Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa
File:                     323830343a333637303a3a2f33322d3438203d3e20323636333438.roa (raw, json)
Hash identifier:          yV6dPbE4a4xQHuIKrrsTOdbjknHgwkJmOUXMU7tiv6M=
Subject key identifier:   AE:1B:32:6D:BC:D8:48:35:41:63:AB:14:15:20:11:6B:3C:C2:15:9D
Certificate issuer:       /CN=273782B997878A9415F132214E8D09CFA971572F
Certificate serial:       7905A0A5DB15005CD59305D7E60051D7B34CDE38
Authority key identifier: 27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     266348
IP address blocks:        2804:3670::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl
                          rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 19:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:05:a0:a5:db:15:00:5c:d5:93:05:d7:e6:00:51:d7:b3:4c:de:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273782B997878A9415F132214E8D09CFA971572F
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject: CN=AE1B326DBCD848354163AB141520116B3CC2159D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:ff:de:b2:af:08:67:01:50:74:97:67:c8:
                    e3:51:c4:2d:9a:41:b5:5c:c2:ab:3d:bb:93:27:9d:
                    76:a5:8a:0e:f7:7d:70:4e:51:fa:b6:f2:08:1e:21:
                    52:35:e7:b1:f4:40:49:91:75:c4:62:10:c1:0a:01:
                    12:cd:27:26:c2:7a:5c:e8:ab:c8:a0:8f:62:d8:d9:
                    b3:04:98:03:a4:e2:6a:e3:28:d1:4c:ca:12:2f:fa:
                    0b:b5:ed:05:d7:f5:b7:98:81:e5:a0:6a:85:5e:61:
                    9e:c2:0c:26:7c:d9:d8:38:55:0a:c1:3f:73:2a:0a:
                    c5:8b:e3:c8:44:15:35:5e:29:6d:a0:21:ea:4c:89:
                    6c:9d:e7:fa:af:1c:53:17:80:68:9b:59:88:e2:dd:
                    ca:1a:fc:c9:65:21:bd:ae:b3:9b:db:39:de:4c:53:
                    36:82:07:aa:71:96:ab:4d:64:5b:b4:07:fe:08:96:
                    89:73:9a:ec:77:15:42:c6:98:27:ee:ba:e7:cb:d7:
                    b3:53:bd:82:73:86:86:06:f7:dc:32:f8:83:66:e7:
                    8c:2f:b9:d7:89:8f:f8:98:97:ed:61:4f:d7:ba:64:
                    7d:42:b9:98:1d:03:b7:39:14:c6:a6:52:aa:a8:ee:
                    5d:5f:42:41:2d:5f:99:9b:b7:95:bb:4f:ee:84:42:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:1B:32:6D:BC:D8:48:35:41:63:AB:14:15:20:11:6B:3C:C2:15:9D
            X509v3 Authority Key Identifier:
                keyid:27:37:82:B9:97:87:8A:94:15:F1:32:21:4E:8D:09:CF:A9:71:57:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/273782B997878A9415F132214E8D09CFA971572F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/273782B997878A9415F132214E8D09CFA971572F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/41zokyXVfAchhiMGucCz98MXiq6N991QjYbV8oGzaiZE/1/323830343a333637303a3a2f33322d3438203d3e20323636333438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3670::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:1a:7a:ee:65:c3:b7:fa:9c:db:67:5a:0f:0d:59:59:f9:64:
         8e:79:3d:5a:9e:92:a3:31:c6:48:84:30:c5:ad:1a:1e:5c:54:
         c2:25:99:80:76:99:b6:bd:3c:b4:ef:ad:cc:c9:6b:73:b5:50:
         b4:a0:c8:e2:a0:46:2f:25:3d:e5:7d:fc:b1:df:ad:51:f6:a5:
         bc:c0:d1:e9:38:03:a9:d5:aa:b5:0d:35:c6:e7:86:7d:5a:43:
         b2:ff:b7:da:3a:b5:57:3c:5c:bd:ed:82:fd:74:49:e5:e1:ef:
         20:8a:31:ef:90:98:fa:26:b4:8c:8f:01:3b:b4:2a:bd:fc:c7:
         38:d9:30:fc:92:ad:50:e4:92:e1:6b:3e:0a:0d:00:1c:4f:cd:
         15:44:1f:e5:d6:dd:75:48:85:70:73:8c:d9:ef:88:6d:f2:86:
         eb:13:ff:8b:79:3f:99:c5:a2:a1:56:5b:e6:98:b6:9d:91:1b:
         3f:50:82:00:36:29:a4:37:d3:24:3a:bf:ab:34:97:6a:18:70:
         df:cd:ec:8f:63:ca:7a:4b:f6:bb:5a:cf:ed:39:e0:b7:0b:fb:
         fb:ca:78:b6:1e:30:dd:a9:6d:52:7a:09:d4:e7:d9:37:7f:8c:
         a1:a0:fd:d1:54:a0:5a:08:0b:15:05:31:70:a2:68:cc:14:7f:
         a7:d7:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 08:21:03 2025 by rpki-client