Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/323830343a363134633a3a2f33322d3438203d3e20323639323233.roa
File:                     323830343a363134633a3a2f33322d3438203d3e20323639323233.roa (raw, json)
Hash identifier:          oKbUfkWzL2gP6Dxv9T3kozGvAmm6z/10U6ndvB/iUAM=
Subject key identifier:   1A:44:CD:ED:EC:55:BA:E3:14:82:2F:6C:0D:E0:9B:44:8F:CB:33:C0
Certificate issuer:       /CN=8DCCFA18685FECCC158E8F5C7931CA2DEF785A67
Certificate serial:       7E18147F4C6845561FDD22096C71453981030EED
Authority key identifier: 8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/323830343a363134633a3a2f33322d3438203d3e20323639323233.roa
Signing time:             Fri 09 May 2025 19:23:24 +0000
ROA not before:           Fri 09 May 2025 19:18:24 +0000
ROA not after:            Fri 08 May 2026 19:23:24 +0000
asID:                     269223
IP address blocks:        2804:614c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl
                          rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 10:30:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:18:14:7f:4c:68:45:56:1f:dd:22:09:6c:71:45:39:81:03:0e:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCCFA18685FECCC158E8F5C7931CA2DEF785A67
        Validity
            Not Before: May  9 19:18:24 2025 GMT
            Not After : May  8 19:23:24 2026 GMT
        Subject: CN=1A44CDEDEC55BAE314822F6C0DE09B448FCB33C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f4:72:7b:24:cd:a1:a9:12:6a:2c:ed:19:6f:
                    8d:55:67:f8:be:c4:2f:13:e1:4e:f3:a3:41:16:13:
                    27:76:4b:c1:75:aa:ae:3d:9c:e6:cc:86:f6:76:5b:
                    5f:b6:6c:0a:87:39:7d:62:98:3d:43:64:79:f2:c3:
                    fc:0a:8b:b2:c0:e7:84:54:58:1d:fa:82:42:fb:dc:
                    18:2d:3a:74:5f:73:5f:e2:3a:a8:24:ed:ba:08:a3:
                    ca:b4:a4:1c:30:60:29:95:dd:5e:dc:c4:4e:2c:66:
                    2c:9a:8d:b7:9f:d4:bb:dc:42:5b:7b:fb:3f:95:09:
                    84:85:3f:67:b9:0f:fa:65:81:c2:bc:dc:98:68:ce:
                    7d:06:50:2c:83:3d:72:bb:ac:17:e6:2b:8b:97:22:
                    9d:df:6b:96:95:41:8f:59:8d:f6:c8:ac:71:f4:af:
                    18:85:38:b5:b5:37:c3:d5:68:07:c9:aa:31:2c:bf:
                    50:34:75:34:cf:ab:f3:1e:60:7d:ae:8f:a4:17:94:
                    1f:76:f5:30:81:9d:9b:10:18:30:d2:eb:6f:0c:4a:
                    2e:cd:43:05:38:d7:1b:4c:c4:e9:b6:15:f3:d5:0c:
                    a3:ce:f3:66:d6:1f:5d:56:11:d6:a5:df:e9:11:20:
                    ef:0b:cd:8f:83:05:e4:18:bd:a6:51:99:8f:f9:ce:
                    62:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:44:CD:ED:EC:55:BA:E3:14:82:2F:6C:0D:E0:9B:44:8F:CB:33:C0
            X509v3 Authority Key Identifier:
                keyid:8D:CC:FA:18:68:5F:EC:CC:15:8E:8F:5C:79:31:CA:2D:EF:78:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8DCCFA18685FECCC158E8F5C7931CA2DEF785A67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BEiNBxrYQsTCNbARtszLobzqyJ2ZqEbRg3sgBf1EhD3z/0/323830343a363134633a3a2f33322d3438203d3e20323639323233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:614c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:58:3b:0d:3d:12:ec:31:15:ea:d9:ab:25:e7:8d:1d:02:
         1c:bb:25:f1:3b:b3:8f:62:13:9e:d9:ef:98:23:dc:70:1d:12:
         0f:c0:68:a2:42:e7:64:b2:b7:f9:da:a6:71:0a:e5:4b:82:ff:
         5f:37:ea:79:21:24:1c:45:71:79:8b:25:d7:ba:8d:eb:5c:2a:
         53:32:f8:e7:d9:ea:f0:de:88:a3:08:ec:5a:4c:a0:80:eb:e8:
         12:11:06:57:c1:b6:c3:4d:90:a2:ae:ed:c5:98:29:a4:6c:63:
         50:46:f5:44:5a:7c:95:14:5a:ea:dd:de:29:87:0d:dd:ae:f3:
         81:4d:f4:9c:1f:2c:de:38:a3:30:9b:ab:b4:f4:df:e8:b1:02:
         1b:62:62:a6:a5:8c:06:a2:4c:07:e3:e9:82:42:dd:be:ff:c2:
         f1:a6:05:c2:7d:de:f6:17:db:ab:55:0f:ce:88:79:34:fd:55:
         68:99:84:92:14:02:02:4e:89:58:98:7f:fd:f8:27:36:e7:42:
         6f:08:d6:26:d6:b4:aa:0c:18:ac:81:2f:f1:6d:b6:b3:9a:49:
         d9:cd:90:a4:5f:1c:c5:ff:1b:f8:69:be:b8:3e:b5:2e:fa:0f:
         d8:2a:da:95:d8:28:b2:51:db:1a:da:f7:b6:8c:bd:ef:11:d0:
         04:d0:0c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:33:26 2025 by rpki-client