Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3836383a3a2f33322d313238203d3e203238363439.roa
File:                     323830343a3836383a3a2f33322d313238203d3e203238363439.roa (raw, json)
Hash identifier:          qU57tNZIy1k5v9yC3O4K7+MauOYGEsvARTuWiK1CucM=
Subject key identifier:   A4:A3:D0:C7:3D:BA:84:29:1F:45:75:BD:12:02:58:78:D8:F0:E3:87
Certificate issuer:       /CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
Certificate serial:       77E5C3BD1B1D96CE840C2ADDC5A74617DFE779BE
Authority key identifier: 1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3836383a3a2f33322d313238203d3e203238363439.roa
Signing time:             Tue 06 May 2025 00:58:17 +0000
ROA not before:           Tue 06 May 2025 00:53:17 +0000
ROA not after:            Tue 05 May 2026 00:58:17 +0000
asID:                     28649
IP address blocks:        2804:868::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl
                          rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 01:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e5:c3:bd:1b:1d:96:ce:84:0c:2a:dd:c5:a7:46:17:df:e7:79:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C93E103992F58DCA01F49CF34E99337FCF0DB43
        Validity
            Not Before: May  6 00:53:17 2025 GMT
            Not After : May  5 00:58:17 2026 GMT
        Subject: CN=A4A3D0C73DBA84291F4575BD12025878D8F0E387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:ca:3f:92:69:e8:de:de:58:5a:82:8e:ee:
                    74:5b:78:ce:38:bc:b6:2e:9c:bc:e8:7d:f3:57:9a:
                    ec:d9:0b:d7:74:1d:74:57:9f:23:87:28:c1:8e:0e:
                    c5:97:f8:27:1f:76:86:3a:d5:b7:06:6b:71:d3:c6:
                    7c:25:52:64:b0:ad:78:39:24:8e:ec:35:b1:7c:f6:
                    e6:67:ff:49:69:ec:9a:0b:c0:61:c0:4f:40:3c:fc:
                    69:d7:a3:b0:8c:67:a0:97:71:66:0c:f3:26:8f:22:
                    81:47:ce:e6:54:72:6a:11:fd:45:2c:5f:53:cd:d8:
                    27:a4:dc:6f:af:ea:2a:44:47:45:0c:ee:7e:b1:c0:
                    26:d0:89:99:c6:05:f4:4c:6d:3a:18:e5:40:e0:92:
                    1a:f4:59:06:03:a1:47:b1:ac:5f:86:35:d6:6e:2c:
                    b1:d0:10:7e:3a:80:9c:c4:c8:3a:ea:15:69:4f:52:
                    ca:4d:71:26:a0:39:6e:b9:90:de:a5:ad:02:39:61:
                    98:28:b8:d6:67:b4:2d:d9:69:04:c9:e0:b9:eb:f9:
                    98:29:53:58:02:6b:22:c8:2b:20:2f:9d:3d:86:93:
                    36:80:ea:a3:78:5d:dd:bf:69:17:57:e2:c1:8d:d8:
                    45:f2:08:e7:ce:40:30:8f:f9:fc:e8:66:96:d9:3f:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A3:D0:C7:3D:BA:84:29:1F:45:75:BD:12:02:58:78:D8:F0:E3:87
            X509v3 Authority Key Identifier:
                keyid:1C:93:E1:03:99:2F:58:DC:A0:1F:49:CF:34:E9:93:37:FC:F0:DB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/1C93E103992F58DCA01F49CF34E99337FCF0DB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1C93E103992F58DCA01F49CF34E99337FCF0DB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/At1JZs88jkpjhH2eXbd8ceao2tk4Ry2iThBXsUfVo3dK/0/323830343a3836383a3a2f33322d313238203d3e203238363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:868::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:4e:1a:76:ec:58:d6:c4:b3:e5:b3:96:dc:fe:4a:66:7d:19:
         89:2f:db:42:b8:44:3f:4f:de:5a:71:24:ff:93:d5:71:18:ec:
         bd:03:a1:11:80:4b:be:22:cb:07:17:61:3a:d7:04:1d:cb:bf:
         b9:19:23:4a:70:30:75:df:9e:85:bb:60:b7:84:04:fd:d6:17:
         9e:df:35:f1:8b:f8:6c:9f:da:4c:70:b5:b8:84:68:02:ae:4e:
         c7:c4:78:db:e0:38:47:48:0f:3d:32:99:ea:ed:cd:be:e7:f5:
         50:00:22:87:45:ad:bd:5f:33:6f:be:59:1e:ca:1b:f7:d0:d7:
         bf:a3:4f:6f:60:16:2b:de:64:25:0e:c0:33:f7:9d:c6:72:fc:
         87:36:5a:ba:f2:e5:e2:c7:aa:6b:d5:09:7f:f4:53:7d:39:86:
         85:2d:b7:29:f7:05:e2:f8:34:e5:ea:e4:51:d5:a1:c1:89:70:
         64:39:e1:bf:c4:bd:c3:24:87:dd:56:67:0f:ba:e2:93:65:02:
         88:b8:48:65:5d:e7:5f:4f:58:a4:9b:1f:73:2c:ef:1c:47:78:
         f2:2e:74:ac:10:fa:06:27:93:78:9b:08:55:52:3e:12:19:fc:
         4d:e7:b5:15:da:68:a3:cd:6b:fd:14:20:2c:b4:1c:92:d6:f7:
         5b:06:aa:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 11:48:15 2025 by rpki-client