Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33342d3334203d3e20323635343834.roa
File:                     323830343a333464383a3a2f33342d3334203d3e20323635343834.roa (raw, json)
Hash identifier:          zt6CDyXNajt2tU1ITWsX4t1cpsGBPoMVHVY3j9JOWJE=
Subject key identifier:   3D:06:6E:7C:F9:D9:D6:48:59:12:E2:92:97:90:9A:76:F6:A2:0A:7F
Certificate issuer:       /CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
Certificate serial:       73971A333745AEF5A73AE54CF406FC4DCD1D3365
Authority key identifier: 38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33342d3334203d3e20323635343834.roa
Signing time:             Sat 21 Jun 2025 11:48:49 +0000
ROA not before:           Sat 21 Jun 2025 11:43:49 +0000
ROA not after:            Sat 20 Jun 2026 11:48:49 +0000
asID:                     265484
IP address blocks:        2804:34d8::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl
                          rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 03 Jul 2025 22:10:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:97:1a:33:37:45:ae:f5:a7:3a:e5:4c:f4:06:fc:4d:cd:1d:33:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6
        Validity
            Not Before: Jun 21 11:43:49 2025 GMT
            Not After : Jun 20 11:48:49 2026 GMT
        Subject: CN=3D066E7CF9D9D6485912E29297909A76F6A20A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:13:78:39:94:25:87:2d:10:67:c9:c5:e0:
                    ab:8d:f5:3b:0b:9d:a9:10:f3:2d:f9:b9:f6:a9:14:
                    65:3b:e3:44:1e:9a:c0:57:ca:be:14:86:70:17:2d:
                    07:1a:f5:ee:a8:0a:e9:2b:e7:f6:ee:0e:72:11:40:
                    ba:d8:b4:b1:e3:c1:2d:a0:2b:7c:87:b5:64:9a:10:
                    c0:f2:f3:91:a2:52:44:7c:7d:d2:af:e4:a2:32:0c:
                    66:ab:ca:45:1c:fa:c9:d5:82:ca:2e:42:61:a7:d8:
                    84:8b:e8:69:cf:f3:69:eb:b6:d6:34:78:fd:0d:cc:
                    8f:5a:a1:48:61:e8:2f:25:6e:7b:61:63:e9:eb:d2:
                    e3:ed:63:da:47:b2:40:62:ec:d2:9e:33:64:a6:35:
                    21:7e:11:f6:c0:23:1e:ab:da:61:8d:ab:cb:2c:d6:
                    3d:3c:5d:c9:75:ce:56:02:31:53:24:06:ad:74:b2:
                    8d:69:f5:33:cb:2e:26:28:ae:6b:da:ec:d0:f9:51:
                    80:07:85:34:4b:73:39:86:18:17:77:bc:6c:34:ac:
                    9a:ac:a1:5a:93:8b:f0:3d:fb:ab:ff:3f:fd:b0:9d:
                    dc:81:88:f5:eb:ee:7a:e9:12:8d:fc:b4:33:38:7d:
                    e9:c0:30:89:88:4e:c4:40:f1:df:66:88:38:2e:03:
                    d0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:06:6E:7C:F9:D9:D6:48:59:12:E2:92:97:90:9A:76:F6:A2:0A:7F
            X509v3 Authority Key Identifier:
                keyid:38:F3:3F:BF:E3:CF:08:A0:D6:BE:7C:8C:73:0F:32:A6:6F:97:3E:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F33FBFE3CF08A0D6BE7C8C730F32A66F973ED6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfMCm3yG68Jbket8pdi829Z3iEJX87F8heRwMUmoSRmm/0/323830343a333464383a3a2f33342d3334203d3e20323635343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34d8::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:47:89:09:c3:1b:9d:81:cf:72:39:03:58:3a:88:50:aa:6c:
         7f:41:58:bc:83:0e:ca:34:15:6f:d1:41:48:ee:90:c8:8b:ae:
         3a:a3:f9:fc:3e:63:0c:1c:62:ce:b0:31:c9:12:d2:5a:24:92:
         85:be:62:f5:14:17:b8:f0:8c:2a:5c:e1:f3:4b:28:fc:dd:ae:
         ea:c2:f1:ed:a2:05:d2:fa:01:e3:bb:89:56:36:28:5f:00:d3:
         0e:54:35:a1:71:87:ed:8b:60:70:ae:28:1d:67:01:67:8f:a5:
         30:8f:50:7f:de:d8:ee:f5:5e:45:9a:d0:ce:01:54:d9:3c:0a:
         4b:7b:3d:1f:74:71:59:88:7f:5f:f6:aa:23:54:b1:3d:3e:15:
         ea:f1:4d:42:b0:a5:98:b1:45:e8:4f:d1:58:ce:ea:b0:ae:b9:
         e5:9e:36:34:47:63:87:8e:4b:cd:6e:71:70:48:06:97:a0:d2:
         38:1e:0e:87:16:7f:2f:5a:cc:8d:6e:4c:5d:ee:77:df:c1:3e:
         ef:8f:7a:a3:91:16:f0:58:e6:05:4a:63:67:27:b1:81:82:bd:
         25:9a:95:07:ce:bf:21:d9:a0:78:3e:56:88:f5:ab:23:f5:99:
         2c:01:45:bf:99:f9:9a:12:89:b1:22:c3:0b:37:e3:b2:c3:72:
         e6:76:7b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:36:58 2025 by rpki-client