Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa
File:                     323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa (raw, json)
Hash identifier:          JbAlMTGI5/VbN9M5etTB7Kmml/p3ib4ESwuDGrMoEx4=
Subject key identifier:   03:21:48:E6:A3:6D:C4:A8:1E:9A:E6:56:EB:D8:C4:7B:D0:EB:B0:66
Certificate issuer:       /CN=AAC19A004E25530B8859C605F2862F7AB78E6003
Certificate serial:       553105FD69A0EC147581F3C06D08FB950F413568
Authority key identifier: AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa
Signing time:             Wed 30 Apr 2025 18:25:19 +0000
ROA not before:           Wed 30 Apr 2025 18:20:19 +0000
ROA not after:            Wed 29 Apr 2026 18:25:19 +0000
asID:                     270793
IP address blocks:        2804:7180:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl
                          rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 21:41:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:31:05:fd:69:a0:ec:14:75:81:f3:c0:6d:08:fb:95:0f:41:35:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAC19A004E25530B8859C605F2862F7AB78E6003
        Validity
            Not Before: Apr 30 18:20:19 2025 GMT
            Not After : Apr 29 18:25:19 2026 GMT
        Subject: CN=032148E6A36DC4A81E9AE656EBD8C47BD0EBB066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:61:d5:66:63:23:9a:71:76:d2:e3:da:b7:
                    c3:94:c6:29:1a:7c:08:b1:ad:d9:75:e9:81:b8:7e:
                    32:d8:ce:a7:0d:d9:63:f0:f7:04:4e:38:ab:a1:1f:
                    21:3a:c1:78:5d:fa:99:b3:f2:06:65:0c:49:7d:9d:
                    f6:00:a3:b4:79:cc:91:be:da:27:0f:f4:47:1f:c5:
                    a1:de:b1:c5:f5:09:af:01:7c:ea:a6:46:7c:fc:ef:
                    ee:18:52:5a:f3:a5:52:91:db:f2:a4:f6:22:85:07:
                    19:03:06:fc:e4:5f:9b:9e:a8:1f:d9:cb:f0:c3:f9:
                    d0:eb:a5:bb:55:c3:37:6e:65:6d:ed:78:88:85:bc:
                    bf:12:28:dd:95:b4:96:ac:e3:a1:13:d4:6c:10:52:
                    d2:ab:67:98:f4:c8:d2:16:9f:d9:79:b9:f2:38:9b:
                    e7:4c:d5:80:05:0a:7b:c8:fc:32:d0:8b:ff:14:61:
                    e8:2c:44:9d:a7:21:47:24:f2:62:12:92:51:4e:18:
                    6c:c5:dd:66:41:0b:ce:13:30:a4:f9:56:e8:a5:5e:
                    3c:0a:f5:2c:18:b4:33:ad:26:b7:60:d8:bc:1a:43:
                    f1:20:3b:85:e5:6d:b3:5d:0a:39:5a:a4:d9:ca:e8:
                    49:09:ed:a0:b3:35:59:05:6d:fb:e3:25:e1:09:ae:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:21:48:E6:A3:6D:C4:A8:1E:9A:E6:56:EB:D8:C4:7B:D0:EB:B0:66
            X509v3 Authority Key Identifier:
                keyid:AA:C1:9A:00:4E:25:53:0B:88:59:C6:05:F2:86:2F:7A:B7:8E:60:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/AAC19A004E25530B8859C605F2862F7AB78E6003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AAC19A004E25530B8859C605F2862F7AB78E6003.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAt3oabeiPvTAn6SgTwsQKTDrkL1bMh37vRPojX8Euo3/0/323830343a373138303a633030303a3a2f33342d3334203d3e20323730373933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7180:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         90:bb:2c:90:4b:1c:79:bb:b7:0e:66:08:46:dd:89:ab:92:06:
         c3:37:bc:74:ac:00:20:9e:54:4f:99:7d:c6:a9:48:9b:85:0d:
         21:19:cf:ed:36:49:1b:b3:1d:f2:12:d7:76:63:be:5e:6c:49:
         13:b4:6c:79:2a:08:df:2c:ed:bc:96:8b:d1:6f:a3:20:d5:da:
         e8:54:d7:aa:6b:18:98:4b:86:32:23:b2:ad:96:55:8b:fa:6e:
         7b:48:1f:a8:9f:ad:93:2b:8a:4d:29:57:92:45:b0:c5:46:c5:
         36:1f:41:b1:16:29:29:0f:c3:49:c2:a3:3a:32:68:f5:0a:3f:
         72:7c:2b:8d:1e:3f:af:3a:f8:b2:92:2f:9a:a1:a4:fc:fa:78:
         20:52:07:24:66:3b:ea:c3:36:47:99:b8:13:34:d9:c2:8d:ea:
         32:aa:8b:51:8f:1a:bf:3c:6a:0d:dd:d3:65:2c:f9:cc:34:0a:
         37:6d:1b:6f:6b:81:00:fb:e9:7d:bf:fc:64:40:35:80:9b:41:
         7a:db:b5:3b:85:60:0a:8d:d3:64:a7:3a:0b:1b:64:3c:5a:0d:
         7a:dd:13:73:2a:58:c8:7a:d0:85:63:0e:2e:1f:93:8f:5f:1e:
         41:ab:a5:fc:8e:fe:a2:56:3b:27:bc:24:01:77:84:6f:bc:98:
         bf:b9:e7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:26:23 2025 by rpki-client