Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
File:                     323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa (raw, json)
Hash identifier:          kE7YjsNcJG3Fg/TXMf4ogLUKaLCSa9BxYBdpunYFVa0=
Subject key identifier:   C8:D1:F7:04:1A:4C:1C:A2:84:24:8E:C1:BB:FA:61:D5:5C:27:EF:C1
Certificate issuer:       /CN=677267BB5B39E407382A7BBF001BEE00278BE380
Certificate serial:       11661D7A119286F06F792A64135DD7CDC4C93653
Authority key identifier: 67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa
Signing time:             Fri 02 May 2025 23:14:33 +0000
ROA not before:           Fri 02 May 2025 23:09:33 +0000
ROA not after:            Fri 01 May 2026 23:14:33 +0000
asID:                     270764
IP address blocks:        2804:7110:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl
                          rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 19:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:66:1d:7a:11:92:86:f0:6f:79:2a:64:13:5d:d7:cd:c4:c9:36:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677267BB5B39E407382A7BBF001BEE00278BE380
        Validity
            Not Before: May  2 23:09:33 2025 GMT
            Not After : May  1 23:14:33 2026 GMT
        Subject: CN=C8D1F7041A4C1CA284248EC1BBFA61D55C27EFC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:79:bf:ad:2d:6e:79:30:2e:e4:04:65:40:
                    dc:cb:75:e5:d3:34:c9:b8:8f:c1:2f:13:2b:7a:40:
                    3d:a6:9c:ae:64:b5:3f:85:02:19:b6:7a:41:05:a4:
                    5c:dc:c3:b9:e1:03:b7:05:de:59:aa:f1:6e:e2:6b:
                    e3:e0:a8:15:9e:dd:f1:70:49:4c:49:85:ad:12:4a:
                    4b:4d:4a:30:81:a9:05:04:6f:00:38:e9:82:b7:fb:
                    fc:d0:2d:ae:4f:4d:66:3e:72:83:fc:a1:3d:fc:1a:
                    f7:d7:18:1e:da:f3:71:18:5f:7f:1c:db:c1:d8:2e:
                    9f:f8:87:e8:7b:73:7c:69:48:0a:ca:e1:7b:0e:26:
                    6b:67:c3:7b:ed:1d:2c:7a:f0:98:7d:7f:50:85:bd:
                    c5:7d:d5:d9:e6:3d:4d:cd:a8:9d:b2:30:8b:34:ec:
                    da:6f:ad:f3:d8:48:49:7e:38:36:75:95:35:40:67:
                    08:cc:47:34:d8:c4:a3:af:4d:79:5f:ea:a6:76:17:
                    e3:04:24:33:f4:0e:3e:82:bb:77:00:11:4f:3b:a9:
                    53:15:26:2f:5c:4a:72:ce:b7:54:44:25:6d:92:94:
                    f8:aa:cf:8d:d3:2b:f9:00:6d:db:a7:e8:ab:b9:8f:
                    d9:87:30:ab:bd:46:d5:62:52:d7:58:94:17:79:81:
                    8c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D1:F7:04:1A:4C:1C:A2:84:24:8E:C1:BB:FA:61:D5:5C:27:EF:C1
            X509v3 Authority Key Identifier:
                keyid:67:72:67:BB:5B:39:E4:07:38:2A:7B:BF:00:1B:EE:00:27:8B:E3:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/677267BB5B39E407382A7BBF001BEE00278BE380.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/677267BB5B39E407382A7BBF001BEE00278BE380.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B333xXMmm1o96j9jt4eHckKrSASFRUDHyKX2DT9y9bji/0/323830343a373131303a383030303a3a2f34382d3438203d3e20323730373634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7110:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:df:eb:81:ae:5d:99:3f:2a:2a:b5:8d:da:46:bc:86:ae:
         69:cf:e1:b4:90:a4:01:bb:b7:1a:64:63:60:dd:08:8f:53:5a:
         c2:09:f0:22:31:f1:46:a6:79:9e:c9:51:c8:a2:95:d2:f8:08:
         38:ff:a9:ac:23:66:48:44:ab:04:5a:5c:76:e8:ac:e7:66:5f:
         63:41:59:d7:6b:a3:b5:54:c8:ba:6c:93:75:e8:fb:91:9e:f0:
         af:f2:5e:52:ae:b1:2c:81:b9:b2:f1:f1:dd:74:b8:08:32:21:
         8d:3d:9f:a2:37:4e:92:06:c4:cb:c1:c2:e4:aa:49:62:dd:2c:
         87:ce:19:2e:1a:62:cf:1e:14:36:e6:9f:7f:6c:93:08:76:5a:
         df:ea:ca:e3:ad:66:31:08:16:c3:8b:61:61:c0:8c:7f:3a:ba:
         46:84:c7:b7:1f:30:68:ab:1f:2a:f5:36:a3:26:e5:d0:0c:fb:
         26:61:b6:87:dd:9e:4b:a8:3f:63:c8:b7:b7:7c:93:01:30:e2:
         55:e6:17:e0:76:ed:b3:23:ad:1e:f1:c8:f6:f7:91:6b:19:69:
         e3:06:8a:79:7f:4a:a5:cf:8b:f3:ef:90:8a:6a:89:da:89:c3:
         95:24:56:46:8c:14:6e:a1:d9:e6:89:46:11:e2:6d:73:84:02:
         63:a0:ff:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:45:53 2025 by rpki-client