Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa
File:                     323830343a326436633a3a2f33332d3333203d3e20323635323831.roa (raw, json)
Hash identifier:          2Rr2G1VvmRIlgxXs5A3dxrFG+34LF9NB4ItG/kUqeUA=
Subject key identifier:   02:6D:22:E3:7B:A0:5B:36:3F:F4:BC:3C:2C:AA:43:16:9F:66:A5:BC
Certificate issuer:       /CN=27703D671AE6A9B45D2221CB442F8C340216A354
Certificate serial:       086322041225A12A1C800ECCF1F8EBE9D1E51B73
Authority key identifier: 27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa
Signing time:             Thu 05 Jun 2025 17:04:10 +0000
ROA not before:           Thu 05 Jun 2025 16:59:10 +0000
ROA not after:            Thu 04 Jun 2026 17:04:10 +0000
asID:                     265281
IP address blocks:        2804:2d6c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl
                          rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:63:22:04:12:25:a1:2a:1c:80:0e:cc:f1:f8:eb:e9:d1:e5:1b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27703D671AE6A9B45D2221CB442F8C340216A354
        Validity
            Not Before: Jun  5 16:59:10 2025 GMT
            Not After : Jun  4 17:04:10 2026 GMT
        Subject: CN=026D22E37BA05B363FF4BC3C2CAA43169F66A5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:45:19:4e:94:10:5a:2d:e8:f4:15:8f:b0:
                    69:35:1c:52:a2:7d:4b:dd:11:29:b1:d6:b3:8c:88:
                    44:f2:0c:27:76:c9:9f:c1:03:5e:9d:1d:4e:69:b8:
                    6e:23:2b:46:f8:4e:3b:66:75:7b:8d:f8:f6:5c:87:
                    b2:1e:16:93:ec:9a:a7:05:6e:a7:73:ea:e7:c5:c3:
                    c4:30:84:52:f7:e1:08:15:b7:72:02:13:96:60:aa:
                    78:4c:c5:a1:a8:39:70:1a:80:a5:13:08:4f:dd:c7:
                    77:2a:3e:c9:e0:8e:64:41:f8:c2:88:8b:c7:81:2d:
                    4d:3f:fb:f3:ca:bf:bd:0b:b3:6a:97:6a:dd:57:d3:
                    a0:69:35:44:93:33:d7:f1:ca:a5:79:29:45:3c:e7:
                    5b:01:02:ff:41:1b:ec:78:d1:27:2c:a0:9a:3b:b9:
                    36:c6:6d:ca:2c:69:e9:3a:d7:28:98:25:71:35:53:
                    4d:fd:ce:75:3c:a8:19:b3:9f:01:5e:25:63:14:3c:
                    bb:fb:16:9e:e2:19:f7:41:08:41:a6:69:3c:d9:15:
                    d6:c2:c4:14:dc:2d:36:0a:e7:1c:39:d9:7c:b0:ae:
                    94:36:e5:da:f3:f4:e8:d8:f6:b4:a6:f6:dc:7e:f5:
                    20:b2:70:32:87:c6:4a:fb:de:30:9e:3e:df:6b:a6:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6D:22:E3:7B:A0:5B:36:3F:F4:BC:3C:2C:AA:43:16:9F:66:A5:BC
            X509v3 Authority Key Identifier:
                keyid:27:70:3D:67:1A:E6:A9:B4:5D:22:21:CB:44:2F:8C:34:02:16:A3:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/27703D671AE6A9B45D2221CB442F8C340216A354.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27703D671AE6A9B45D2221CB442F8C340216A354.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2fNwrERXnpSxLKuBu6sjt4e4qPoCwjWkqE6spVu6jN3F/0/323830343a326436633a3a2f33332d3333203d3e20323635323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d6c::/33

    Signature Algorithm: sha256WithRSAEncryption
         55:3d:9c:fb:23:67:8d:d6:e2:85:ce:17:6c:53:39:ac:13:71:
         09:39:f2:82:e2:9b:96:b8:8b:84:be:07:ca:10:a0:a3:a6:33:
         94:ad:23:6e:fe:a4:55:52:72:a7:c2:c1:75:34:52:9c:b6:b8:
         dc:50:bc:76:c2:f9:d3:0f:03:3e:97:0f:4f:7c:27:f5:6d:c8:
         11:17:08:a0:2f:5e:64:88:39:30:91:64:19:0c:5d:47:5f:98:
         bc:7a:f7:c6:7c:19:e1:71:cf:a0:8c:94:5d:4b:9e:53:25:1a:
         b9:f6:9f:7a:2e:cc:06:5c:eb:96:10:38:39:8f:55:ff:5c:b8:
         ef:ac:04:d3:4f:d0:9d:71:8b:7f:34:6b:8c:d9:4f:27:1d:f8:
         ba:ca:ab:0f:82:b3:fb:29:f7:ac:b1:66:6f:48:bd:e8:e4:36:
         f7:fd:07:9a:64:2e:67:0c:ad:0a:60:67:fc:f6:6b:04:39:2e:
         0d:f0:f9:6a:ed:44:9d:6e:86:30:bf:a6:ff:90:56:66:4d:68:
         b9:59:6e:d2:22:04:28:33:8e:41:bb:c0:57:b3:a9:57:ff:fb:
         e3:08:ae:57:2a:d4:2a:c6:53:e8:d0:4c:5a:67:11:c1:dd:62:
         cc:94:67:dd:48:e3:e2:5d:96:04:5b:93:3f:a5:aa:14:79:b2:
         ed:ca:28:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:12:15 2025 by rpki-client