Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa
File:                     323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa (raw, json)
Hash identifier:          /sQ5xbVaTnUwnPm87F9g2C/+7KnTjQrq2NAVRovPE3g=
Subject key identifier:   59:48:B3:20:BB:2C:F2:B1:8D:53:02:38:10:B5:D5:4F:2A:79:46:A4
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       7B2DFA819FB0C9789D00A9DB36B2FAACD0DB7E83
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa
Signing time:             Mon 26 May 2025 18:28:51 +0000
ROA not before:           Mon 26 May 2025 18:23:51 +0000
ROA not after:            Mon 25 May 2026 18:28:51 +0000
asID:                     265141
IP address blocks:        2804:2b38:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 11:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2d:fa:81:9f:b0:c9:78:9d:00:a9:db:36:b2:fa:ac:d0:db:7e:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: May 26 18:23:51 2025 GMT
            Not After : May 25 18:28:51 2026 GMT
        Subject: CN=5948B320BB2CF2B18D53023810B5D54F2A7946A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:10:31:b6:f8:8a:89:2f:51:7e:e3:8f:6a:
                    d4:d1:4e:db:dd:93:19:e8:09:53:e8:f0:78:0b:5c:
                    6a:b5:13:79:56:0e:c1:ac:2e:02:b4:fd:5d:90:09:
                    ef:87:97:02:f9:df:63:03:24:55:dc:8c:4d:3b:3a:
                    f7:ac:93:73:52:ac:dd:7c:77:fc:ca:6a:87:51:33:
                    ca:21:d8:30:42:a8:62:66:26:95:56:66:43:55:42:
                    c1:ad:40:5b:61:83:3f:9b:12:93:ed:7f:92:b9:44:
                    2b:f5:e0:da:11:b4:33:ee:a3:7c:83:91:9d:b1:d4:
                    0e:fa:b1:e1:df:56:e0:e3:0f:09:fa:35:20:92:9f:
                    41:51:ba:e6:d3:c1:47:db:64:cd:a1:58:a9:ae:fa:
                    33:c5:24:8e:99:6f:c7:85:c3:b1:5e:a0:22:a0:77:
                    19:65:1f:a3:4f:c7:13:3e:d1:af:f7:bf:b0:23:5c:
                    ab:98:b8:95:c2:2f:e0:2e:0e:ce:d6:40:1e:43:8f:
                    c3:96:da:d8:61:ad:59:5f:00:18:48:cf:fe:95:c8:
                    bd:66:5f:5e:c4:56:2b:d7:8c:73:a2:1f:07:ce:f8:
                    a8:f6:84:1a:60:c8:94:bd:8b:75:df:ad:a6:49:25:
                    a6:f8:11:0e:06:e7:1d:cf:e6:a5:a9:d5:47:6e:db:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:48:B3:20:BB:2C:F2:B1:8D:53:02:38:10:B5:D5:4F:2A:79:46:A4
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33332d3333203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         86:bf:1e:09:0d:3b:4e:c6:ac:a2:34:c1:ac:62:32:32:2a:e8:
         35:62:ff:8d:f9:dd:6b:11:67:3c:8c:08:49:20:2b:96:f3:fc:
         c6:0d:fa:ae:a8:a0:29:be:96:11:c4:62:7e:04:bc:ba:60:3a:
         d3:03:49:71:a2:48:6a:35:0e:c0:04:a5:e7:97:40:34:62:4d:
         22:8e:0a:3a:d4:db:b6:a8:ff:49:b6:1b:bb:8a:5d:37:2a:a3:
         1b:c9:54:f2:5e:66:c7:b9:1c:3d:76:d9:b3:dd:d2:5a:2f:33:
         a0:d5:92:be:5a:26:5a:cf:a0:06:e4:9d:12:a8:8e:4f:48:85:
         f9:57:3e:2d:c9:bc:ab:3e:fe:ce:f9:c3:ed:e0:6b:de:5d:63:
         23:19:a7:dc:2d:be:f2:41:d6:65:00:33:af:36:68:13:2a:5b:
         5b:4d:2e:84:90:a5:43:e0:d7:3e:1f:54:39:31:b7:02:e8:ff:
         dd:3a:32:f8:26:5c:f1:25:44:9a:68:ec:61:05:c4:fb:f5:8c:
         b4:1e:12:e2:61:1b:a7:1d:e1:82:eb:3f:b5:ec:aa:23:9c:11:
         15:22:72:a5:33:00:c2:09:2f:b1:a7:6e:7c:ad:c2:be:d4:df:
         0f:1f:30:19:c5:cb:0e:16:64:a3:59:b5:85:e7:5d:53:45:7c:
         7d:49:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:46:32 2025 by rpki-client