Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3332203d3e20323635343834.roa
File:                     323830343a333464383a3a2f33322d3332203d3e20323635343834.roa (raw, json)
Hash identifier:          zwF8uAxp0Y9mWlMcIGpcEdDQI4UXWaeyagKZ5G1gYXM=
Subject key identifier:   56:25:73:B4:A4:66:C1:79:69:07:FC:10:4E:AC:7B:CB:A4:3B:53:9F
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       52F2BFFCA55FBE6C30F19FEEF17D6206BF59B2ED
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3332203d3e20323635343834.roa
Signing time:             Sat 21 Jun 2025 11:48:47 +0000
ROA not before:           Sat 21 Jun 2025 11:43:47 +0000
ROA not after:            Sat 20 Jun 2026 11:48:47 +0000
asID:                     265484
IP address blocks:        2804:34d8::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 04 Jul 2025 15:56:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f2:bf:fc:a5:5f:be:6c:30:f1:9f:ee:f1:7d:62:06:bf:59:b2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Jun 21 11:43:47 2025 GMT
            Not After : Jun 20 11:48:47 2026 GMT
        Subject: CN=562573B4A466C1796907FC104EAC7BCBA43B539F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a0:41:1b:4f:67:0d:4f:d4:41:f6:d6:93:5a:
                    09:3b:a0:d3:e2:33:21:bf:f1:af:7b:64:af:53:4c:
                    3c:8c:69:9d:c6:3e:ef:3d:6e:43:4c:7d:26:71:a8:
                    ef:da:31:a5:38:db:07:c3:f6:3c:97:fd:ad:cc:8b:
                    fc:b5:28:6e:8d:65:b7:a1:00:83:15:b2:01:3c:b0:
                    f0:37:77:6c:a6:8a:33:25:81:fb:ed:0f:5e:1c:3a:
                    32:57:fd:db:8f:3c:4d:4f:3a:31:b6:4b:36:d4:91:
                    7c:fb:f5:44:33:28:59:54:7b:21:87:ee:6a:ff:99:
                    91:40:a5:0e:ab:f5:45:72:32:c3:46:b8:58:31:7b:
                    fa:cb:d6:b8:ab:1d:6c:c0:2d:1e:26:18:d6:58:dc:
                    75:d2:a7:68:c5:62:d2:9c:87:0d:48:23:4f:0c:64:
                    83:43:10:09:7f:71:26:c0:d1:fa:4e:95:e5:e3:01:
                    0d:b0:61:e0:c1:df:bd:1c:55:39:88:1f:ca:37:2f:
                    99:ca:e5:15:28:f8:f4:00:cd:79:fd:6d:28:f8:1c:
                    ee:f7:86:81:3b:5c:5d:3c:ed:41:00:87:45:87:9b:
                    fd:4e:dc:e8:09:1c:15:96:75:30:cd:0b:26:28:45:
                    c6:89:f8:77:55:9c:5e:7c:3a:d3:98:73:9b:9e:33:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:25:73:B4:A4:66:C1:79:69:07:FC:10:4E:AC:7B:CB:A4:3B:53:9F
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33322d3332203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:b5:c9:34:85:3d:bf:4c:49:09:88:90:0f:46:b7:bd:47:de:
         8b:47:03:bb:8a:ae:90:61:2d:eb:c7:95:9a:08:3c:4a:d6:b4:
         08:8d:d0:9c:4b:fb:e2:ee:bc:f7:b3:42:40:d8:94:24:42:82:
         b9:d1:17:0e:0a:4a:31:0c:45:d7:97:0a:df:b9:f0:5f:3d:e4:
         cf:4f:10:ce:42:da:bd:61:3c:89:cc:29:d9:49:d1:ea:09:26:
         6a:c7:47:2f:1d:94:24:30:91:90:95:72:1f:96:61:83:18:25:
         41:73:26:bf:01:a5:44:b2:96:31:7f:c6:dc:75:f3:37:4c:4c:
         e4:37:16:41:13:b1:d8:f1:c7:6c:f3:57:9f:2e:5a:b0:dc:26:
         1b:2f:d8:53:eb:b0:0e:48:91:bf:af:ef:87:fb:08:52:9d:20:
         84:07:ff:40:4b:48:6f:10:86:51:9f:f5:af:29:57:05:52:63:
         aa:b0:13:88:f9:2c:25:c7:fc:38:60:db:56:72:b0:95:e0:7a:
         50:11:d6:17:fb:a2:12:7f:6d:19:34:1c:b1:e4:e2:53:0e:11:
         09:ba:a2:a7:e9:c8:74:10:85:30:11:95:b5:77:26:1e:51:9a:
         2e:dd:b5:e4:d4:2a:8a:72:b7:be:d5:a5:20:5a:8e:25:0a:83:
         36:5e:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:52:47 2025 by rpki-client