Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/323830343a6330343a3a2f33322d313238203d3e203532363630.roa
File:                     323830343a6330343a3a2f33322d313238203d3e203532363630.roa (raw, json)
Hash identifier:          Z6/YMyE4NyHg0Yx+ngBURUeszLbB3PmPoMfLyiuHrgM=
Subject key identifier:   A8:D1:5C:10:47:FF:08:04:97:A4:49:62:5A:B4:B7:F3:60:94:CE:E4
Certificate issuer:       /CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
Certificate serial:       7BE9734D129833C0832D0A15ED850EA1023DC0E4
Authority key identifier: 9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/323830343a6330343a3a2f33322d313238203d3e203532363630.roa
Signing time:             Fri 02 May 2025 18:00:21 +0000
ROA not before:           Fri 02 May 2025 17:55:21 +0000
ROA not after:            Fri 01 May 2026 18:00:21 +0000
asID:                     52660
IP address blocks:        2804:c04::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl
                          rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 02:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e9:73:4d:12:98:33:c0:83:2d:0a:15:ed:85:0e:a1:02:3d:c0:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D
        Validity
            Not Before: May  2 17:55:21 2025 GMT
            Not After : May  1 18:00:21 2026 GMT
        Subject: CN=A8D15C1047FF080497A449625AB4B7F36094CEE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:81:7c:75:aa:0d:77:53:3f:12:08:17:74:
                    47:94:b6:69:86:87:53:77:8c:7c:aa:9c:4d:b5:ed:
                    93:f8:e6:9a:37:dc:8c:64:e1:ec:09:28:30:42:05:
                    f1:0d:a9:b0:d2:3c:b0:a2:01:56:9c:70:18:5e:a4:
                    8e:2b:9a:c6:19:85:73:f9:9e:42:8c:30:bd:90:a0:
                    d3:05:f9:91:d4:95:b7:72:73:4b:75:59:4d:96:49:
                    23:34:d7:72:b9:c9:47:4f:99:2c:80:2a:15:e5:06:
                    17:91:f9:1f:6d:ac:6b:44:80:8b:c3:72:07:2b:cc:
                    1b:96:e8:1f:45:5b:a5:16:5a:08:9b:5f:0e:00:9e:
                    ed:1d:95:33:35:e4:a5:49:14:9c:de:35:8c:17:0b:
                    36:39:94:bf:74:60:32:8b:88:93:cb:78:5b:e1:0d:
                    e4:25:fa:8f:b8:87:51:12:68:f5:06:e4:a4:94:29:
                    70:f0:b0:73:d3:4f:71:f9:74:9b:f2:17:a5:7c:ab:
                    f1:6f:ca:e6:f0:cf:9e:88:16:94:bc:b9:a5:c9:7b:
                    c1:0a:e3:28:43:da:f5:ce:32:f6:5e:f1:75:38:f1:
                    7c:39:15:f4:09:1c:25:55:fc:75:46:aa:41:ed:8c:
                    81:60:27:cf:5d:9d:dc:26:66:be:ed:79:e8:1d:c3:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D1:5C:10:47:FF:08:04:97:A4:49:62:5A:B4:B7:F3:60:94:CE:E4
            X509v3 Authority Key Identifier:
                keyid:9A:3E:45:4B:6B:C1:DD:C0:42:2A:9E:4D:F4:D5:1A:58:7E:17:34:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9A3E454B6BC1DDC0422A9E4DF4D51A587E17341D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/1/323830343a6330343a3a2f33322d313238203d3e203532363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c04::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:20:9d:40:e4:f5:6d:c7:c8:b8:c7:2a:b7:e0:92:4a:cf:67:
         0f:5a:00:57:05:30:19:cc:db:d4:34:10:14:5c:40:8e:d8:8c:
         3c:54:bd:cb:ca:d7:ec:a6:bf:f1:c7:b3:12:7d:fa:05:a4:63:
         8a:56:c6:e9:e9:d2:bd:20:d5:ea:62:93:c3:b9:8d:4e:1b:28:
         a1:76:7b:79:aa:85:b4:4e:2b:bc:84:a8:8c:0e:e8:95:26:99:
         10:5e:13:38:b2:b5:c3:7d:61:f3:52:d6:1b:6a:c4:93:18:d2:
         34:d4:b1:7e:5e:a3:1b:09:3a:35:eb:66:02:49:71:88:87:49:
         64:10:74:47:0d:94:8c:45:a3:31:e7:14:32:b6:ed:da:a8:da:
         4e:43:d7:8d:d7:17:7b:6d:ca:c6:39:0f:f1:6b:99:10:37:2e:
         d1:eb:0c:a8:01:ef:58:ed:d4:8d:96:76:db:6d:5c:f5:a8:d7:
         22:a7:b1:f5:f4:43:20:72:32:43:d3:31:bc:2b:5e:83:93:8f:
         54:a1:b8:d0:41:fb:dd:76:69:28:2e:b9:36:fa:1c:10:d2:90:
         d2:d4:8c:4d:97:a5:ba:e7:86:7c:53:f5:ff:40:fa:64:71:a3:
         4a:37:1b:bc:64:a7:12:35:40:1f:53:a1:9d:99:b0:b7:48:e4:
         28:9e:39:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:52:02 2025 by rpki-client