Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa
File:                     323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa (raw, json)
Hash identifier:          CO3a257bC1y/He/1LjW9GdvATd5WdennXvhuqp8p+MU=
Subject key identifier:   5E:95:49:1E:7F:F4:90:82:5F:34:69:16:C2:59:88:4F:B7:1F:8F:47
Certificate issuer:       /CN=BE068B06DE5C783A9921447A392452ED53F22837
Certificate serial:       79658D562C4ED6ADE251F067B0DC1A1802F3AF33
Authority key identifier: BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa
Signing time:             Mon 12 May 2025 10:43:24 +0000
ROA not before:           Mon 12 May 2025 10:38:24 +0000
ROA not after:            Mon 11 May 2026 10:43:24 +0000
asID:                     262441
IP address blocks:        2801:80:2800::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl
                          rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 17 May 2025 23:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:65:8d:56:2c:4e:d6:ad:e2:51:f0:67:b0:dc:1a:18:02:f3:af:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE068B06DE5C783A9921447A392452ED53F22837
        Validity
            Not Before: May 12 10:38:24 2025 GMT
            Not After : May 11 10:43:24 2026 GMT
        Subject: CN=5E95491E7FF490825F346916C259884FB71F8F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:34:89:f2:2f:7c:6d:be:22:08:1d:88:ea:
                    32:16:5f:b2:2b:bc:1b:a9:58:a3:0b:e0:4e:5c:5c:
                    4c:c2:1b:87:5e:84:c5:d7:b7:a4:fd:44:35:99:39:
                    39:03:27:63:4b:57:0c:cd:fd:00:21:58:a9:dd:82:
                    b7:a3:75:50:1b:ea:ec:f6:a1:6d:47:3c:26:18:0e:
                    eb:99:2c:05:17:bd:86:d5:74:56:4f:25:a5:62:3d:
                    47:ab:9b:02:10:c0:45:b5:15:6e:ce:72:0f:1b:be:
                    86:87:1e:00:c2:61:38:3f:89:8d:0a:ac:0e:6a:4c:
                    27:53:88:6a:be:85:ff:5f:7c:dd:e1:66:6c:fe:85:
                    f3:be:36:ea:92:3c:c3:43:32:1c:f3:7f:6c:9b:9d:
                    f4:07:67:f2:fe:ed:78:74:6e:30:1c:6d:84:3f:df:
                    54:2b:9e:9d:71:0c:40:6c:1b:f1:8e:8c:e3:2b:6b:
                    3d:c0:34:9f:6c:68:b1:ef:16:13:4b:36:ab:86:20:
                    8e:32:56:23:11:f0:33:4a:6d:3f:8d:28:62:a4:56:
                    ff:ec:bc:92:b3:db:df:b7:64:a4:b2:10:86:55:62:
                    9d:92:a3:78:32:04:00:dc:19:3d:07:d2:4c:c8:59:
                    72:1a:45:9d:6c:03:6e:8c:9b:60:49:15:46:e3:5c:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:95:49:1E:7F:F4:90:82:5F:34:69:16:C2:59:88:4F:B7:1F:8F:47
            X509v3 Authority Key Identifier:
                keyid:BE:06:8B:06:DE:5C:78:3A:99:21:44:7A:39:24:52:ED:53:F2:28:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/BE068B06DE5C783A9921447A392452ED53F22837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BE068B06DE5C783A9921447A392452ED53F22837.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/1/323830313a38303a323830303a3a2f34302d3438203d3e20323632343431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:50:d5:b6:d4:c4:c5:c2:43:1a:64:b5:4b:6d:50:49:14:89:
         34:3d:ba:ff:51:8e:af:88:b9:84:17:30:f7:b5:27:17:08:28:
         24:d1:e8:e4:35:e0:3d:48:78:00:6c:41:27:fd:21:d1:23:c0:
         bd:5a:a4:fa:24:a7:2b:8a:12:2c:5c:34:5e:63:31:bd:97:e1:
         ac:e6:e5:33:9e:c0:00:4b:27:eb:ee:fa:46:12:d7:d1:e5:0f:
         0f:90:b9:40:96:1f:a7:03:2c:32:7a:ec:97:37:6e:2e:62:18:
         6f:f2:bd:10:d9:8c:51:ce:0f:92:1a:55:c7:17:92:92:45:16:
         8a:4e:b0:de:6b:0f:3d:89:e8:aa:e6:88:63:be:57:7f:e9:60:
         96:eb:6a:6b:b3:bd:4e:3e:af:21:be:60:7b:3c:42:aa:b8:07:
         58:36:30:16:b7:d0:e8:a2:f8:d9:e6:21:2a:90:47:0a:95:33:
         cf:aa:2a:ba:93:fc:54:68:25:26:78:b9:1b:80:dd:db:36:51:
         82:91:e1:5b:ab:5c:a2:04:a5:97:18:30:fb:79:ed:b0:4a:e8:
         02:a0:3e:f6:8f:ed:b4:11:2f:fc:61:5a:40:88:c9:57:1f:33:
         71:b0:39:07:13:46:d2:bf:62:bd:5a:03:dc:66:69:d5:7c:b7:
         82:13:a2:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 05:44:21 2025 by rpki-client