Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/323830343a316365303a3a2f33322d3332203d3e203631363830.roa
File:                     323830343a316365303a3a2f33322d3332203d3e203631363830.roa (raw, json)
Hash identifier:          pmTdc0aeUkYV3p4lAkD339q89Fyr+jMFFgpAlxazPcE=
Subject key identifier:   68:4C:18:E6:11:BA:A9:B1:07:1D:43:F0:3D:43:2C:1B:52:18:E3:09
Certificate issuer:       /CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
Certificate serial:       410CB5062FE54090823F1A57F4A2C91955323716
Authority key identifier: BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/323830343a316365303a3a2f33322d3332203d3e203631363830.roa
Signing time:             Sat 10 May 2025 14:22:50 +0000
ROA not before:           Sat 10 May 2025 14:17:50 +0000
ROA not after:            Sat 09 May 2026 14:22:50 +0000
asID:                     61680
IP address blocks:        2804:1ce0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl
                          rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 21 Jun 2025 14:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:0c:b5:06:2f:e5:40:90:82:3f:1a:57:f4:a2:c9:19:55:32:37:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD46799FC26755B5FFA78DFAD006BB5A29320A6D
        Validity
            Not Before: May 10 14:17:50 2025 GMT
            Not After : May  9 14:22:50 2026 GMT
        Subject: CN=684C18E611BAA9B1071D43F03D432C1B5218E309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:27:49:f8:1c:bc:90:61:b4:79:a3:3e:d7:
                    85:2b:54:02:de:bd:6b:61:4f:f4:93:01:dc:9b:51:
                    b4:08:fa:0b:27:17:b7:a6:09:12:e5:d7:81:1f:2b:
                    5d:9c:dd:8e:29:24:ac:02:89:72:cf:d1:e3:08:d0:
                    9a:23:da:4b:8b:fd:b5:4e:55:7d:37:1a:c2:58:26:
                    e5:de:a3:0d:de:bb:65:c6:07:01:00:0b:26:ef:10:
                    2d:60:d2:87:13:4d:e0:c6:af:67:82:e4:b5:db:ce:
                    a0:95:2d:7d:3a:f7:40:17:81:4c:59:c4:49:42:18:
                    29:0f:62:01:bd:37:2a:05:09:fb:6f:02:e1:00:de:
                    2c:6c:bf:68:71:ee:52:e1:a5:73:14:24:35:50:ce:
                    7f:e1:79:dd:72:85:7f:3e:df:f6:06:6c:59:d4:50:
                    88:49:24:35:91:3c:3f:1b:70:89:11:12:b5:bb:17:
                    1c:2f:7c:04:c3:4d:94:ee:b3:ba:bf:83:4b:90:fa:
                    a9:d8:a8:80:5c:4d:e2:ce:fe:f8:5d:ec:8f:28:e5:
                    9c:5a:03:3b:69:d1:c3:fb:66:e3:36:5b:d9:7f:e3:
                    32:a7:9c:b6:c2:13:da:4c:40:ca:55:6d:8b:0f:ee:
                    90:28:82:63:45:a1:dd:04:88:cc:02:8a:3c:05:40:
                    a1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4C:18:E6:11:BA:A9:B1:07:1D:43:F0:3D:43:2C:1B:52:18:E3:09
            X509v3 Authority Key Identifier:
                keyid:BD:46:79:9F:C2:67:55:B5:FF:A7:8D:FA:D0:06:BB:5A:29:32:0A:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD46799FC26755B5FFA78DFAD006BB5A29320A6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FoWstCYvKbPxQ7mCpDhXxSDcY5WZMpBuQiWaQ3odVjxr/0/323830343a316365303a3a2f33322d3332203d3e203631363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:73:23:d0:d5:7f:95:ff:47:1c:33:18:22:52:f7:6d:3b:13:
         93:f3:8f:db:ce:9a:30:cf:7b:20:cd:90:b6:4d:75:4e:e5:f4:
         b5:aa:52:f8:aa:81:3b:a8:78:7e:fd:2f:b6:24:cb:c5:71:4c:
         66:4c:8f:82:e0:d2:8f:e3:49:4e:6d:83:e8:06:7a:c7:8b:c6:
         f3:1f:6d:f9:58:63:17:c9:09:36:b2:93:3b:23:14:94:39:bc:
         9d:55:f3:b1:38:ee:30:01:15:ff:65:b4:f3:17:2e:46:6f:b1:
         5b:19:36:ca:5a:50:2e:96:54:cd:eb:a4:8f:90:e2:5b:51:46:
         2d:0a:f1:c8:7f:c0:32:8a:d0:c0:44:54:4b:10:26:15:0f:27:
         d7:4f:00:f5:fb:2e:ab:de:78:37:5a:32:a7:2a:a7:e9:18:e0:
         d9:5b:ff:f7:20:07:04:c3:02:81:f4:ef:c7:ea:29:f8:b7:c7:
         72:52:14:ba:e3:00:72:e1:24:a9:1b:8b:44:a1:e9:c2:bd:f1:
         4a:09:2e:54:6b:a8:4f:7f:a7:06:f9:3e:1e:0a:44:06:7e:82:
         9a:30:70:b3:da:88:13:e5:21:f6:42:f6:bf:df:86:7d:37:49:
         c7:e8:f6:b4:6d:9e:d6:db:56:34:20:0f:63:da:e5:25:a6:d9:
         59:1f:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 20:21:27 2025 by rpki-client