Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa
File:                     323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa (raw, json)
Hash identifier:          oS0W0fJahIDRdZzDIeMGFLIaGQbPjQ6Jsw81t4wKTW8=
Subject key identifier:   EC:1B:5C:6B:B3:31:19:84:6C:DC:BC:B5:B9:24:7D:88:CF:B0:F4:D2
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       5C3B62A56924E1F6F5C2160A42A5D1CF713F5417
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:30 +0000
ROA not before:           Fri 02 May 2025 23:09:30 +0000
ROA not after:            Fri 01 May 2026 23:14:30 +0000
asID:                     270764
IP address blocks:        2804:7110:4900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 19:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3b:62:a5:69:24:e1:f6:f5:c2:16:0a:42:a5:d1:cf:71:3f:54:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:30 2025 GMT
            Not After : May  1 23:14:30 2026 GMT
        Subject: CN=EC1B5C6BB33119846CDCBCB5B9247D88CFB0F4D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e5:2c:47:c3:4f:8d:a8:ac:76:60:71:51:b2:
                    53:6c:c9:38:07:e1:dc:68:a9:12:92:33:6b:58:c9:
                    46:99:14:10:43:34:62:d8:e7:02:ca:49:7f:6a:9f:
                    2f:80:e3:0d:e3:ed:a5:25:35:8d:94:50:70:6f:07:
                    ee:4a:8b:1d:66:fb:7a:d9:e5:81:e7:39:8f:b4:78:
                    8e:88:f2:e8:42:58:f5:87:6d:98:75:05:27:5a:d4:
                    33:05:56:b8:57:2b:fc:13:ce:77:bd:32:15:39:00:
                    67:8a:62:fa:5f:df:7a:0a:8d:12:74:68:13:23:1a:
                    7f:87:94:67:e0:c0:19:67:5d:bd:8c:29:51:c6:ea:
                    fd:f3:c1:4d:d5:d6:8f:4e:f6:9b:5a:44:4c:83:a7:
                    4b:38:cc:e1:07:5e:ae:e3:14:b1:95:a4:aa:05:da:
                    85:39:9d:dc:53:38:a9:c9:2a:9a:d0:a4:af:66:cf:
                    c7:b2:a5:5f:ed:4a:73:eb:df:2c:df:00:a9:6e:11:
                    90:44:f0:40:db:8b:09:94:b7:02:e2:08:43:a8:75:
                    5d:77:ef:93:d4:41:02:63:43:04:05:5e:5a:fc:d1:
                    48:62:08:46:82:0d:1a:f0:01:49:75:9d:21:af:14:
                    44:96:28:9e:15:c1:8d:2f:df:e1:a4:04:17:91:dd:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1B:5C:6B:B3:31:19:84:6C:DC:BC:B5:B9:24:7D:88:CF:B0:F4:D2
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a343930303a3a2f34302d3430203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:8d:d1:68:3e:3a:e8:54:38:c0:8b:28:76:c6:7d:ab:d0:
         b0:d8:03:8e:49:1d:c5:bd:18:03:b6:b0:bf:3d:8a:3e:ff:56:
         24:be:0a:53:b5:01:5d:ea:5a:0f:7b:d5:36:17:a3:db:d2:77:
         2d:ac:3b:c1:80:4b:b7:3b:ef:d4:78:24:99:a5:98:a3:1d:d8:
         0d:89:65:49:d9:f1:ec:4a:6f:92:0a:e2:65:33:01:1c:91:25:
         dc:b6:1d:87:7a:33:79:05:d1:14:70:56:59:04:ef:5e:2d:80:
         fa:95:c1:65:37:fd:0d:23:69:f2:3e:ab:04:c4:da:51:ad:91:
         99:b7:1a:6c:ec:4e:5e:c4:6d:92:74:2b:57:10:43:32:7f:64:
         59:27:bf:5b:d6:84:c8:ca:8f:23:4c:6c:3d:5a:6a:c9:bd:77:
         5b:7c:de:31:40:41:cd:77:5b:2f:84:08:e7:80:bd:73:56:ee:
         dc:71:9d:1f:ff:33:22:d4:2a:0d:c2:4d:6b:3b:06:84:6c:64:
         7d:33:dd:6e:8f:89:66:d7:05:67:76:84:93:a6:3b:b9:e3:1c:
         71:0f:73:50:61:d1:b0:25:73:a1:46:82:49:cd:53:32:e9:8f:
         44:cd:29:7c:9a:2d:40:d7:3f:fb:d5:ef:6f:6f:62:ad:3e:d8:
         0e:31:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:24:41 2025 by rpki-client