Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa
File:                     323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa (raw, json)
Hash identifier:          jFlPMSFKylfK2DXA/uGHU2L75uI0kY+ix5bS3n0DLGY=
Subject key identifier:   D6:69:8B:41:2A:19:71:2C:47:53:62:83:92:FC:C2:0B:D0:20:2B:FA
Certificate issuer:       /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial:       18884E42F87458D8906C56D3BA031A853E42D343
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa
Signing time:             Tue 06 May 2025 12:25:37 +0000
ROA not before:           Tue 06 May 2025 12:20:37 +0000
ROA not after:            Tue 05 May 2026 12:25:37 +0000
asID:                     266983
IP address blocks:        2804:4654:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
                          rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 08:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:88:4e:42:f8:74:58:d8:90:6c:56:d3:ba:03:1a:85:3e:42:d3:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
        Validity
            Not Before: May  6 12:20:37 2025 GMT
            Not After : May  5 12:25:37 2026 GMT
        Subject: CN=D6698B412A19712C4753628392FCC20BD0202BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:fa:c6:ba:d5:e5:ac:6e:dd:88:a1:2c:e5:
                    fd:c0:2d:0b:f2:23:fe:d9:fc:73:19:b4:77:d4:c9:
                    3a:e2:de:af:c8:23:f7:62:77:41:8a:81:f3:53:be:
                    60:cc:16:b0:df:e2:e4:e3:38:60:2a:ae:83:fe:67:
                    50:35:c7:c6:ca:b9:be:23:bd:be:e8:d4:26:5d:d3:
                    13:3e:8f:12:00:23:df:51:e9:1a:9b:73:23:67:1b:
                    27:74:c3:19:6b:7b:e1:99:3a:38:c5:2b:ce:cf:cd:
                    27:fd:8e:8b:a6:aa:16:30:bf:12:80:63:10:f5:15:
                    7f:1d:a6:4a:b2:92:20:ce:3c:b5:31:b2:c8:7e:34:
                    bb:9d:85:11:85:28:84:59:2e:62:60:5e:20:17:f9:
                    08:1f:8c:9a:2a:ae:3b:60:64:ed:d7:83:36:b5:dd:
                    45:cf:cc:de:1f:cf:76:c8:ff:4c:f0:67:f9:a8:31:
                    70:53:94:6e:1a:11:9c:59:91:ab:7d:a4:02:1b:53:
                    a1:17:b4:9f:e2:2c:9b:1e:df:2e:fd:a1:71:c7:b9:
                    e8:1b:df:a6:fa:18:52:8d:b6:fb:6d:95:c0:cd:45:
                    46:f2:fb:6b:a9:b3:d3:91:75:1f:26:50:10:86:64:
                    98:d4:2e:29:88:47:65:09:f1:28:a2:e2:0b:b0:b1:
                    b7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:8B:41:2A:19:71:2C:47:53:62:83:92:FC:C2:0B:D0:20:2B:FA
            X509v3 Authority Key Identifier:
                keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4654:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         01:5e:f7:96:8f:58:72:ed:ee:01:74:02:6f:58:d5:c6:2b:90:
         b7:b5:2a:5e:46:e8:ac:84:3a:bf:dc:b2:f1:4c:85:fc:41:cd:
         60:0a:a7:d5:be:49:5c:27:4b:75:36:dc:c3:44:6d:40:3f:e7:
         37:e1:3b:0e:0b:ee:1e:85:64:87:f4:11:6b:7b:d6:a7:30:7c:
         8d:04:14:f1:60:e0:9f:67:eb:29:bf:31:3f:68:71:18:94:d7:
         26:ca:48:85:2e:b3:9c:74:76:04:c8:2b:b2:ed:f3:5f:4e:53:
         92:c4:45:08:56:0b:25:e3:f6:58:ba:87:b4:14:c2:c8:a9:b0:
         40:a4:f5:52:f4:7b:33:03:91:cf:14:0d:24:99:d9:9b:17:a0:
         5c:39:b6:b9:f0:75:ec:01:18:b0:63:c3:22:54:c1:ce:5d:68:
         2c:6c:be:26:78:09:a1:61:73:00:4c:60:e0:82:79:54:8a:7f:
         ca:46:a8:7c:9b:46:88:e3:a5:26:07:c6:c0:dc:4b:46:8e:58:
         63:65:cc:66:85:f4:23:37:14:bc:6a:dc:76:d6:97:f9:68:4e:
         2c:e8:c7:ac:06:48:4c:62:de:54:d2:56:82:de:2e:43:45:7c:
         10:6b:f4:e2:b7:d4:e1:7f:72:b9:d7:ee:ed:fa:fa:6f:77:fc:
         f2:96:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:19:02 2025 by rpki-client