Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a3a2f33332d3333203d3e20323730333036.roa
File:                     323830343a366130343a3a2f33332d3333203d3e20323730333036.roa (raw, json)
Hash identifier:          ef3eD0bbURaIK6C3N3oWRfTdjLEtlw0kWFfnC9iHxHM=
Subject key identifier:   B7:A3:E4:25:F2:AD:90:B6:DC:FA:AE:85:E5:8A:BF:AC:0C:56:AC:D7
Certificate issuer:       /CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
Certificate serial:       7A8D3CF6D93B0BE52A6F75F60417610244E24B97
Authority key identifier: F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a3a2f33332d3333203d3e20323730333036.roa
Signing time:             Sat 03 May 2025 16:05:55 +0000
ROA not before:           Sat 03 May 2025 16:00:55 +0000
ROA not after:            Sat 02 May 2026 16:05:55 +0000
asID:                     270306
IP address blocks:        2804:6a04::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl
                          rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 13:48:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:8d:3c:f6:d9:3b:0b:e5:2a:6f:75:f6:04:17:61:02:44:e2:4b:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3370651CDE1B6FD1325E85772142F6C758D8CB8
        Validity
            Not Before: May  3 16:00:55 2025 GMT
            Not After : May  2 16:05:55 2026 GMT
        Subject: CN=B7A3E425F2AD90B6DCFAAE85E58ABFAC0C56ACD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:da:73:a6:4e:5c:5c:2b:34:93:b7:77:7d:
                    1a:01:32:e0:5b:66:4c:e8:2e:cc:8b:8c:ef:cd:b8:
                    84:88:66:78:d8:c4:f7:98:1e:43:5c:b4:d4:a5:7f:
                    a8:1c:7e:77:d2:0e:2b:57:32:97:ca:c2:69:95:4f:
                    31:08:7d:b1:24:7c:35:fe:ab:08:d1:5f:64:de:fd:
                    2d:b8:66:6f:4b:f8:db:a6:9f:43:0b:c2:7a:d6:7f:
                    48:60:f5:5c:8e:11:5b:f0:50:3e:b7:b0:50:fa:b0:
                    70:93:81:63:92:45:c7:91:ae:f4:dd:a4:8f:7d:36:
                    e1:3f:6c:96:2a:da:0a:ad:3a:64:02:c0:bf:d0:73:
                    5f:95:0d:7b:2a:d2:fa:66:0e:e9:ce:42:cc:8a:b3:
                    2b:1e:98:5d:9e:99:ac:b9:e8:ba:cd:43:b2:56:a2:
                    7e:f4:33:19:a1:63:27:7f:a9:b3:8a:e8:59:a1:ac:
                    86:9b:de:a6:c7:1b:ce:54:d0:fa:3b:3d:d0:e5:fe:
                    3b:76:85:46:99:cb:c5:a3:59:03:95:73:ea:24:41:
                    35:16:d6:c6:1f:78:41:d3:f7:db:1f:7e:cf:6f:42:
                    37:4a:5f:39:5c:32:e2:9e:d0:c7:cb:83:6e:0c:54:
                    0f:b1:d4:0a:68:8c:92:fd:88:b6:e1:bf:d4:4f:3c:
                    6b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A3:E4:25:F2:AD:90:B6:DC:FA:AE:85:E5:8A:BF:AC:0C:56:AC:D7
            X509v3 Authority Key Identifier:
                keyid:F3:37:06:51:CD:E1:B6:FD:13:25:E8:57:72:14:2F:6C:75:8D:8C:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/F3370651CDE1B6FD1325E85772142F6C758D8CB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3370651CDE1B6FD1325E85772142F6C758D8CB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a3a2f33332d3333203d3e20323730333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a04::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:58:e5:6b:cd:35:45:78:1b:b9:99:d9:d7:20:76:21:b0:50:
         30:d7:67:87:60:66:c2:17:71:fb:5c:07:eb:b7:5d:35:45:3f:
         83:26:ba:f3:c9:57:f3:a1:48:4b:d4:cb:d3:c8:08:2e:23:20:
         81:05:38:63:6e:62:a1:28:e2:44:8b:17:67:ff:3b:aa:1e:ae:
         d4:c6:f5:f1:9e:fc:15:86:d1:e0:ed:c0:6e:64:2e:48:65:f5:
         9e:bd:2c:66:06:4e:5e:5c:ea:5b:3b:cc:e0:6e:60:2e:82:56:
         c5:cf:a7:1e:94:59:06:98:d1:c9:44:4a:e1:f8:15:4e:62:15:
         bf:f0:7b:2d:3d:9c:da:c6:2f:4e:b1:8b:ff:b8:c7:3f:ce:16:
         6d:b4:2e:0e:3f:fb:cc:3b:5d:85:34:59:c4:98:15:57:86:69:
         2b:ae:1b:17:23:e2:0b:25:c4:fe:d5:d0:95:74:95:cd:8f:ce:
         f5:f2:39:57:ab:63:00:ab:d4:58:f3:b9:7d:b9:03:2a:2f:f5:
         f2:9f:26:55:2d:bb:3b:c9:c3:0a:f5:a2:f5:c1:d7:9c:35:c4:
         1b:86:d9:0e:44:7a:ea:c5:65:7c:f1:91:8a:13:7f:54:05:12:
         17:8d:bf:d9:e2:48:49:eb:cd:9c:61:16:7d:a0:ff:20:2b:4d:
         fb:67:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:02:57 2025 by rpki-client