Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa
File:                     323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa (raw, json)
Hash identifier:          e8/V55oyxKMD2kRIZ3R5netibA9M1wN5NIDFQOgF8nA=
Subject key identifier:   B9:92:77:D8:97:49:77:7D:8A:32:29:DF:1B:6C:B8:97:FD:D1:BA:5D
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       26981375EFFBD67B324C2C284DCA8CA156B0D979
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa
Signing time:             Sat 21 Jun 2025 11:48:46 +0000
ROA not before:           Sat 21 Jun 2025 11:43:46 +0000
ROA not after:            Sat 20 Jun 2026 11:48:46 +0000
asID:                     265484
IP address blocks:        2804:34d8:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 22:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:98:13:75:ef:fb:d6:7b:32:4c:2c:28:4d:ca:8c:a1:56:b0:d9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Jun 21 11:43:46 2025 GMT
            Not After : Jun 20 11:48:46 2026 GMT
        Subject: CN=B99277D89749777D8A3229DF1B6CB897FDD1BA5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:d5:83:07:a3:0d:3b:69:f6:5c:a1:16:ff:
                    ed:27:38:58:01:a2:1b:e3:34:72:1f:85:23:73:fe:
                    1d:00:f6:45:73:cb:b7:ca:cc:c8:4b:1f:80:ee:ee:
                    85:9e:fe:05:d1:57:42:19:93:22:48:6f:63:08:76:
                    4c:fe:3e:f2:24:fa:1c:95:d4:21:71:46:6e:5a:c5:
                    b5:75:c2:f3:57:5d:ec:a3:49:e5:59:7e:f6:21:06:
                    4c:9b:5e:2a:9f:63:90:a5:a3:87:3c:9e:b5:8e:b0:
                    77:f8:89:1f:05:f5:53:23:0c:53:79:cf:91:d2:c9:
                    bf:02:58:4c:ad:ae:f6:66:de:27:c5:e1:c1:45:9d:
                    ed:7e:04:de:88:46:39:58:32:60:18:7b:b9:8f:07:
                    1f:00:e3:b8:b8:43:fc:4d:25:09:6a:57:14:02:65:
                    6a:d2:89:1b:ee:9d:65:d8:8b:b8:b2:79:ed:b7:59:
                    6d:f2:b5:f7:e6:10:55:30:f3:27:0b:93:25:5b:20:
                    ab:16:2f:a7:51:d6:71:04:46:92:8f:97:12:af:58:
                    20:48:ae:22:cf:26:ac:2b:e1:e4:94:6c:2f:a6:15:
                    41:0b:af:c1:4e:ba:0b:8c:a8:48:53:95:1c:a5:fd:
                    49:82:a4:99:d1:b1:d9:c4:d9:3f:a4:8e:8b:e2:6e:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:92:77:D8:97:49:77:7D:8A:32:29:DF:1B:6C:B8:97:FD:D1:BA:5D
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a343030303a3a2f33342d3334203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:74:7f:97:3b:fd:85:30:7b:08:c9:3f:d1:11:fe:3f:b8:cc:
         ec:a7:48:ce:e7:27:74:e0:49:3b:f0:cb:e7:3a:09:d3:1a:ce:
         c0:d5:15:d4:64:6d:9a:d6:87:1b:e5:f1:1e:d5:52:76:bd:d0:
         13:b4:33:cc:11:67:a0:57:3d:bb:b0:1c:4f:11:31:d6:24:1a:
         29:88:f7:17:b1:40:88:4f:07:7f:fa:ea:0d:db:54:3b:e6:d8:
         40:1b:3a:f1:41:a5:63:cf:9d:e8:9b:a8:97:69:6d:9f:75:c8:
         f2:5c:0a:76:89:b9:8f:05:94:9f:4c:a7:0f:91:2b:e5:ab:c2:
         82:6e:71:a5:ee:1f:27:6f:41:58:21:5f:77:aa:fd:88:0f:ce:
         1e:f8:52:0f:bc:21:7b:3c:38:fb:df:69:21:81:0c:de:cc:67:
         ac:cc:e2:86:b2:6f:fc:42:32:4b:7f:d7:42:07:e5:3b:42:d4:
         01:cb:60:50:b4:38:fc:50:f0:22:3b:cd:e1:58:1d:43:83:2d:
         b4:ea:0c:0f:92:5a:36:5d:49:38:7b:bd:29:03:0c:a7:2a:60:
         c1:91:7d:c3:61:62:1d:43:10:06:2e:67:ac:76:14:3c:3b:c8:
         04:c4:ff:4c:d0:ba:ae:ac:e8:8d:c0:fb:53:14:3a:09:a4:17:
         21:16:85:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:41:32 2025 by rpki-client