:
         8c:67:29:f2:be:ff:72:b8:4c:a9:ed:7e:48:2c:a7:75:75:29:
         3b:0d:c1:1e:d7:0c:d4:34:6a:a9:b9:0d:9e:3b:77:50:47:43:
         e6:8f:96:2e:75:df:b9:b7:5e:e3:a6:97:b4:ed:7c:de:c2:af:
         37:a7:b0:f7:bf:5f:08:d8:de:d5:82:7a:f3:06:30:34:91:dc:
         f8:d2:56:7e:93:39:80:da:8b:d3:4a:e4:77:fa:6d:ba:50:2b:
         91:3a:23:8b:97:5e:b8:57:4e:8f:32:e0:7f:1d:97:62:4b:80:
         d0:85:29:a3:11:6b:83:06:b7:a0:fb:6e:00:97:5f:2b:f5:79:
         69:1f:0e:86:69:68:33:6b:1a:ed:ae:67:b3:d7:3f:3d:53:69:
         1a:c2:fe:6e:68:23:a2:37:7b:dc:81:f9:88:74:b7:a5:68:28:
         27:cc:08:83:4a:d4:75:ec:df:24:00:30:01:ee:95:8c:8b:bd:
         f9:9d:dd:99:3f:62:94:02:05:e7:ad:3b:c5:00:c7:ca:d4:c3:
         7a:9c:16:8f:9d:c8:d1:0e:2f:d8:06:17:45:d6:2a:b1:59:10:
         a7:6c:a8:15:cd:ef:4c:9e:ef:6a:d0:0c:2a:1a:d6:bb:d4:f0:
         4c:d0:72:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 03:04:16 2025 by rpki-client