Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa
File:                     323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa (raw, json)
Hash identifier:          qbTerdVOweKu2T7lR7MsAbYl1WLOWXzIZ0EWLtVL0+c=
Subject key identifier:   FE:8D:BA:33:74:6A:22:0D:97:8A:B8:4D:B3:D5:22:3A:A5:48:BC:C5
Certificate issuer:       /CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
Certificate serial:       472DA878AFB3ED399B983D061A765B4FE271CCA4
Authority key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa
Signing time:             Tue 13 May 2025 18:53:59 +0000
ROA not before:           Tue 13 May 2025 18:48:59 +0000
ROA not after:            Tue 12 May 2026 18:53:59 +0000
asID:                     61900
IP address blocks:        2804:12a0:310::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 13:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2d:a8:78:af:b3:ed:39:9b:98:3d:06:1a:76:5b:4f:e2:71:cc:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
        Validity
            Not Before: May 13 18:48:59 2025 GMT
            Not After : May 12 18:53:59 2026 GMT
        Subject: CN=FE8DBA33746A220D978AB84DB3D5223AA548BCC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c3:10:f6:d0:6c:77:06:36:0c:9c:53:35:77:
                    a1:49:01:30:31:33:46:58:dc:1c:e3:a3:f4:ee:a2:
                    60:7e:8a:e6:49:06:9d:9a:23:68:89:07:84:80:8c:
                    3d:08:24:9e:75:2f:6b:d0:ae:29:21:17:e5:e7:78:
                    5c:25:41:81:a7:db:1e:ea:c4:35:e4:60:a9:56:59:
                    c7:b8:97:84:df:49:aa:ac:e2:de:da:97:1b:98:fc:
                    55:0c:21:83:29:e7:60:58:00:a9:f6:a7:02:f9:9f:
                    04:3a:6b:24:e1:b2:1b:30:6b:90:18:7e:3a:9d:77:
                    29:04:ea:19:45:55:56:7b:67:6c:dd:55:36:68:6c:
                    e8:6b:78:99:c3:79:e1:99:38:2c:b9:9b:38:64:ec:
                    b9:dc:64:f0:60:94:b2:4f:81:a6:7c:71:35:6b:11:
                    1a:cc:fe:2f:66:08:98:75:bc:01:42:b6:b6:a7:57:
                    18:6e:f2:84:1b:f7:6a:4b:55:1a:40:3d:94:ab:15:
                    41:6d:cd:20:a9:43:2b:7d:b9:0f:b5:a7:e9:20:e4:
                    4f:13:a3:59:f4:7e:f2:1f:f3:f8:e3:f0:22:db:20:
                    bd:83:f7:a8:ed:df:bf:63:f0:dd:98:09:28:d0:4d:
                    2e:65:a4:a1:75:76:86:76:39:20:d7:07:6f:3a:de:
                    2e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:BA:33:74:6A:22:0D:97:8A:B8:4D:B3:D5:22:3A:A5:48:BC:C5
            X509v3 Authority Key Identifier:
                keyid:C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3331303a3a2f34382d3438203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0:310::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:5e:58:45:90:27:25:42:43:ab:e5:1a:6e:af:b7:d8:4c:0b:
         61:d3:7b:41:ab:9f:de:b9:2a:e4:ff:09:55:41:8c:f3:4b:19:
         af:02:64:14:c3:a2:8d:18:23:36:1e:f1:0e:5d:26:98:7a:0b:
         66:88:9e:32:2e:77:00:37:51:ed:33:01:a8:cd:01:85:7c:c1:
         1b:be:d1:4a:37:25:92:b5:06:0b:82:c1:33:3c:19:99:4b:3b:
         a8:46:25:0e:62:8a:83:3b:87:61:6f:b1:8b:28:39:fc:e9:aa:
         df:fc:c7:b9:c3:08:ea:a5:f9:45:d8:ee:47:2c:73:dc:34:91:
         9d:93:dd:52:83:e1:85:51:22:4a:d9:c8:0f:b8:c7:d2:21:be:
         ad:54:6f:91:20:3b:67:f7:e4:e6:af:f6:e6:d4:d9:9e:2d:0f:
         87:b9:e5:0a:33:5f:80:33:79:23:8a:bd:68:63:71:e1:d5:52:
         35:45:46:9f:34:59:b2:a3:42:f5:6c:4c:61:9e:ba:df:d0:3d:
         1c:ff:40:1c:90:fc:48:1f:7d:24:e0:a7:0a:08:3a:bd:b6:ee:
         36:53:4a:ad:5f:1c:08:96:b3:3a:cf:20:bb:49:fa:cc:4a:65:
         bc:de:be:a5:69:14:37:7a:97:d5:a8:75:7f:74:99:e8:d6:8b:
         e5:1f:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:54:19 2025 by rpki-client