Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa
File:                     323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa (raw, json)
Hash identifier:          3GInbSSbnhTyYbltgo5T1Q4DuldcQ5dGmKK7gsIjrQs=
Subject key identifier:   42:BD:74:50:B7:F8:EB:CB:8E:9E:D7:0D:8A:9F:1D:77:C4:6A:18:FA
Certificate issuer:       /CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
Certificate serial:       59DAA9221E8DE10E188C293CEE2156C52F3F8153
Authority key identifier: C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa
Signing time:             Tue 13 May 2025 18:54:14 +0000
ROA not before:           Tue 13 May 2025 18:49:14 +0000
ROA not after:            Tue 12 May 2026 18:54:14 +0000
asID:                     61900
IP address blocks:        2804:12a0:80a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl
                          rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 16 May 2025 08:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:da:a9:22:1e:8d:e1:0e:18:8c:29:3c:ee:21:56:c5:2f:3f:81:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC
        Validity
            Not Before: May 13 18:49:14 2025 GMT
            Not After : May 12 18:54:14 2026 GMT
        Subject: CN=42BD7450B7F8EBCB8E9ED70D8A9F1D77C46A18FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c6:7d:3a:a7:54:eb:44:37:f0:cb:d3:2a:84:
                    c4:b4:3e:00:34:ad:33:b8:e6:5a:a8:ac:fa:bb:d7:
                    40:dc:6c:3b:fb:1d:4d:f3:e7:ea:ef:5e:ae:d7:9b:
                    b3:b5:54:e4:de:3a:c9:8a:68:13:85:b5:b1:a9:db:
                    08:b9:51:44:df:62:d2:9e:72:24:43:49:2c:47:bd:
                    8a:bf:4c:97:e6:94:f4:d9:71:06:c1:a0:fc:e9:5f:
                    fa:40:b5:8a:5a:47:cc:6b:81:b6:fa:5f:2b:7b:06:
                    ed:f8:b6:19:80:b4:10:16:3e:53:6a:ef:21:bb:4e:
                    de:97:a4:60:c9:24:24:3f:47:69:5f:de:41:c5:ec:
                    66:4d:63:ae:de:59:54:12:92:ac:1c:59:26:64:49:
                    79:be:e9:7b:ad:c1:1d:28:d8:de:a3:23:75:50:13:
                    f6:93:fb:3a:12:aa:f0:a4:cb:08:1b:3d:fb:3a:b7:
                    97:83:59:9d:18:2f:c0:4b:c0:a1:f9:ec:8c:4c:d3:
                    da:41:37:18:6e:b3:53:2b:52:ec:8a:41:f8:78:9e:
                    d2:18:60:d7:af:d9:3a:d0:c9:07:52:65:e1:88:a7:
                    6f:23:60:3c:66:f6:0f:ca:01:39:71:68:37:51:14:
                    84:62:09:3d:d2:8b:95:ca:ce:37:20:b1:a4:ae:fc:
                    45:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:BD:74:50:B7:F8:EB:CB:8E:9E:D7:0D:8A:9F:1D:77:C4:6A:18:FA
            X509v3 Authority Key Identifier:
                keyid:C0:D5:F3:AC:1F:96:4C:6A:1A:6F:37:F3:9E:5E:A5:27:C6:39:8C:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0D5F3AC1F964C6A1A6F37F39E5EA527C6398CFC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a383061303a3a2f34382d3438203d3e203631393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:12a0:80a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:9f:e0:74:8c:5b:51:84:c7:71:c3:1e:00:8d:64:af:a4:86:
         ec:01:8b:30:8b:d8:07:56:fa:41:a8:e9:de:47:94:2e:46:97:
         9c:59:91:cc:60:7b:7b:d0:32:77:79:7d:20:6f:ae:74:6d:59:
         df:e3:3d:88:cd:4d:17:6d:7f:ec:f1:78:63:0e:51:fb:8c:e1:
         81:10:7e:16:08:f7:df:3d:fe:a3:ee:2c:de:66:02:ae:15:fc:
         37:d6:0d:4a:b0:c5:e8:7b:a3:b7:1d:37:28:ac:34:1a:3c:32:
         13:8f:67:e4:04:8c:0a:a4:9e:24:5b:5c:b9:c7:2a:7a:89:5a:
         c4:d1:3b:f1:0a:2b:a3:55:22:96:05:a9:eb:f0:36:94:fb:1b:
         8a:ad:88:3b:f7:1f:f8:11:5d:86:29:b9:5c:3e:b4:ee:df:6c:
         94:45:38:0a:03:4a:8d:12:77:f6:04:71:72:b8:90:da:5d:1e:
         d1:c8:8b:6d:26:10:a6:a1:cf:fd:9d:66:10:23:39:67:ee:fe:
         9f:8c:bb:30:0e:27:a5:66:e4:c0:17:4e:c9:f6:7b:1c:96:36:
         a7:a7:8d:79:6a:89:90:c6:97:8f:06:79:13:7e:3a:63:6e:85:
         6b:e9:00:45:eb:10:68:9a:57:2d:de:72:37:e8:9f:e9:94:08:
         1e:a1:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:01:23 2025 by rpki-client