Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3430203d3e20323632333135.roa
File:                     323830343a3762383a3a2f33322d3430203d3e20323632333135.roa (raw, json)
Hash identifier:          8AHmINNTuIvylE8wzmf4Hk4M9s/xGc0DPLMYiUl530c=
Subject key identifier:   3F:48:89:EF:C0:BB:FE:D0:6A:39:43:07:49:4E:6C:01:E3:92:F7:30
Certificate issuer:       /CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
Certificate serial:       1B292B9BA27DB3EE39ED7668F936A843CE62E1F3
Authority key identifier: 4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3430203d3e20323632333135.roa
Signing time:             Tue 06 May 2025 15:02:40 +0000
ROA not before:           Tue 06 May 2025 14:57:40 +0000
ROA not after:            Tue 05 May 2026 15:02:40 +0000
asID:                     262315
IP address blocks:        2804:7b8::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl
                          rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 12:53:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:29:2b:9b:a2:7d:b3:ee:39:ed:76:68:f9:36:a8:43:ce:62:e1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B9B65302A1363F3DC780FF39CBEAEB906374E75
        Validity
            Not Before: May  6 14:57:40 2025 GMT
            Not After : May  5 15:02:40 2026 GMT
        Subject: CN=3F4889EFC0BBFED06A394307494E6C01E392F730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e1:1f:a9:12:1c:f8:30:41:3b:83:e8:39:24:
                    0a:fa:0e:97:05:a2:f3:94:d1:4c:6f:c9:2b:d8:59:
                    40:47:b9:60:a6:23:8e:6b:d9:c2:1d:dc:0c:98:e4:
                    a9:cf:ed:b6:23:b4:09:c5:e6:60:84:ae:00:79:eb:
                    a6:91:8f:a3:9d:71:2a:3a:08:66:2a:45:63:ec:f5:
                    0b:2c:28:b9:e9:92:83:40:4b:24:38:b1:2e:02:8b:
                    ee:3d:04:7f:16:86:a0:b9:ac:67:76:f4:de:b5:8d:
                    30:7a:bb:cd:9e:fd:80:b7:bd:7f:5e:b8:24:5c:a2:
                    3c:05:0e:c1:a5:81:3b:e0:a7:7a:7f:7e:3b:6e:f6:
                    3b:31:c6:8a:47:8c:a4:b6:4a:55:6f:b3:06:1d:69:
                    d1:1f:23:25:3e:19:aa:ff:08:3c:69:88:56:76:cd:
                    1b:4a:af:e4:bb:a5:8d:24:91:dd:57:26:4e:5c:6c:
                    f0:44:24:6d:89:ae:1c:61:93:b8:b1:29:49:02:91:
                    b9:72:d0:8b:35:01:17:97:70:6e:10:71:23:8e:49:
                    f8:5c:03:54:3c:1d:50:99:42:ce:1a:93:10:53:38:
                    ea:e9:e6:2b:32:d8:e7:52:35:ad:63:ba:a2:54:3b:
                    80:e1:55:ad:18:96:a7:8f:50:5e:05:a6:f1:70:8a:
                    4b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:48:89:EF:C0:BB:FE:D0:6A:39:43:07:49:4E:6C:01:E3:92:F7:30
            X509v3 Authority Key Identifier:
                keyid:4B:9B:65:30:2A:13:63:F3:DC:78:0F:F3:9C:BE:AE:B9:06:37:4E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B9B65302A1363F3DC780FF39CBEAEB906374E75.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4KmVdvL1UPVgmzvCu34HPT36cZcKKFpaKH6BzcJeT5WY/1/323830343a3762383a3a2f33322d3430203d3e20323632333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:f3:42:a6:43:31:e8:80:62:f8:3f:07:4f:fd:61:d7:e7:72:
         b1:05:70:5e:4b:3c:02:31:52:e0:f1:e4:8e:d5:b6:84:fc:6b:
         25:21:23:27:7e:6d:8c:29:76:b9:88:43:79:4f:4f:65:5e:c1:
         da:71:d3:d4:e6:31:17:90:76:77:12:34:81:19:38:db:ee:b9:
         d3:80:c5:17:bc:9c:dd:c8:8a:28:f8:8d:9a:e6:6e:bb:30:ef:
         18:47:da:3a:21:d5:e4:1e:f4:83:c8:7a:f1:67:6f:99:aa:d1:
         98:95:b4:81:8d:a7:c7:67:30:07:e3:a2:1a:f7:e3:c4:69:f5:
         05:e0:45:49:6a:7d:0f:0e:98:12:78:3e:4e:49:7a:36:b9:d8:
         29:04:06:e0:79:10:89:75:a8:f3:1d:e0:3f:20:4c:b9:08:6b:
         78:f3:94:d2:f3:c8:9a:18:b7:8f:1e:24:ba:46:63:dc:5e:45:
         03:f9:d0:9d:b8:48:a2:22:f8:39:50:e8:f6:37:05:ab:b3:da:
         81:46:14:b3:f0:ba:ef:43:94:18:00:95:99:19:5f:58:83:38:
         25:44:c2:f9:ae:19:9f:85:1e:53:6c:8c:b6:74:5e:dc:06:63:
         b0:e1:f2:e8:87:2f:0a:60:91:77:6b:50:b1:0a:70:7e:ee:a5:
         8d:f9:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 16:47:30 2025 by rpki-client