Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          fXZyefWqlPNtfIQZFDU4d1pQOuYVh2keNAGZ72g9Ri8=
Subject key identifier:   8D:9B:65:FA:F9:17:82:A4:C5:E4:01:EE:FE:DB:87:14:A0:F8:BF:3D
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       4DD8F38620B929F72333AF08C7B547EC6B464453
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:30 +0000
ROA not before:           Fri 02 May 2025 23:09:30 +0000
ROA not after:            Fri 01 May 2026 23:14:30 +0000
asID:                     270764
IP address blocks:        2804:7110:3000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 02:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d8:f3:86:20:b9:29:f7:23:33:af:08:c7:b5:47:ec:6b:46:44:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:30 2025 GMT
            Not After : May  1 23:14:30 2026 GMT
        Subject: CN=8D9B65FAF91782A4C5E401EEFEDB8714A0F8BF3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:62:72:53:79:09:8b:c3:3e:1f:73:39:20:
                    ef:29:76:29:56:19:b8:72:33:89:6e:a0:f2:8d:9f:
                    54:d6:7a:68:84:41:47:32:e8:00:aa:a8:4a:1e:44:
                    8e:a3:7f:d5:e3:10:08:30:1b:c9:e9:5f:fa:a8:5a:
                    bf:e2:0e:5c:45:c7:b7:e7:77:8b:51:8f:3c:4e:13:
                    dc:ff:98:c6:c3:ec:3d:04:44:d1:2b:4f:d9:f9:aa:
                    a9:e0:20:0c:26:57:cc:18:60:6d:f5:72:5a:0a:15:
                    3d:9f:bb:7e:ea:65:98:7d:ad:47:0f:8d:d8:b7:29:
                    e1:7e:52:74:5d:d1:00:1d:c9:d9:ca:9b:6b:23:8a:
                    25:a0:1e:2e:bb:aa:60:25:a7:48:e1:1e:ec:23:6c:
                    be:63:42:e3:55:07:ae:a5:32:1c:9a:8f:21:35:da:
                    16:28:f7:b5:e5:e4:69:04:f9:94:2e:1c:59:64:0b:
                    3b:e3:88:f9:2d:79:0e:d8:44:86:5d:2c:94:5b:68:
                    e2:0b:d8:40:e7:02:e1:56:7d:e1:82:45:36:5d:69:
                    69:76:30:66:81:ba:46:20:98:ce:7d:13:8d:66:9a:
                    3b:b0:9b:da:c2:56:4a:fa:41:7d:b9:71:5e:6b:96:
                    0b:7f:3d:08:22:f1:18:4f:50:f7:cc:27:d0:37:73:
                    84:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9B:65:FA:F9:17:82:A4:C5:E4:01:EE:FE:DB:87:14:A0:F8:BF:3D
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a333030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:01:8b:90:25:40:47:b5:b5:ba:ed:3f:60:81:62:27:e9:ea:
         78:93:d2:a3:d4:7f:e2:3f:fa:63:d8:88:46:8e:7b:f4:11:44:
         76:89:68:d3:08:2c:6b:6b:e9:5e:31:26:80:24:c1:e4:67:ed:
         77:5b:9f:df:21:ac:6b:07:b9:e0:d0:b0:0e:55:d3:a4:49:47:
         a7:17:df:60:77:57:76:2d:5a:61:44:63:c2:77:cf:0c:b7:d2:
         9d:3b:d8:16:7b:4c:c3:35:08:7d:8f:ad:99:8b:4b:13:f2:81:
         98:0b:bb:02:ab:52:e7:40:bb:dc:4b:46:76:24:9a:25:cb:f8:
         e1:ab:90:6a:f9:c2:3c:cf:ce:ab:06:f4:37:e6:6d:3c:05:c7:
         8c:5a:76:27:48:f5:29:0a:e9:19:b8:56:7b:88:c5:1d:57:51:
         b6:6d:03:2e:ac:b5:c7:cd:89:6a:0e:43:a8:e3:b9:7b:7f:b8:
         07:5a:55:ba:c3:73:f7:61:27:7e:21:6e:bb:d7:f2:14:b8:49:
         88:99:54:58:99:b8:3f:32:07:6c:d3:7d:d6:8c:7e:22:6d:47:
         ac:9c:f7:75:69:c9:b3:a4:4e:ca:d7:8e:62:25:33:3d:a2:a5:
         80:db:f6:c6:85:ce:ea:20:c3:88:b7:fd:1a:90:5a:88:78:6a:
         43:1c:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:11:56 2025 by rpki-client