Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
File:                     323830343a376537303a3a2f33342d3334203d3e20323731363234.roa (raw, json)
Hash identifier:          nmShwit1mhOvZ12n/97fQYbfwNmDkj9RFzKhRsqApto=
Subject key identifier:   09:AB:86:A6:2A:D0:F9:0B:82:1A:FF:CE:86:AE:6F:1E:4E:94:CF:8B
Certificate issuer:       /CN=7D33CD8DF615911266433E77A191AE3004E30BD3
Certificate serial:       64072F00EEEE7D61B14EB8E48D4EE60F8A221217
Authority key identifier: 7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa
Signing time:             Wed 30 Apr 2025 18:59:59 +0000
ROA not before:           Wed 30 Apr 2025 18:54:59 +0000
ROA not after:            Wed 29 Apr 2026 18:59:59 +0000
asID:                     271624
IP address blocks:        2804:7e70::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl
                          rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 14 May 2025 00:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:07:2f:00:ee:ee:7d:61:b1:4e:b8:e4:8d:4e:e6:0f:8a:22:12:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D33CD8DF615911266433E77A191AE3004E30BD3
        Validity
            Not Before: Apr 30 18:54:59 2025 GMT
            Not After : Apr 29 18:59:59 2026 GMT
        Subject: CN=09AB86A62AD0F90B821AFFCE86AE6F1E4E94CF8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:bb:1e:7c:9c:e3:fb:de:21:d7:4c:68:71:
                    43:f9:10:02:fd:b6:27:41:d0:6b:bd:d6:4c:88:fd:
                    5e:32:c5:f6:f8:d9:8a:91:f3:a4:6d:33:a9:01:ff:
                    c7:5b:b3:bf:11:bf:ab:7c:64:13:1f:67:74:15:c7:
                    10:c7:8b:2a:63:f4:0a:2f:79:4f:35:77:5d:c4:bb:
                    9b:e7:bd:eb:11:1e:f7:a0:94:5b:6a:73:24:24:48:
                    98:80:e2:07:75:ff:5a:91:0b:3f:00:b8:2c:63:4e:
                    c0:1d:b1:e7:b8:99:03:c2:b4:eb:2b:f8:60:cd:19:
                    79:ec:9e:03:4e:29:75:5f:8d:4f:df:95:57:1e:3d:
                    f1:5c:6d:2c:c1:1c:35:bf:7a:33:83:69:36:d6:9d:
                    d7:ce:b1:58:62:c2:48:e8:0a:d3:69:fc:bc:39:13:
                    ae:99:f9:b6:4d:5e:93:b6:c5:3c:44:b3:d5:6b:2c:
                    5f:3b:0e:8c:95:4e:50:c7:78:ad:8f:5b:ab:4c:b2:
                    66:5a:b7:d2:3d:76:64:b4:d1:b8:29:ec:c8:5c:96:
                    a7:84:e2:1d:8b:1c:c0:9e:6d:d3:41:ce:9e:cf:57:
                    a8:c1:69:5a:03:0d:21:cb:5b:e4:7a:48:5a:d2:82:
                    f9:d9:2c:a7:8a:9f:56:03:77:03:ed:59:45:e5:17:
                    8d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AB:86:A6:2A:D0:F9:0B:82:1A:FF:CE:86:AE:6F:1E:4E:94:CF:8B
            X509v3 Authority Key Identifier:
                keyid:7D:33:CD:8D:F6:15:91:12:66:43:3E:77:A1:91:AE:30:04:E3:0B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/7D33CD8DF615911266433E77A191AE3004E30BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D33CD8DF615911266433E77A191AE3004E30BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/323830343a376537303a3a2f33342d3334203d3e20323731363234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e70::/34

    Signature Algorithm: sha256WithRSAEncryption
         74:5b:22:a9:80:f6:56:1a:ec:93:bf:d5:b3:1c:b3:75:9b:77:
         fb:93:07:77:5b:45:15:88:b0:9a:db:83:af:c3:d1:b0:0b:93:
         f1:33:97:f3:b1:d2:0e:16:fc:a5:09:84:68:60:fa:43:c0:52:
         64:29:9c:41:fd:2c:40:ab:46:a9:e3:6a:8a:58:5a:77:31:54:
         e2:f6:87:4c:11:59:5c:c5:a8:03:31:b0:6b:24:98:57:46:18:
         52:aa:22:b7:d5:b5:87:83:d8:31:49:9d:46:8e:8b:73:e2:52:
         e5:f1:b6:34:ee:ba:27:64:e4:eb:3d:2c:82:71:2c:4a:07:ae:
         2f:c6:09:54:e8:fe:49:20:0e:aa:cf:1f:b4:de:07:3c:da:d3:
         75:4c:56:fd:67:98:88:37:4d:5b:cf:bc:70:c9:5b:f6:94:94:
         26:74:d0:11:0e:57:9d:2b:0f:10:49:35:e2:f8:37:c5:86:b0:
         8e:4f:69:54:74:63:b9:b7:ed:3f:d6:87:18:de:ff:f4:af:13:
         78:93:46:7a:52:f3:3a:dc:4c:43:87:4e:dc:60:d5:c5:3f:21:
         83:19:ab:f7:ca:02:13:6a:1f:11:2b:5b:d9:16:3f:a2:22:2a:
         58:e8:99:24:5b:87:f7:79:c7:03:9e:d7:ae:a9:7c:b2:a3:1e:
         06:77:5b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:55:05 2025 by rpki-client