Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
File:                     323830343a343339383a3a2f33322d3438203d3e20323637353738.roa (raw, json)
Hash identifier:          dkTVx/tBaNClUk8wq7B/f4Dsism+PwA8T7arPY6QrJ4=
Subject key identifier:   23:D3:61:4C:4D:A7:0E:54:6F:79:F6:40:0C:27:A0:32:D0:9B:0B:C0
Certificate issuer:       /CN=C35B03ED2F3CFDB8150D105C0E7E319D0348B560
Certificate serial:       4AECB010AAD7E27145928ECDC189188C70B9BA71
Authority key identifier: C3:5B:03:ED:2F:3C:FD:B8:15:0D:10:5C:0E:7E:31:9D:03:48:B5:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa
Signing time:             Mon 05 May 2025 19:21:13 +0000
ROA not before:           Mon 05 May 2025 19:16:13 +0000
ROA not after:            Mon 04 May 2026 19:21:13 +0000
asID:                     267578
IP address blocks:        2804:4398::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.crl
                          rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 May 2025 07:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ec:b0:10:aa:d7:e2:71:45:92:8e:cd:c1:89:18:8c:70:b9:ba:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C35B03ED2F3CFDB8150D105C0E7E319D0348B560
        Validity
            Not Before: May  5 19:16:13 2025 GMT
            Not After : May  4 19:21:13 2026 GMT
        Subject: CN=23D3614C4DA70E546F79F6400C27A032D09B0BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:a9:4e:ae:1d:20:9e:5b:49:bf:03:f3:0a:
                    f9:9f:1f:92:d3:8a:56:57:e0:41:f3:59:93:d8:08:
                    bb:51:25:89:74:2f:a0:b0:82:ba:0c:2b:a9:4c:0d:
                    bd:0a:23:ff:f4:8b:04:36:7b:59:64:71:42:e9:9e:
                    cb:ab:48:c1:33:09:82:7e:1b:de:d8:ad:0d:f4:9d:
                    63:18:88:27:cd:72:e1:cc:80:ef:e9:e1:9e:20:20:
                    ac:dc:cd:a8:5d:31:ff:00:29:4d:2f:8d:cb:9f:76:
                    3f:85:5d:ff:ea:ed:9f:8d:fd:43:f9:78:89:5b:d7:
                    8c:e5:a3:ed:3e:72:9f:bd:a1:3c:78:b5:76:a7:9f:
                    7c:3d:92:1a:12:13:04:bb:b8:d7:32:61:bf:f3:5c:
                    94:dc:f5:27:f4:e0:36:3d:d1:8b:74:74:15:f8:92:
                    f5:62:c2:df:5f:fd:c0:5b:72:15:37:8e:4c:89:35:
                    1b:1b:b5:4b:c0:8f:52:0c:2b:69:ee:a7:f7:84:8c:
                    b5:20:5f:5b:ce:53:40:4e:df:d3:3d:fa:aa:ae:2f:
                    2e:39:8c:e5:47:c7:0a:9c:68:e2:e4:71:21:11:7e:
                    38:75:cf:37:e8:28:22:a1:8b:54:b9:2c:d4:87:e0:
                    f8:49:e7:2a:f8:f4:96:04:8f:f0:3d:8b:3f:bc:c2:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D3:61:4C:4D:A7:0E:54:6F:79:F6:40:0C:27:A0:32:D0:9B:0B:C0
            X509v3 Authority Key Identifier:
                keyid:C3:5B:03:ED:2F:3C:FD:B8:15:0D:10:5C:0E:7E:31:9D:03:48:B5:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C35B03ED2F3CFDB8150D105C0E7E319D0348B560.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CY8UkggCCB2cbcPh6mqHZVWeY3WJYNVrqtUjgPBqAmYT/0/323830343a343339383a3a2f33322d3438203d3e20323637353738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4398::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:2a:28:38:1e:30:06:0b:66:93:58:fd:89:df:49:48:c1:
         ea:9c:4c:1a:8b:14:d5:1f:bf:0b:df:8c:4f:2d:98:64:ab:53:
         6c:7f:f4:16:a3:83:0d:63:3d:9b:67:db:12:df:a0:f3:ef:43:
         9e:32:42:a7:2d:8a:3f:81:83:03:fa:8c:25:de:43:ed:32:1b:
         21:4e:fd:08:5a:47:1f:78:49:80:67:d5:87:95:fe:78:48:a5:
         24:b4:40:51:44:1f:2b:27:38:45:d2:54:3b:85:3e:8a:9f:48:
         9b:8e:4b:ac:25:4c:da:10:b4:33:cd:cb:20:9e:da:d7:57:fd:
         fa:91:10:2b:3c:d2:ce:de:77:46:d6:5e:c5:55:7c:2d:e7:8e:
         96:01:20:1d:e5:59:c3:ed:e4:f2:27:1c:0e:6a:76:1d:ed:a2:
         56:49:b4:20:cc:7e:5a:35:4d:17:11:a7:c2:b3:31:13:63:b5:
         c9:d1:66:8f:9f:f0:64:0d:1f:fb:cb:05:6c:c2:fd:24:eb:fb:
         04:16:ad:1e:bf:67:f9:05:cb:6f:c3:d6:16:36:49:84:2d:40:
         2c:a6:5d:bd:96:72:b0:3d:91:6a:9d:e4:06:3d:fc:57:24:90:
         0c:ed:27:e0:d9:9c:47:67:f4:ce:d6:3d:91:56:c3:ea:12:2e:
         d4:79:b1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:21:44 2025 by rpki-client