Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa
File:                     323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa (raw, json)
Hash identifier:          /aSsQ+pgmKp1fHYL5AVDq/HrEn7TriW0DZAZ5xqbwSQ=
Subject key identifier:   AF:02:47:F2:7A:22:7A:00:F8:27:CF:05:84:71:7C:0A:3A:21:F2:8F
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       633008D0645C8EC0246D187756EBB82194A2AEDE
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa
Signing time:             Mon 26 May 2025 18:28:45 +0000
ROA not before:           Mon 26 May 2025 18:23:45 +0000
ROA not after:            Mon 25 May 2026 18:28:45 +0000
asID:                     265141
IP address blocks:        2804:2b38:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:30:08:d0:64:5c:8e:c0:24:6d:18:77:56:eb:b8:21:94:a2:ae:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: May 26 18:23:45 2025 GMT
            Not After : May 25 18:28:45 2026 GMT
        Subject: CN=AF0247F27A227A00F827CF0584717C0A3A21F28F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1e:71:4c:cc:67:a0:58:f4:74:5d:ee:14:a8:
                    b0:86:27:ed:18:47:74:00:36:df:94:51:27:81:96:
                    b3:0b:c5:47:8c:c8:e3:7b:82:33:0d:11:ba:84:8c:
                    69:01:c2:b1:53:33:e6:57:60:88:f7:97:c2:c0:08:
                    af:98:cc:06:dc:e3:38:15:ad:c4:38:20:f8:15:2a:
                    67:72:36:9a:28:1e:cb:6d:74:3a:90:35:96:3f:88:
                    c9:bc:e3:9e:45:d1:62:94:0d:16:6c:4c:c4:67:c1:
                    17:52:5c:e2:2d:81:81:4e:6d:8f:c8:23:70:15:07:
                    18:69:8c:2b:d3:63:2d:f9:0e:01:9e:d7:d7:cb:10:
                    79:2c:0f:ed:20:0b:a5:95:c1:66:f4:b1:99:60:19:
                    00:1f:8c:a0:ff:f7:5f:93:ad:c7:30:75:57:f3:c4:
                    56:6e:9f:b3:26:2e:ba:ed:6c:ed:91:c7:a3:01:07:
                    a1:d9:82:e1:3f:0b:c3:4d:76:27:a9:be:40:e4:79:
                    17:03:e3:a2:0e:8d:9d:a2:92:88:51:bc:3e:85:a5:
                    ef:64:3c:55:9a:a9:3d:e5:7a:3c:a5:07:d3:cd:c2:
                    b9:8c:80:23:53:31:6b:15:df:70:e3:39:c0:e9:88:
                    81:a1:5c:60:3e:0b:a1:3e:ef:7e:98:61:30:ee:75:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:02:47:F2:7A:22:7A:00:F8:27:CF:05:84:71:7C:0A:3A:21:F2:8F
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a383030303a3a2f33342d3334203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a6:15:d2:1c:40:a8:7d:55:00:7b:99:0d:f9:86:71:01:a1:27:
         ff:36:3c:17:7d:af:f2:35:f8:25:1e:98:c4:8e:b4:20:bd:21:
         e9:4d:b6:66:d3:16:38:46:45:2e:5b:1d:82:16:93:30:8e:58:
         e1:eb:af:3c:6f:79:cf:f4:a3:dc:a4:5d:b2:5e:a1:e0:93:e5:
         5b:c9:84:67:67:bd:a7:28:e1:2a:d5:20:dd:c9:be:d0:4b:d9:
         f8:c8:c3:d6:63:41:81:d8:36:95:9e:87:1f:38:cb:e7:de:7f:
         32:3e:1f:cc:38:46:99:fc:b7:63:c9:3c:3a:77:41:00:c3:cb:
         bb:40:65:0d:ce:14:d0:52:72:9e:fa:51:fe:46:8b:9e:84:3a:
         89:70:eb:c2:b9:70:19:73:bc:19:46:35:46:01:c2:b1:7c:2c:
         1d:d5:3e:2d:1f:d6:b1:be:d8:64:8f:7b:d3:fb:79:51:d4:62:
         7f:54:f0:f6:3d:35:c7:fd:fb:67:91:d6:bd:06:e3:53:78:c1:
         a5:3d:79:b2:e9:eb:21:ef:47:b4:8f:67:27:5d:22:0d:de:c0:
         13:65:65:db:a0:df:92:ff:1c:35:00:2e:23:0f:c2:df:b8:9e:
         d3:de:f8:e6:a7:8c:85:ba:a7:a1:69:ea:6c:a6:1d:f4:b5:34:
         07:7e:3d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 06:27:40 2025 by rpki-client