Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a333264383a3a2f33322d3430203d3e203238323132.roa
File:                     323830343a333264383a3a2f33322d3430203d3e203238323132.roa (raw, json)
Hash identifier:          bgVPpAY1rF0TwCj/iomUdffbapK2a8aVG3MLPZeLB8M=
Subject key identifier:   8C:6C:5C:2E:C2:E2:16:25:8E:C5:EF:D4:AA:50:2D:8F:21:1D:4C:A1
Certificate issuer:       /CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
Certificate serial:       10B5E6025384D98B5EEE8FEBD5BE1E112D287358
Authority key identifier: 02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a333264383a3a2f33322d3430203d3e203238323132.roa
Signing time:             Tue 20 May 2025 03:52:22 +0000
ROA not before:           Tue 20 May 2025 03:47:22 +0000
ROA not after:            Tue 19 May 2026 03:52:22 +0000
asID:                     28212
IP address blocks:        2804:32d8::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl
                          rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Jun 2025 08:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b5:e6:02:53:84:d9:8b:5e:ee:8f:eb:d5:be:1e:11:2d:28:73:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02D8A2AD531F129E21D92D275E0EFD380C93FC3C
        Validity
            Not Before: May 20 03:47:22 2025 GMT
            Not After : May 19 03:52:22 2026 GMT
        Subject: CN=8C6C5C2EC2E216258EC5EFD4AA502D8F211D4CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:89:07:f8:78:b6:f9:98:8c:10:ab:b3:93:
                    60:08:a1:04:41:ba:d1:95:0a:53:9b:0d:4a:38:31:
                    73:e9:44:ac:11:62:49:89:a7:34:70:d5:ee:a5:8b:
                    c8:6b:b5:28:8e:f0:4e:96:4f:f8:e0:a9:19:2a:7d:
                    8e:ad:00:ae:67:f3:5b:b0:bf:2c:d9:63:05:3c:ce:
                    20:dd:32:05:3b:3d:35:ae:b2:c1:45:3b:c7:fd:07:
                    21:bc:70:28:ef:73:ee:8d:86:1a:68:89:f4:c1:65:
                    e5:34:05:b0:5e:49:c7:53:4f:b2:e3:76:1d:2d:a7:
                    d5:ea:77:0e:11:c1:52:ad:e0:c8:69:d5:da:c0:9a:
                    de:60:9f:36:43:c1:27:7b:bc:27:89:3a:07:03:4a:
                    29:6b:9e:13:4a:99:29:f2:78:b5:7e:84:5f:1c:00:
                    b4:d0:ae:6b:f0:30:1e:16:e5:e2:41:35:9c:70:04:
                    4c:a3:02:1f:0a:f3:b7:85:f2:f4:52:25:17:fa:a1:
                    1c:d0:0b:6e:4a:a5:7d:af:cc:75:9c:a1:7d:7c:33:
                    20:d9:87:ec:c7:56:08:c7:45:f6:58:51:2b:03:16:
                    ba:79:54:c8:b4:fd:93:46:16:d3:8a:35:11:57:44:
                    2e:2f:b2:d4:84:bb:05:d0:3a:7f:8c:b6:c4:11:5c:
                    02:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6C:5C:2E:C2:E2:16:25:8E:C5:EF:D4:AA:50:2D:8F:21:1D:4C:A1
            X509v3 Authority Key Identifier:
                keyid:02:D8:A2:AD:53:1F:12:9E:21:D9:2D:27:5E:0E:FD:38:0C:93:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02D8A2AD531F129E21D92D275E0EFD380C93FC3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CBpWjEXiPDSLMxXeEKtB23MTteiqsNuALPYJw5zWYVkX/1/323830343a333264383a3a2f33322d3430203d3e203238323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:a0:41:e3:60:e6:41:28:d9:a1:d8:73:f2:1a:52:80:64:95:
         7d:06:07:f4:03:74:85:80:e1:e9:c2:ab:5b:bf:f6:03:62:4f:
         94:3a:41:4b:9d:dd:ae:a7:3c:f1:24:17:80:42:51:27:3b:1b:
         ec:a5:62:53:61:a1:85:f6:d8:b7:9f:b1:a4:4c:0f:78:15:59:
         d0:07:fc:88:83:ff:77:a3:73:0e:2e:85:21:a3:11:25:10:57:
         f0:02:89:77:6d:63:c6:5f:f9:37:70:07:8a:4c:d2:c5:da:2c:
         5c:91:34:95:f2:32:06:99:7d:72:81:07:b5:a9:fa:e0:4c:5b:
         15:08:f5:36:46:79:ef:bb:2f:50:b8:d3:4b:54:ba:4c:d4:54:
         06:97:ec:70:33:a5:e0:98:b0:d2:99:b6:5f:5b:8a:0a:ca:ef:
         8a:dd:0e:b8:34:b2:6c:fd:bd:19:3b:55:00:98:4e:90:52:8a:
         8f:7e:e7:a8:18:ab:15:98:cb:64:54:83:64:19:3a:2d:e9:8e:
         8b:97:13:1d:06:b8:29:88:0d:68:12:b9:a3:88:07:76:80:ac:
         78:b7:02:e8:d0:2e:98:5b:2e:ff:78:ac:49:a8:a9:17:5f:b0:
         e3:da:4b:9a:00:30:62:5f:94:b6:29:6f:8c:84:d7:38:3e:23:
         ea:6d:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:40:51 2025 by rpki-client