Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/323830343a336330633a3a2f33322d313238203d3e20323636313837.roa
File:                     323830343a336330633a3a2f33322d313238203d3e20323636313837.roa (raw, json)
Hash identifier:          tHPJWuZVFiTzc5hzDlhSD5Ra7JPohG9qR2wJZtcqNM4=
Subject key identifier:   1B:6E:F0:A5:7F:FC:5B:3A:54:E2:AD:22:86:77:BA:B1:EA:8A:CA:9E
Certificate issuer:       /CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
Certificate serial:       1C39A2A94BBB07D82020AA8061F9BDBFDB410CFB
Authority key identifier: 3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/323830343a336330633a3a2f33322d313238203d3e20323636313837.roa
Signing time:             Tue 10 Jun 2025 12:11:22 +0000
ROA not before:           Tue 10 Jun 2025 12:06:22 +0000
ROA not after:            Tue 09 Jun 2026 12:11:22 +0000
asID:                     266187
IP address blocks:        2804:3c0c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl
                          rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 23:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:39:a2:a9:4b:bb:07:d8:20:20:aa:80:61:f9:bd:bf:db:41:0c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A55A7A362ADF15C86D4B0D6061AA702693389A4
        Validity
            Not Before: Jun 10 12:06:22 2025 GMT
            Not After : Jun  9 12:11:22 2026 GMT
        Subject: CN=1B6EF0A57FFC5B3A54E2AD228677BAB1EA8ACA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:80:c0:8b:da:99:b3:be:f4:7a:fc:ca:72:
                    eb:62:65:a3:61:4f:73:6d:f3:7e:ad:8c:41:99:d6:
                    83:36:1e:34:26:b5:2d:b8:4a:3d:9f:3f:c2:28:5b:
                    80:47:73:c2:9a:27:58:80:c6:9c:cb:fb:ad:ce:e7:
                    14:f2:d4:86:5e:22:cb:08:55:a3:d0:63:7a:0a:86:
                    c8:33:ae:4d:71:1e:f9:32:e6:f3:4f:1c:95:45:58:
                    99:fa:25:90:ff:f3:37:b4:f7:73:8f:b6:9e:a7:1c:
                    df:1b:b7:b6:fd:a8:aa:5d:15:03:10:f3:a2:f3:31:
                    4b:6d:4a:73:89:7c:35:c6:9b:23:d2:bc:05:52:fa:
                    83:b6:69:09:f2:19:91:eb:c1:64:b9:b3:a0:e9:e8:
                    11:b4:b8:06:2f:0c:b8:44:9f:4c:35:69:2c:bc:c7:
                    ba:12:12:fb:f9:73:cd:c4:fd:dc:9e:dd:ba:00:b7:
                    23:9e:24:a4:06:4d:8f:65:36:f4:fa:7c:62:a0:25:
                    f3:e5:9a:b2:d5:4f:ee:58:c9:02:3b:84:3a:2b:35:
                    2b:03:cd:27:04:63:34:ab:b9:e3:71:67:a7:06:a4:
                    a8:fa:90:27:cc:92:9b:49:50:77:bf:3c:ab:d7:68:
                    28:af:3a:20:01:76:e8:da:bc:66:62:7e:92:b6:50:
                    5a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6E:F0:A5:7F:FC:5B:3A:54:E2:AD:22:86:77:BA:B1:EA:8A:CA:9E
            X509v3 Authority Key Identifier:
                keyid:3A:55:A7:A3:62:AD:F1:5C:86:D4:B0:D6:06:1A:A7:02:69:33:89:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/3A55A7A362ADF15C86D4B0D6061AA702693389A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A55A7A362ADF15C86D4B0D6061AA702693389A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5apg5NGAXyqVGhE12Z92Aj1AMon2nus1Hku69a9GNLbL/0/323830343a336330633a3a2f33322d313238203d3e20323636313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3c0c::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:a0:05:2f:bf:c4:ab:31:0c:87:b0:2d:ff:e9:8e:4a:ff:a8:
         25:f6:3a:80:24:d1:bf:c0:80:af:9c:46:d8:59:d5:42:d8:92:
         fc:30:f9:0e:f6:cf:1d:f6:d7:18:be:a0:8f:64:be:1a:d0:74:
         9f:e7:45:94:f5:00:68:55:f5:44:60:86:75:7d:ac:ea:b2:27:
         ae:df:67:92:ca:f9:8b:5f:f2:4c:65:aa:fe:da:88:e2:1a:a4:
         3e:04:58:37:d5:ca:11:05:27:8e:20:5b:00:74:36:fd:d1:20:
         5a:e4:73:89:f0:b7:92:3d:62:52:70:cb:eb:75:4c:8e:b5:4b:
         f1:d1:73:ed:cb:59:74:51:49:39:d3:38:e8:04:c9:ae:bd:f5:
         66:4e:23:05:29:fa:75:22:86:38:7a:11:44:53:d2:21:f0:0f:
         9d:17:ac:6f:98:55:10:93:90:30:97:33:c5:78:2f:7e:4f:ca:
         f6:ff:c5:a7:37:05:1f:09:38:57:f9:95:d8:82:15:01:c0:1f:
         a1:fb:d7:a5:19:cf:6f:5c:59:c9:2b:e9:61:a9:6f:0e:c4:90:
         5c:37:71:98:89:2e:3b:94:52:ab:8d:ab:60:6b:53:52:86:aa:
         66:11:5d:8c:7c:8d:49:8e:f2:35:ae:03:1d:d2:8e:1c:e0:83:
         c4:65:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:50:16 2025 by rpki-client