Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33342d3334203d3e20323635313431.roa
File:                     323830343a326233383a3a2f33342d3334203d3e20323635313431.roa (raw, json)
Hash identifier:          LtG4tuvHMs4/TStZFhqnqcl7s/GChVoJe1QavE7Ycfg=
Subject key identifier:   F7:2A:1D:D0:AA:25:55:15:04:34:5B:83:21:84:B8:86:41:AA:B9:90
Certificate issuer:       /CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
Certificate serial:       23787BFB262E555F60289BEA6E53768FCD8460AF
Authority key identifier: 3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33342d3334203d3e20323635313431.roa
Signing time:             Mon 26 May 2025 18:28:48 +0000
ROA not before:           Mon 26 May 2025 18:23:48 +0000
ROA not after:            Mon 25 May 2026 18:28:48 +0000
asID:                     265141
IP address blocks:        2804:2b38::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl
                          rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 11 Jun 2025 03:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:78:7b:fb:26:2e:55:5f:60:28:9b:ea:6e:53:76:8f:cd:84:60:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FE77B8855F61DF2AD68185DD0977BCB42C708F4
        Validity
            Not Before: May 26 18:23:48 2025 GMT
            Not After : May 25 18:28:48 2026 GMT
        Subject: CN=F72A1DD0AA25551504345B832184B88641AAB990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:bf:a1:0a:b8:8d:b8:da:dd:91:dd:cc:69:
                    cc:3b:2e:55:90:08:dd:fb:98:27:8c:b0:b3:ad:67:
                    aa:8c:7a:79:28:83:ec:8b:1e:37:7d:70:9f:4d:12:
                    ec:6a:c8:5f:93:99:4e:99:14:d4:bf:11:3b:25:7c:
                    a9:31:83:12:03:4e:d3:fd:5e:4f:cb:34:be:06:20:
                    b4:f5:7f:49:a8:d8:1c:65:45:10:6e:9b:59:8e:2d:
                    ea:7b:d7:4c:21:bd:f2:9c:f2:41:c0:e6:b5:ca:6c:
                    16:9d:9b:ab:ce:c6:a5:24:ca:22:40:2a:b1:3f:fe:
                    58:05:59:e1:a6:e9:80:47:cb:04:2e:27:b1:4a:cb:
                    d8:9b:39:13:a2:a3:bd:8b:56:c0:c7:f9:36:a8:10:
                    5d:cf:fd:30:93:98:fa:de:a7:7d:61:9e:52:3c:30:
                    55:29:d2:16:3c:eb:10:8c:21:1d:9f:89:0f:3b:8d:
                    e0:58:2a:d2:2f:ab:13:dc:18:f1:82:fd:16:a9:13:
                    c1:f0:f8:de:78:fa:70:bd:eb:8f:65:a6:a5:5d:ae:
                    fc:ee:a3:7a:6d:7d:5f:4d:a6:b6:bc:19:d4:20:76:
                    44:f5:7b:e4:7f:14:c6:d5:e7:70:3c:2b:04:cd:cf:
                    c5:ca:b4:5e:d8:44:26:f5:12:fe:58:20:43:df:7b:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2A:1D:D0:AA:25:55:15:04:34:5B:83:21:84:B8:86:41:AA:B9:90
            X509v3 Authority Key Identifier:
                keyid:3F:E7:7B:88:55:F6:1D:F2:AD:68:18:5D:D0:97:7B:CB:42:C7:08:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FE77B8855F61DF2AD68185DD0977BCB42C708F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXZwJLeBDNAyQuGhnTvSckqSmq79QuXgB463RoNymcv1/0/323830343a326233383a3a2f33342d3334203d3e20323635313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b38::/34

    Signature Algorithm: sha256WithRSAEncryption
         4d:5a:c2:0a:7a:c5:a7:7c:21:a6:53:24:e5:d9:37:d0:7c:d1:
         35:eb:d6:21:47:13:91:46:55:43:d7:fa:6f:31:89:72:83:4f:
         72:95:f8:4a:34:5f:19:51:c0:61:ac:34:74:cf:f8:6c:78:f7:
         f0:c9:a1:0c:4c:a5:a5:84:9d:ef:77:43:0d:42:b7:78:13:74:
         3a:e5:53:79:39:8d:4b:f3:b1:15:ea:62:4e:06:e6:8f:f1:06:
         ac:55:98:50:89:80:fe:d9:71:5e:49:0d:86:62:64:5f:e7:6c:
         4f:60:42:6f:13:8f:bb:07:20:9c:35:26:bd:67:d7:ac:83:94:
         c5:22:c1:3f:4d:b9:e0:eb:04:74:be:cd:44:13:94:85:1f:e9:
         fa:c6:53:d1:93:e3:23:14:e1:98:3b:4b:97:fa:a0:91:05:60:
         8a:48:5f:df:24:b2:6e:60:8a:e6:5b:ff:ae:23:3c:68:a0:ed:
         75:36:68:0d:93:49:59:e3:7d:3f:85:d1:c7:c0:29:a8:34:67:
         39:ce:7a:b1:73:9c:30:d6:e9:27:cc:79:79:8a:42:a4:62:0d:
         1e:5e:19:40:15:78:75:bd:dc:86:e3:df:b0:59:7d:15:9a:9c:
         af:3f:5e:32:9a:67:07:cb:44:57:ad:ed:37:4d:95:b8:2e:b8:
         86:4a:04:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 08:55:57 2025 by rpki-client