Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa
File:                     323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa (raw, json)
Hash identifier:          BPuUPfEFMiML6ugFAA6jmNFPzae+0xuDUUFPTwluIJI=
Subject key identifier:   DD:0A:DC:0F:E9:C5:A9:3E:3C:14:C9:EB:88:C7:4C:D3:E6:61:B5:9B
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       77D174740F1ABDEF54215D45C68AA2310C6D1475
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa
Signing time:             Thu 12 Jun 2025 14:01:40 +0000
ROA not before:           Thu 12 Jun 2025 13:56:40 +0000
ROA not after:            Thu 11 Jun 2026 14:01:40 +0000
asID:                     28580
IP address blocks:        2804:5f4:c000::/34 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 12:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d1:74:74:0f:1a:bd:ef:54:21:5d:45:c6:8a:a2:31:0c:6d:14:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: Jun 12 13:56:40 2025 GMT
            Not After : Jun 11 14:01:40 2026 GMT
        Subject: CN=DD0ADC0FE9C5A93E3C14C9EB88C74CD3E661B59B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bc:97:2b:e1:59:9f:31:bf:79:d2:b4:e7:a2:
                    cd:60:f6:a4:2a:e7:25:bb:93:84:4f:35:d0:e7:2b:
                    5e:aa:ec:f6:b2:cb:c9:a3:22:84:06:d4:3a:bb:11:
                    53:ed:9e:40:73:ea:a6:92:2d:16:7a:9c:a2:50:3c:
                    76:2e:b3:b8:f5:a0:ed:45:00:b5:84:c7:b7:dc:8b:
                    97:86:7b:7b:bf:25:e2:53:2a:d0:16:0e:ba:7e:bb:
                    7f:8e:72:e7:17:36:c6:0d:45:3c:af:d0:76:7d:1f:
                    24:2e:bf:3d:28:c6:a6:01:85:0e:72:d0:e5:86:d8:
                    f7:1c:24:51:53:54:ad:af:1a:9b:34:f0:7b:40:78:
                    bf:4f:5c:3a:30:ec:9d:9e:3c:5d:5a:29:ac:f9:1d:
                    22:9b:d1:fb:3d:b3:46:75:fc:b8:7a:9f:c9:67:62:
                    d3:9f:0c:4e:ce:b3:0e:16:a1:73:19:60:ce:60:87:
                    8b:0f:0a:6a:a6:8a:37:65:4b:5a:9f:b0:64:b9:99:
                    6f:dc:58:6b:0a:fc:37:7e:6b:fc:4d:37:6c:59:3c:
                    62:52:5d:9b:2c:0d:78:87:a4:88:30:48:88:c3:f3:
                    78:00:0f:20:69:89:93:7f:32:dc:3b:9a:10:79:b5:
                    77:3f:01:9c:f3:12:d6:19:78:62:53:a9:b4:fd:3a:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:DC:0F:E9:C5:A9:3E:3C:14:C9:EB:88:C7:4C:D3:E6:61:B5:9B
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3566343a633030303a3a2f33342d313238203d3e203238353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         84:86:05:65:cb:d0:00:c8:90:40:b1:21:58:dc:68:30:ce:26:
         1a:e6:0e:da:3b:4a:ee:bb:8c:13:ae:4f:94:29:4b:13:e4:f0:
         d0:09:e4:3f:31:f2:ab:ad:94:53:e2:86:46:86:91:3d:a2:ad:
         cd:c3:2b:f0:01:46:8d:7c:81:63:22:e2:97:0c:60:9d:06:0f:
         df:ee:dc:5c:dd:66:a0:36:99:8f:ac:91:3b:b8:b6:8a:4a:25:
         b7:b2:07:34:2d:2c:08:71:02:a0:8f:4d:d8:85:87:13:a2:75:
         81:80:7d:54:e9:4f:d0:ed:c3:f3:71:ee:d4:04:44:88:99:a7:
         5e:6f:d3:13:b0:d1:2d:49:15:fb:46:14:14:af:4c:dd:da:29:
         79:e3:bd:25:77:49:8c:bf:a2:8e:de:40:b5:6b:b8:a0:30:f0:
         20:ce:56:0b:38:0c:27:7e:81:8e:eb:1e:d3:d8:ad:8a:79:f1:
         54:28:4d:8a:5f:99:56:e1:99:2e:b1:50:c3:99:19:0f:ce:3a:
         f1:bc:d6:2a:9f:3b:f8:63:c3:34:15:c7:34:88:78:7b:8d:00:
         e7:67:48:cf:4a:0e:17:dc:b7:b8:52:bf:66:91:cb:18:a2:29:
         43:b6:d1:ae:6f:14:75:e4:b0:ed:c2:70:ca:ca:8d:0b:b0:17:
         f5:5b:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:12:10 2025 by rpki-client