Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3438203d3e203532393831.roa
File:                     323830343a3337633a3a2f33322d3438203d3e203532393831.roa (raw, json)
Hash identifier:          b5KezCkhblAJ5Z4TIFGPKB/zvKk9ibX93mC500F/5y0=
Subject key identifier:   6B:B3:AE:F5:D3:DB:5B:5A:19:96:1D:A6:25:E0:8A:D1:2C:3D:F3:E4
Certificate issuer:       /CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
Certificate serial:       2AD178DC481E2A7755BCC8699D8E7AF40C98B96F
Authority key identifier: 0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3438203d3e203532393831.roa
Signing time:             Fri 02 May 2025 17:25:16 +0000
ROA not before:           Fri 02 May 2025 17:20:16 +0000
ROA not after:            Fri 01 May 2026 17:25:16 +0000
asID:                     52981
IP address blocks:        2804:37c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl
                          rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 03 May 2025 19:34:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d1:78:dc:48:1e:2a:77:55:bc:c8:69:9d:8e:7a:f4:0c:98:b9:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1CB0F64F2EB6F6050796AC4CD16208EC123488
        Validity
            Not Before: May  2 17:20:16 2025 GMT
            Not After : May  1 17:25:16 2026 GMT
        Subject: CN=6BB3AEF5D3DB5B5A19961DA625E08AD12C3DF3E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:8d:af:fd:68:cc:cd:04:a0:db:74:73:31:
                    fd:16:07:f2:60:57:d2:98:ba:09:25:bb:53:73:a8:
                    18:a0:d6:47:49:c2:fb:37:2d:db:ba:8b:a0:9f:c4:
                    ff:1a:dc:b7:be:ff:9f:cf:0b:d7:66:66:c3:20:6f:
                    56:aa:b5:e9:36:cc:4c:a4:6b:db:8a:3d:6a:e0:4c:
                    ba:a0:00:98:a4:3a:5d:d0:de:e5:1d:a7:55:7f:98:
                    49:76:26:4b:8d:99:2e:f0:af:27:52:3a:eb:6c:8d:
                    eb:7e:11:12:36:a6:ba:40:c8:82:68:d9:73:66:91:
                    e8:40:52:29:43:bd:03:c0:e0:80:71:eb:76:5e:04:
                    0a:c1:d1:ec:a9:0e:c8:6a:78:72:d0:1c:64:8a:7c:
                    a2:61:6d:de:82:a5:93:15:63:6c:f4:4e:10:a8:a8:
                    a3:58:ca:cc:51:36:4a:e4:92:01:a0:27:cd:51:0b:
                    61:61:c4:97:2b:93:3a:52:31:e8:20:a2:3e:6d:47:
                    1c:66:41:ef:d3:67:d1:9c:a1:f6:45:ee:e8:9b:21:
                    21:cb:a0:64:a6:aa:29:38:82:b9:82:30:be:59:db:
                    b6:ec:a1:fa:3b:b9:76:0a:0b:36:ef:d0:d6:e1:ca:
                    40:15:1d:f3:3d:6f:37:76:90:68:fe:64:f5:6a:7e:
                    55:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B3:AE:F5:D3:DB:5B:5A:19:96:1D:A6:25:E0:8A:D1:2C:3D:F3:E4
            X509v3 Authority Key Identifier:
                keyid:0B:1C:B0:F6:4F:2E:B6:F6:05:07:96:AC:4C:D1:62:08:EC:12:34:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B1CB0F64F2EB6F6050796AC4CD16208EC123488.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UkMLdzd8PAhF2xNj5cRgnaN4VBjdLdntkpbNntE3tQJ/0/323830343a3337633a3a2f33322d3438203d3e203532393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:2e:71:78:64:fd:2c:dd:8c:bd:b2:28:12:17:ee:bc:70:b7:
         b3:2c:6f:f3:93:6c:0e:bd:19:5e:9b:0b:50:ab:35:51:52:e6:
         c8:65:c9:09:ff:e8:54:fb:e3:e5:ad:73:c7:12:b9:9e:e3:d3:
         22:a9:ed:7b:6c:c4:5f:b2:31:3b:c9:31:dd:5a:96:b8:2d:c0:
         62:fe:e2:59:73:ba:2b:7b:f6:f8:98:47:3e:bc:9e:65:b6:63:
         e7:b3:d6:e7:86:fb:72:38:8d:f9:57:3d:da:3d:fd:e1:dd:26:
         e8:00:d5:5b:02:15:94:83:d2:de:4a:e7:9c:5b:9d:76:a3:f2:
         e2:83:c7:66:76:d8:f0:91:5d:00:0a:12:48:b6:ad:32:05:a9:
         a5:ff:5b:df:08:17:98:b5:e2:47:c4:88:98:3e:47:8b:5e:98:
         50:59:df:fc:20:7c:ef:fe:62:b4:22:7f:db:30:ae:33:4c:a9:
         65:b8:5c:30:b8:00:4f:29:d6:8f:64:e5:ea:1a:fe:05:e7:fe:
         f5:30:2d:25:f1:9d:31:1e:a7:18:a8:33:99:08:2f:b5:57:76:
         a0:aa:98:f4:0b:e8:fe:ba:fb:14:91:d9:c3:cb:0a:9d:98:98:
         29:17:e0:c9:26:2f:0f:59:f1:2b:db:f8:ef:78:70:b1:9b:25:
         dc:62:f6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 19:24:29 2025 by rpki-client