Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa
File:                     323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa (raw, json)
Hash identifier:          27tCb8nt45jJnI0Z5zONKNoAN46l3cNQ4fqje7NUgwQ=
Subject key identifier:   31:9E:3D:5D:A4:08:A5:57:84:34:69:F6:A0:9E:81:F7:0F:85:C4:4D
Certificate issuer:       /CN=70C0B50747FC1E7BE87716B663F0AA749E426EE1
Certificate serial:       2BADC40C2FC1C51AC0F684F2D4FA5B89102F534E
Authority key identifier: 70:C0:B5:07:47:FC:1E:7B:E8:77:16:B6:63:F0:AA:74:9E:42:6E:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa
Signing time:             Tue 01 Apr 2025 15:58:56 +0000
ROA not before:           Tue 01 Apr 2025 15:53:56 +0000
ROA not after:            Tue 31 Mar 2026 15:58:56 +0000
asID:                     271687
IP address blocks:        2804:7f6c:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.crl
                          rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Apr 2025 11:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ad:c4:0c:2f:c1:c5:1a:c0:f6:84:f2:d4:fa:5b:89:10:2f:53:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70C0B50747FC1E7BE87716B663F0AA749E426EE1
        Validity
            Not Before: Apr  1 15:53:56 2025 GMT
            Not After : Mar 31 15:58:56 2026 GMT
        Subject: CN=319E3D5DA408A557843469F6A09E81F70F85C44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:97:13:43:be:56:84:af:63:79:b2:8f:3b:
                    68:89:21:99:c8:ad:30:27:19:b9:fb:dc:b3:ee:b8:
                    af:91:1b:82:65:7c:f1:28:65:67:ba:86:d7:ac:09:
                    cc:ff:18:43:6e:f5:9c:2a:01:42:a5:b4:93:99:dd:
                    d1:50:c8:6e:6a:66:33:fc:a7:10:39:34:57:21:3f:
                    9c:88:19:85:46:ff:8b:a4:73:1e:36:c7:46:0f:fb:
                    42:a0:8b:89:7b:27:d6:0c:50:ef:2f:d3:a8:ac:75:
                    86:ba:0e:9c:b9:09:f3:4c:df:da:00:c7:44:b2:53:
                    cd:32:64:9a:1e:19:95:6f:51:9f:8f:a3:8c:86:65:
                    a4:02:d1:2d:c0:e3:dd:54:df:5f:d7:b2:d3:66:66:
                    71:f2:55:59:5d:05:c8:ad:e5:af:a0:0a:b0:5f:d0:
                    5c:b6:cb:3b:71:41:63:8e:2a:00:4b:2f:04:ae:a2:
                    4c:5d:72:ba:f8:b9:47:7a:a5:76:00:44:c0:47:67:
                    c8:71:ed:e8:a8:8c:17:a3:a2:c9:25:07:20:a2:07:
                    ac:27:76:31:42:fa:b5:dd:34:b9:47:2d:16:64:56:
                    24:ac:6c:7d:c0:73:56:cd:19:be:d8:1b:03:2d:08:
                    ee:de:ed:37:a1:94:15:c4:0c:df:e0:73:a6:4d:87:
                    29:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9E:3D:5D:A4:08:A5:57:84:34:69:F6:A0:9E:81:F7:0F:85:C4:4D
            X509v3 Authority Key Identifier:
                keyid:70:C0:B5:07:47:FC:1E:7B:E8:77:16:B6:63:F0:AA:74:9E:42:6E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/70C0B50747FC1E7BE87716B663F0AA749E426EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/70C0B50747FC1E7BE87716B663F0AA749E426EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/22PvtXpQutRKvxkUY8Y7ekqiX3MHzkPbm9WCFjoWWxDK/0/323830343a376636633a343030303a3a2f33342d3334203d3e20323731363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f6c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:eb:1b:15:76:92:ec:55:23:33:54:30:b4:59:be:23:00:ce:
         c2:48:98:fe:c8:9c:61:e4:41:c8:18:ed:25:d0:1f:da:11:ae:
         c8:89:1b:73:11:d0:a4:2b:76:1a:5a:d7:32:08:2e:b7:3e:8c:
         19:54:fe:05:7e:3b:35:cf:c7:29:3b:2c:3d:bc:c7:44:56:26:
         08:03:fa:fc:7a:5f:a0:f0:30:a0:bd:72:cc:98:55:4c:f6:6e:
         97:d2:14:00:91:73:67:bc:18:4e:df:a9:40:fa:4e:cb:b6:37:
         73:4a:2f:b8:76:57:18:d1:fb:db:a8:33:7f:ed:95:fa:9d:8a:
         6c:1e:fa:48:40:81:6e:a9:d2:87:4e:ad:42:91:27:1c:f5:26:
         1f:6c:2f:05:3a:51:43:a1:9f:f7:2a:ac:d9:32:d1:44:87:1a:
         66:a7:6f:a4:95:7e:23:2c:1f:11:1f:37:ec:44:3c:f6:2e:5a:
         86:db:0f:ca:b9:1b:ad:c8:17:6d:7f:09:94:6d:1f:4d:66:6a:
         15:91:ef:7b:fc:db:60:d8:e5:bc:88:8b:ad:25:22:70:e0:81:
         a5:56:8b:de:10:83:33:58:a9:10:57:93:29:81:f7:b4:e8:9e:
         6c:34:d4:4a:90:3c:c4:6c:92:ba:87:ed:8a:a3:7e:94:33:dd:
         30:4b:76:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 12:57:29 2025 by rpki-client