Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa
File:                     323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa (raw, json)
Hash identifier:          Zh0f7PXpynQdF+LNUpLMkXKVuF2YwleFw3gZncRMMOw=
Subject key identifier:   33:7F:45:99:EC:01:47:30:D1:7C:65:18:B1:C4:3C:1F:45:EE:34:9F
Certificate issuer:       /CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4
Certificate serial:       3E6531D0F88B3AEC66DB25D3C8C3DE5BE6CF2C59
Authority key identifier: 65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa
Signing time:             Thu 05 Jun 2025 14:43:00 +0000
ROA not before:           Thu 05 Jun 2025 14:38:00 +0000
ROA not after:            Thu 04 Jun 2026 14:43:00 +0000
asID:                     272253
IP address blocks:        2804:8450:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl
                          rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 08 Jun 2025 20:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:65:31:d0:f8:8b:3a:ec:66:db:25:d3:c8:c3:de:5b:e6:cf:2c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6517ED7C130BCBAC13709ADF76E878D88CD96DD4
        Validity
            Not Before: Jun  5 14:38:00 2025 GMT
            Not After : Jun  4 14:43:00 2026 GMT
        Subject: CN=337F4599EC014730D17C6518B1C43C1F45EE349F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b8:a2:52:c7:c7:e5:84:a2:a1:9a:ad:dc:a0:
                    55:71:1f:cd:22:28:8d:4a:77:b5:94:1d:af:38:20:
                    18:76:58:bc:4a:f3:45:00:81:af:fb:18:3e:21:b0:
                    92:be:62:dc:f2:c2:26:cb:6e:45:6e:2f:14:19:bc:
                    4e:92:95:1b:60:67:52:8e:50:0d:e6:2a:a9:3f:0a:
                    cf:72:24:73:53:17:c8:c4:71:39:9b:77:75:5a:e3:
                    9b:b9:ec:cf:1f:c5:66:9f:ea:de:d8:aa:61:ed:0a:
                    f5:e3:68:c3:4d:12:09:7c:5e:b6:0c:20:b9:2f:6f:
                    8b:b6:29:72:9c:7e:24:5f:25:09:7b:f8:5f:1a:5f:
                    bc:e7:0a:9c:40:7a:83:8e:c5:3e:52:8c:ee:a5:42:
                    c8:c0:a0:4b:0c:18:fc:44:77:41:e8:25:18:b9:fd:
                    42:19:4a:82:af:c6:c8:87:e4:0a:9f:9b:48:62:b5:
                    56:98:52:3f:bc:a8:e7:de:96:11:5e:44:23:56:bf:
                    7e:a1:f3:76:67:be:a7:c1:1a:4b:31:98:a1:9e:56:
                    b5:01:b0:09:52:1c:a8:7b:45:f3:1a:db:af:8d:b3:
                    9d:ba:0e:59:46:29:f3:63:36:73:18:50:b6:dc:95:
                    c9:01:99:8f:f1:d9:63:7c:63:09:25:da:16:99:22:
                    60:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7F:45:99:EC:01:47:30:D1:7C:65:18:B1:C4:3C:1F:45:EE:34:9F
            X509v3 Authority Key Identifier:
                keyid:65:17:ED:7C:13:0B:CB:AC:13:70:9A:DF:76:E8:78:D8:8C:D9:6D:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6517ED7C130BCBAC13709ADF76E878D88CD96DD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UwMsVB8KBkJf4nb7ihz7ZRcWNpZ4nsotbSzNidtLcf1/0/323830343a383435303a383030303a3a2f33332d3333203d3e20323732323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8450:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:73:53:8e:f9:b7:c3:fc:a1:43:4e:2d:4d:15:6d:bc:ea:9a:
         74:71:f0:f6:ce:fd:2e:e3:e6:85:a5:ae:9b:5a:96:5b:fa:b1:
         a0:de:eb:28:08:41:7a:a0:5b:c7:af:3e:c0:bf:ce:e0:45:ff:
         ea:79:ac:f5:7a:af:27:07:4a:24:db:94:81:03:70:f9:56:6f:
         6c:01:e6:44:ce:78:b9:85:aa:1f:4f:5a:c8:43:ea:57:0b:e0:
         71:85:ab:23:c5:55:fc:b2:53:92:b8:9e:5d:fa:4d:88:43:57:
         e5:2b:33:49:6f:15:34:78:f6:5f:2b:14:4e:34:62:61:3e:4e:
         85:8e:d2:a2:1e:52:41:e3:ce:1d:60:e1:56:71:2a:6b:c1:cb:
         af:11:c7:5d:03:d1:d9:4b:fd:64:f7:8a:ac:97:44:41:7b:84:
         94:2e:c9:4f:28:2f:b5:c2:bf:7d:80:e0:4e:f4:17:8d:df:b3:
         14:a9:76:3d:61:00:be:0a:f8:64:3d:de:fa:6f:3d:81:fc:19:
         40:b2:91:5d:a7:04:ac:c3:2a:fc:58:b5:ca:f3:0f:63:a6:6a:
         65:9d:8b:31:de:a6:7e:e4:7a:49:64:a1:48:07:77:d9:41:a8:
         7e:03:47:d3:27:36:cc:9c:10:8b:44:94:1f:e9:35:30:7e:bc:
         ce:fb:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:09 2025 by rpki-client