Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a3a2f33322d3438203d3e20323639343035.roa
File:                     323830343a363431383a3a2f33322d3438203d3e20323639343035.roa (raw, json)
Hash identifier:          7UgDvP62PRlvAPXJ+9a1rQOsoROEuG/vTVWPB47VOPQ=
Subject key identifier:   3B:B5:8E:9C:73:EE:A4:07:A5:6F:D5:D3:D6:52:24:DA:0A:85:4D:83
Certificate issuer:       /CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
Certificate serial:       10FDE0AF88B70EF0DAB71EFC82D4B48D39C77F4F
Authority key identifier: 74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a3a2f33322d3438203d3e20323639343035.roa
Signing time:             Thu 12 Jun 2025 13:03:35 +0000
ROA not before:           Thu 12 Jun 2025 12:58:35 +0000
ROA not after:            Thu 11 Jun 2026 13:03:35 +0000
asID:                     269405
IP address blocks:        2804:6418::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl
                          rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 23:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fd:e0:af:88:b7:0e:f0:da:b7:1e:fc:82:d4:b4:8d:39:c7:7f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748041F88BBB1083E96FEC5DCF73AE0E40DA21EE
        Validity
            Not Before: Jun 12 12:58:35 2025 GMT
            Not After : Jun 11 13:03:35 2026 GMT
        Subject: CN=3BB58E9C73EEA407A56FD5D3D65224DA0A854D83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:8c:90:22:11:44:99:e8:2a:8c:a9:22:0a:
                    f4:39:63:03:09:07:35:8e:a1:b1:d7:5b:e4:c4:90:
                    92:82:42:57:f7:27:78:19:db:c1:55:2b:b6:1a:7f:
                    3e:e5:cb:55:82:24:f3:2d:a4:1c:cd:38:fe:3a:c1:
                    b7:0a:66:2f:ef:9f:62:bc:2b:17:f5:a3:50:69:50:
                    fc:30:59:77:a1:20:f9:f1:48:84:6f:91:f0:3d:67:
                    ca:78:fd:b4:c9:3f:51:16:cc:25:61:d9:7f:ba:5c:
                    d0:24:ab:67:06:a7:ba:02:a3:19:97:43:9b:1f:12:
                    94:3b:a9:1a:b0:ce:8f:84:0a:ca:2c:c0:ca:cc:2b:
                    83:03:ed:31:36:df:2c:6d:79:8b:30:d4:74:3f:59:
                    c9:a7:ec:3f:b2:49:b5:b3:9e:40:b6:2a:63:ac:3c:
                    e1:b1:07:50:5b:1b:bd:42:b2:33:62:85:ab:fd:63:
                    8d:25:28:2a:8e:d3:87:8d:61:1b:dc:06:28:1d:63:
                    2a:24:e0:ea:73:51:c6:ef:0b:ce:76:30:63:09:27:
                    93:5a:d7:43:a5:0f:5b:e2:65:6d:fa:50:41:d3:d9:
                    87:9c:02:29:a5:fa:bd:22:54:d7:d5:f4:c3:e1:e0:
                    31:91:2a:11:63:e3:24:4b:0b:5d:54:8e:51:91:dd:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B5:8E:9C:73:EE:A4:07:A5:6F:D5:D3:D6:52:24:DA:0A:85:4D:83
            X509v3 Authority Key Identifier:
                keyid:74:80:41:F8:8B:BB:10:83:E9:6F:EC:5D:CF:73:AE:0E:40:DA:21:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748041F88BBB1083E96FEC5DCF73AE0E40DA21EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BimxermBm8hUMCDgxsebhuVCpNv5i8muSZwGrhhkoty9/0/323830343a363431383a3a2f33322d3438203d3e20323639343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6418::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:95:bd:7e:7b:e6:06:5e:fe:c5:cf:f8:91:ff:d4:80:4e:7e:
         b1:7c:60:df:6a:f4:de:99:3f:f0:bc:74:a5:95:68:7b:06:7b:
         9c:91:30:b5:cc:c0:5b:11:ed:a6:03:93:5b:7d:f5:ab:1b:f7:
         c8:25:7b:6b:b6:72:12:db:28:8c:5a:10:1b:75:ea:fc:1b:28:
         84:73:32:4d:39:ab:7b:74:b8:aa:97:d8:e6:b8:b7:62:04:04:
         a8:3a:94:5e:4e:d4:f7:01:02:0d:01:18:b3:4d:5e:06:59:ff:
         09:61:4d:7c:c0:49:e3:4c:e2:12:c8:52:2d:50:77:2f:6d:87:
         ba:75:5a:39:e5:d1:b1:4a:b4:fc:26:07:a9:e2:b1:27:e9:77:
         87:eb:fe:5e:a7:8f:5c:5f:04:c1:e7:87:19:16:e5:ae:45:87:
         10:2d:db:b3:73:87:e3:e7:4c:7f:97:76:37:97:b5:2f:6d:c7:
         8d:db:a1:3f:9a:e1:e4:fb:97:09:6c:b5:f2:e7:2f:a8:ce:d1:
         a6:92:1a:5b:bf:49:3d:0c:74:49:22:01:7e:f1:17:80:2e:1e:
         2d:fd:3d:2b:3d:dc:b1:ea:1d:42:0d:2c:39:07:31:19:d2:87:
         07:49:e9:d3:8e:0d:df:1b:f0:70:05:3b:86:e7:1f:42:fd:98:
         95:17:b6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 10:58:04 2025 by rpki-client