Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/323830343a356133633a3a2f33322d313238203d3e20323638373537.roa
File:                     323830343a356133633a3a2f33322d313238203d3e20323638373537.roa (raw, json)
Hash identifier:          h83bnQqWS8cp4dIx0eohXpPIw38Fh8mxOojzQbFOO8A=
Subject key identifier:   3B:F1:6A:6D:03:C9:78:84:EF:82:55:86:8C:17:9B:C8:B3:2B:46:D2
Certificate issuer:       /CN=80C809FA23F8FE5F0C14001C9199D568F7E9DDEE
Certificate serial:       4E58BFA04D50331A08F257CFC8F88690151629DF
Authority key identifier: 80:C8:09:FA:23:F8:FE:5F:0C:14:00:1C:91:99:D5:68:F7:E9:DD:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/323830343a356133633a3a2f33322d313238203d3e20323638373537.roa
Signing time:             Fri 20 Jun 2025 00:04:29 +0000
ROA not before:           Thu 19 Jun 2025 23:59:29 +0000
ROA not after:            Fri 19 Jun 2026 00:04:29 +0000
asID:                     268757
IP address blocks:        2804:5a3c::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.crl
                          rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Jul 2025 04:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:58:bf:a0:4d:50:33:1a:08:f2:57:cf:c8:f8:86:90:15:16:29:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80C809FA23F8FE5F0C14001C9199D568F7E9DDEE
        Validity
            Not Before: Jun 19 23:59:29 2025 GMT
            Not After : Jun 19 00:04:29 2026 GMT
        Subject: CN=3BF16A6D03C97884EF8255868C179BC8B32B46D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:86:33:44:da:dc:a3:03:35:fd:fb:8b:09:84:
                    f1:97:53:33:49:4f:fa:48:fa:2b:3f:32:0b:36:46:
                    a9:9a:2b:1b:96:cf:84:f3:66:a3:d3:af:bb:57:f4:
                    71:db:a6:58:ac:10:a3:03:77:4d:7d:09:88:f6:92:
                    11:83:a0:c8:fa:ee:74:b7:a5:9e:9a:79:93:2c:6a:
                    71:ad:99:09:d6:79:ff:5e:eb:e4:3d:97:03:c4:2c:
                    23:29:02:ae:08:0f:84:14:1c:45:c6:7b:70:cb:3e:
                    90:76:a9:9a:fb:d8:41:80:7e:aa:01:de:86:a1:48:
                    8f:3f:83:cb:03:94:dd:6a:af:f0:fa:e8:ff:ba:ab:
                    69:e2:14:df:8f:16:ae:4f:2b:70:32:83:f0:24:a9:
                    88:b5:74:aa:8c:5c:c4:b0:5a:62:71:04:1c:fc:76:
                    7a:0a:e4:c5:d9:e5:dc:eb:5f:05:78:d3:82:5e:e5:
                    c6:ca:db:74:d3:02:5d:99:67:2e:99:ce:3a:2d:27:
                    ad:92:07:d9:af:16:23:8a:c8:2e:f7:58:65:96:47:
                    05:69:0e:c7:79:27:6a:3e:25:d3:63:d2:05:83:d4:
                    79:fb:8f:9f:3a:2a:e3:c0:b3:03:05:35:4f:e5:ac:
                    6c:eb:4c:79:87:d9:86:74:29:bc:49:05:45:3a:2c:
                    37:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:6A:6D:03:C9:78:84:EF:82:55:86:8C:17:9B:C8:B3:2B:46:D2
            X509v3 Authority Key Identifier:
                keyid:80:C8:09:FA:23:F8:FE:5F:0C:14:00:1C:91:99:D5:68:F7:E9:DD:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80C809FA23F8FE5F0C14001C9199D568F7E9DDEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BTyYLjwjnCGKE979zZuFEJwoYtAUVbzgZ4nn28PWiDWd/0/323830343a356133633a3a2f33322d313238203d3e20323638373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a3c::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:2f:cc:e5:6a:8f:52:12:24:3e:57:be:98:d4:a8:8f:0c:9e:
         82:47:62:81:e1:86:35:68:a6:33:7b:f4:57:a0:78:30:2f:4a:
         46:0b:db:0d:ce:fa:0e:72:ab:29:f7:a4:a1:3c:cb:a5:d6:6c:
         16:f4:1b:8a:4b:e3:63:a6:9b:f4:cd:6f:0e:f2:6f:c2:f3:9e:
         fa:c1:05:6f:88:ce:60:09:81:d7:f8:89:bc:22:66:73:6b:4b:
         43:b4:c6:3e:0c:3e:3c:6b:6b:90:8f:53:9a:aa:0b:c9:54:29:
         47:a0:4e:b8:0e:ea:c7:07:75:c0:da:f7:c7:8d:a0:40:93:00:
         b3:29:b2:ec:86:2a:bd:a4:d4:a5:e7:19:48:4b:77:8b:32:03:
         2c:c2:43:6c:16:d3:04:a1:c1:50:9b:02:a7:64:27:68:93:a9:
         ee:5e:37:ed:f4:8a:21:2e:4c:05:2f:e1:70:73:7e:d5:5c:a3:
         97:88:04:2b:12:50:ee:c9:43:cd:b4:04:a1:32:4f:74:a7:49:
         78:b8:a4:73:a1:2a:5f:19:35:ef:58:05:15:82:e1:ed:3b:83:
         fb:8f:76:57:6d:f4:11:e6:23:f9:59:db:20:ec:e0:c0:92:42:
         54:a2:73:e4:da:a1:31:24:6a:e5:27:f6:ef:ef:3d:56:b9:8c:
         57:99:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:19:36 2025 by rpki-client