Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a313030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a313030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          b18n7UC/sAwPPk4IF3q7b2vswLp42kyGTMlVGyDw6Tk=
Subject key identifier:   4C:50:D3:D6:DD:18:E1:58:3D:D5:05:22:F5:26:8A:7F:BC:04:7E:FD
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       73454FDE6858906351B9FEF63EF37EEDC875C3FE
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a313030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:31 +0000
ROA not before:           Fri 02 May 2025 23:09:31 +0000
ROA not after:            Fri 01 May 2026 23:14:31 +0000
asID:                     270764
IP address blocks:        2804:7110:1000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 00:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:45:4f:de:68:58:90:63:51:b9:fe:f6:3e:f3:7e:ed:c8:75:c3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:31 2025 GMT
            Not After : May  1 23:14:31 2026 GMT
        Subject: CN=4C50D3D6DD18E1583DD50522F5268A7FBC047EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:f8:a7:2e:15:31:6c:64:77:92:b9:8a:f6:
                    3b:ef:66:3e:87:ec:91:2e:ae:33:89:a1:81:8e:a1:
                    60:16:35:23:ef:d2:f8:ad:2f:91:b4:3c:c2:c4:dc:
                    ea:a2:6e:67:71:9b:95:76:c6:99:74:25:ac:72:f3:
                    ee:35:f2:2b:1e:a1:01:f6:b7:02:54:8d:1a:e7:49:
                    36:66:d7:35:1c:29:8d:59:a1:f7:f2:61:9b:27:94:
                    13:39:5e:ef:e3:91:3e:3c:9d:6d:13:1d:05:74:5d:
                    53:48:9f:51:de:12:3f:b3:ed:5c:26:1b:67:d9:4a:
                    81:03:2e:2c:3e:c8:d9:c6:b2:35:47:02:0e:c8:b6:
                    68:f1:57:67:54:f0:13:4d:ab:dc:ab:22:a4:be:2c:
                    47:00:5a:30:57:25:c1:c7:34:9d:63:8d:e0:34:d8:
                    d1:a1:fc:10:6c:95:b0:ff:92:33:f0:bc:c3:63:1b:
                    2b:49:20:be:d5:ad:91:d1:61:dd:6d:dd:d5:3f:82:
                    70:35:96:a4:a7:ef:e1:ee:c9:f3:bf:9c:80:c8:13:
                    21:4a:3c:41:69:4c:b6:12:be:19:57:08:ef:39:82:
                    a8:39:32:ab:7c:05:b1:1f:b3:a0:8f:0a:81:00:c0:
                    4f:11:b6:b3:b6:6b:a4:a4:09:7d:75:5a:c0:e9:0a:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:D3:D6:DD:18:E1:58:3D:D5:05:22:F5:26:8A:7F:BC:04:7E:FD
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a313030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:85:86:0f:06:5b:df:7a:90:81:e5:d0:7b:1e:97:f9:fd:1d:
         fb:8d:28:30:c8:71:55:fc:ac:17:d0:b7:2a:48:5d:f3:65:76:
         99:4d:6c:f2:1e:5d:fd:69:b8:c1:65:51:48:3a:66:4e:37:a9:
         e8:6a:11:e5:9b:f0:f5:91:c7:48:73:a0:b7:08:1b:95:3c:65:
         e9:58:f3:a9:04:3b:ec:e7:3a:7f:82:0e:06:16:8d:c2:4b:9f:
         61:af:16:16:f9:8d:c0:56:4d:17:3b:22:41:7e:c2:28:8d:fe:
         15:17:ad:32:fb:64:4c:66:9b:e1:70:4d:54:73:22:e5:df:d0:
         4d:49:40:e2:4f:77:b6:0d:5d:c2:85:a2:31:0e:af:56:7c:39:
         fb:57:e4:bf:05:19:07:5c:c2:7d:2d:c9:45:cd:59:e1:c0:a3:
         9d:05:bf:59:b4:14:c1:7a:af:2c:36:ec:9e:71:0f:b3:53:b1:
         8c:3f:cf:86:7d:48:88:e2:08:6d:b2:a7:f2:81:b1:f6:46:e4:
         c2:d1:a3:80:5d:23:cf:ea:e8:bb:5b:79:69:9c:e2:0f:f2:e3:
         14:1b:6a:cc:02:07:8a:c8:c5:50:9c:a1:da:36:d1:f6:ac:3e:
         b6:4e:cc:41:cd:3d:36:86:9f:41:53:58:65:67:d0:bb:53:17:
         e4:e2:c1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:43:54 2025 by rpki-client