Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d3438203d3e203631353833.roa
File:                     323830343a313864383a3a2f33322d3438203d3e203631353833.roa (raw, json)
Hash identifier:          1kdnQEBPZI7b14AG5/gUT9Ud5Kk0QXe7EucIeNCydZY=
Subject key identifier:   A8:33:7E:8E:FB:A2:FD:61:F4:A3:F5:90:7A:BE:3C:3A:95:E9:CE:8C
Certificate issuer:       /CN=3CB1370100AB2291FE24983311386BE8544EB443
Certificate serial:       411390DE05EB8C5DD9B5150A46CEB5774A0B11BD
Authority key identifier: 3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d3438203d3e203631353833.roa
Signing time:             Wed 25 Jun 2025 19:27:36 +0000
ROA not before:           Wed 25 Jun 2025 19:22:36 +0000
ROA not after:            Wed 24 Jun 2026 19:27:36 +0000
asID:                     61583
IP address blocks:        2804:18d8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl
                          rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 14:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:13:90:de:05:eb:8c:5d:d9:b5:15:0a:46:ce:b5:77:4a:0b:11:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB1370100AB2291FE24983311386BE8544EB443
        Validity
            Not Before: Jun 25 19:22:36 2025 GMT
            Not After : Jun 24 19:27:36 2026 GMT
        Subject: CN=A8337E8EFBA2FD61F4A3F5907ABE3C3A95E9CE8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5a:e1:78:85:eb:2a:4f:17:c9:28:83:ce:7d:
                    04:58:a4:8c:78:dc:4e:fa:bc:26:6e:9a:13:e0:03:
                    61:12:68:aa:33:94:75:9e:2e:e7:d2:47:02:09:c0:
                    62:52:bc:3d:84:4e:ae:1c:6c:20:3f:31:94:1f:00:
                    ad:0b:82:cf:64:23:f3:9b:78:0b:8a:5f:ab:62:3e:
                    b5:3d:ce:a0:b1:a5:f5:34:2f:a8:ca:9a:99:a5:45:
                    c4:ae:f5:a7:79:58:49:50:0a:39:b3:d8:73:df:fe:
                    6d:f9:2c:a6:a8:e9:6c:7b:21:81:7c:f7:be:20:a2:
                    a4:46:dd:33:28:42:73:61:c9:fd:32:55:3a:a7:2b:
                    da:18:02:13:58:34:bf:c0:cb:62:18:14:55:4d:20:
                    ca:00:97:3f:9c:49:7d:9c:56:21:5a:69:02:27:db:
                    26:b8:b4:dd:34:52:c8:4c:f3:c9:5c:a1:72:fb:78:
                    57:0e:1a:c1:3a:55:97:10:00:68:dc:dc:b5:fa:9b:
                    9b:b4:30:fc:c2:23:08:ed:cb:f2:7b:12:86:d4:1e:
                    f8:a0:cd:0f:18:79:e0:76:82:91:eb:b3:f5:c7:cb:
                    60:c4:20:3e:49:13:15:ff:51:1f:b2:a3:8d:3c:49:
                    db:de:53:fa:0a:ce:f8:51:97:8d:26:28:fd:fc:22:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:7E:8E:FB:A2:FD:61:F4:A3:F5:90:7A:BE:3C:3A:95:E9:CE:8C
            X509v3 Authority Key Identifier:
                keyid:3C:B1:37:01:00:AB:22:91:FE:24:98:33:11:38:6B:E8:54:4E:B4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/3CB1370100AB2291FE24983311386BE8544EB443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CB1370100AB2291FE24983311386BE8544EB443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UoSkvSSNwoYNAd6PMzAUuUchW6YBaugzpHQLDSMVEsJ/0/323830343a313864383a3a2f33322d3438203d3e203631353833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:18d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:55:28:65:64:91:92:51:ab:a0:c4:b5:cd:0a:35:e7:ec:dc:
         72:1e:ec:10:20:d3:c8:60:82:82:5e:56:96:ff:9e:7d:8f:b5:
         0b:09:d0:75:b5:4a:6d:77:af:0d:de:15:9d:a4:31:d1:23:9e:
         d4:70:b8:13:1e:cf:12:fd:ea:f8:42:ac:34:85:ad:4a:4d:4a:
         25:a0:5b:e8:a5:16:49:6c:5f:0d:d7:18:c1:38:1c:3a:b9:fc:
         80:1d:bf:bf:84:d1:9c:67:12:9a:26:83:5f:64:92:88:51:f5:
         c6:de:c4:f0:96:39:9d:85:0b:37:7f:57:92:83:30:af:36:21:
         43:d0:0f:a8:bc:f2:ad:5d:46:d2:ee:20:7b:90:60:1f:eb:f2:
         3b:52:bc:31:91:a5:a6:5c:13:72:6e:4e:03:30:0d:7f:f5:fc:
         1a:59:66:1d:90:36:1f:08:f6:13:32:53:63:89:46:fb:44:4d:
         e0:3f:b1:76:8b:42:6d:5a:4f:52:c4:c3:06:9b:cb:e9:a4:1f:
         48:42:41:40:84:9f:ff:02:08:34:c8:1d:ad:81:21:3b:78:5d:
         03:7f:4f:17:3e:59:d5:c5:08:9e:f4:ba:62:b4:47:5e:d1:19:
         fa:db:77:e4:0c:5f:75:1a:2d:ec:e2:19:5e:55:df:f8:9a:a9:
         91:66:95:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:31:52 2025 by rpki-client