Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
File:                     323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa (raw, json)
Hash identifier:          dCClKMShMwdjcJzmAR/CuJlrHfSgUcs64BhAjDLbD0Y=
Subject key identifier:   18:F6:7F:BC:93:80:96:DF:0B:22:98:C7:B0:C1:5D:07:53:B8:81:8A
Certificate issuer:       /CN=79124DD01AF5FB142695944778636C75D227628B
Certificate serial:       5BD42817A5C32B469E0BE15ACD9C591B07109AE3
Authority key identifier: 79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa
Signing time:             Fri 02 May 2025 13:57:59 +0000
ROA not before:           Fri 02 May 2025 13:52:59 +0000
ROA not after:            Fri 01 May 2026 13:57:59 +0000
asID:                     263641
IP address blocks:        2804:1094:1100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 19:57:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:d4:28:17:a5:c3:2b:46:9e:0b:e1:5a:cd:9c:59:1b:07:10:9a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79124DD01AF5FB142695944778636C75D227628B
        Validity
            Not Before: May  2 13:52:59 2025 GMT
            Not After : May  1 13:57:59 2026 GMT
        Subject: CN=18F67FBC938096DF0B2298C7B0C15D0753B8818A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:2b:be:d3:09:3a:ee:db:e9:3c:3f:e1:03:
                    5d:a9:cc:54:87:97:82:34:92:7b:51:72:1c:4f:7c:
                    bd:4a:fc:82:74:21:0b:a1:3d:24:00:91:f8:2a:fd:
                    3b:58:ec:88:47:8a:70:93:75:4c:c3:b1:9c:9d:fb:
                    bb:ed:3c:b4:5f:4c:24:55:0d:36:15:24:c5:91:16:
                    db:b4:ba:17:a2:8b:dc:32:91:98:c9:1d:0a:52:dc:
                    ab:0e:8e:dd:52:42:b5:3c:fb:d5:13:69:b2:5b:bd:
                    2c:3c:09:86:d5:c3:db:ef:54:90:a1:cd:78:72:e6:
                    36:31:7e:f0:9c:b2:f0:73:aa:ce:65:28:52:49:14:
                    69:d1:6e:56:20:4b:ed:83:c0:99:e3:b1:53:0d:b2:
                    74:40:c3:68:47:d0:ed:43:4a:0c:36:ef:ff:75:12:
                    ff:f2:a6:e7:e1:31:38:aa:9f:ef:ad:87:b2:cb:84:
                    44:3e:8c:50:1b:5d:4b:53:d9:c3:ea:39:c9:b7:59:
                    db:e1:50:46:bc:b7:94:a4:da:64:c1:09:38:fa:59:
                    b2:63:20:79:27:57:d7:f5:74:ba:1b:c7:3f:72:6b:
                    4e:9a:e4:93:77:f2:8f:3a:c8:06:aa:74:3b:7c:62:
                    18:60:87:29:2a:92:84:72:d7:4e:ca:08:92:8a:f1:
                    83:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F6:7F:BC:93:80:96:DF:0B:22:98:C7:B0:C1:5D:07:53:B8:81:8A
            X509v3 Authority Key Identifier:
                keyid:79:12:4D:D0:1A:F5:FB:14:26:95:94:47:78:63:6C:75:D2:27:62:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/79124DD01AF5FB142695944778636C75D227628B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79124DD01AF5FB142695944778636C75D227628B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/1/323830343a313039343a313130303a3a2f34302d3430203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         d3:04:9b:34:11:7a:f2:32:ed:c9:45:4e:8d:8f:fa:a8:7b:21:
         64:f3:f0:3a:7e:b3:44:6d:30:b6:10:8e:5a:e6:58:be:b5:c7:
         d2:7d:d2:35:96:80:a4:a9:3d:d0:ac:ff:44:8b:48:5e:11:fd:
         2d:d3:72:32:da:c8:9e:dc:7f:25:bd:bc:93:b7:a4:f2:21:12:
         8d:75:99:48:cf:c0:ff:54:ff:64:25:8c:61:92:38:be:93:e6:
         7a:f2:76:9a:98:4d:f8:3b:21:1d:11:7b:5b:ae:a2:74:75:42:
         e8:b9:f5:4c:aa:fc:42:37:80:d3:65:b0:f5:e0:32:ec:69:2b:
         77:94:d4:8a:1d:17:06:17:70:7d:d3:de:57:49:6d:fb:1a:9f:
         bf:f3:e2:b6:60:0c:27:81:91:d6:e2:91:6e:76:27:51:e7:a1:
         e9:e7:f9:05:75:59:17:53:7a:2b:c0:b1:24:93:58:0c:1a:c8:
         b9:9d:d2:1b:a8:eb:62:f8:76:87:50:90:54:6a:76:93:01:d4:
         a2:79:40:fa:d1:47:e9:ea:78:ec:f2:aa:b4:56:6f:52:49:de:
         80:c7:d2:8b:49:d6:cd:a5:b2:07:73:3c:d2:ce:99:a7:f4:8a:
         af:50:4c:1b:f6:bc:c8:dc:58:e6:cd:89:6a:0e:20:dd:f7:e3:
         dd:5c:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:00:35 2025 by rpki-client