Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa (raw, json)
Hash identifier:          91MHB29I4VOayIysSdE3kSMaq7lbk5EY3/Ah19d/E7Y=
Subject key identifier:   21:33:51:24:F9:19:09:A1:D8:4F:67:8C:B8:18:A7:89:55:9E:75:E1
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       3A7BAC7BB850E99E464B95F90D88C0B4CE0F9D3A
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:19 +0000
ROA not before:           Thu 06 Mar 2025 21:34:19 +0000
ROA not after:            Thu 05 Mar 2026 21:39:19 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 05:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7b:ac:7b:b8:50:e9:9e:46:4b:95:f9:0d:88:c0:b4:ce:0f:9d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:19 2025 GMT
            Not After : Mar  5 21:39:19 2026 GMT
        Subject: CN=21335124F91909A1D84F678CB818A789559E75E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e7:a0:a3:5d:58:2b:b8:a0:b9:43:64:aa:51:
                    06:24:e7:dc:0c:33:16:74:56:f6:9d:35:a2:c4:7a:
                    19:ec:f6:f4:c2:75:23:df:4f:62:9a:7b:34:c7:c5:
                    a2:84:36:91:3f:cc:ce:38:47:ef:9a:6e:10:71:bd:
                    05:5a:16:72:6d:43:23:e2:40:43:62:ee:c3:b9:60:
                    ab:27:c7:1c:bf:15:4c:50:4b:a3:99:fb:0c:3f:fd:
                    09:12:3b:02:d0:94:1e:13:b5:c5:46:b6:92:c1:bf:
                    2b:63:af:5d:25:56:19:13:00:10:bb:67:3a:02:22:
                    c8:05:d4:78:6c:43:3e:aa:c9:0d:06:2b:d8:f4:ef:
                    e4:5e:65:05:df:e4:9f:0d:c5:99:92:48:d0:be:e6:
                    3f:95:55:25:e3:10:21:fc:82:bb:a1:6a:b6:a8:03:
                    29:ce:c1:27:56:82:1d:94:ef:a0:e0:ce:a0:e0:2f:
                    db:9d:20:e2:9e:7c:04:78:15:85:bc:d7:88:ed:e8:
                    9c:80:67:97:01:cb:b0:73:c5:fc:1e:c0:99:70:3c:
                    2d:1f:cf:2f:7b:54:55:71:b5:b6:dc:7d:b7:4d:fb:
                    ab:da:ef:64:32:19:ef:3b:71:07:49:11:b4:bd:91:
                    8f:6c:d2:14:ef:70:7f:20:63:b2:a4:7d:08:83:5a:
                    99:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:33:51:24:F9:19:09:A1:D8:4F:67:8C:B8:18:A7:89:55:9E:75:E1
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6a:65:db:5f:93:c8:48:e8:ea:3d:d3:60:e6:0a:d9:66:14:51:
         aa:0e:a0:f0:be:7e:cb:0f:30:b9:19:9c:92:8c:4d:4a:2c:25:
         ec:3b:7b:ed:44:52:5a:d7:04:60:77:74:d7:dc:e8:e7:13:93:
         3f:fd:aa:af:95:7e:cb:af:97:a6:ec:05:f1:05:32:6b:90:8f:
         10:fa:ba:8b:3a:32:88:bb:88:07:d6:de:fc:65:c6:02:19:29:
         2c:be:18:3c:a1:db:5f:e6:2e:d5:1e:3b:bb:96:2d:a7:fa:b1:
         e8:8c:c9:e6:83:2c:71:ec:93:5c:84:8b:07:3a:60:e0:53:5e:
         e7:33:3a:40:e9:7b:f9:c3:60:4e:90:cb:4c:71:e6:60:21:80:
         ac:cc:20:47:b4:73:19:a1:aa:8b:73:58:0e:db:11:b6:b1:44:
         ca:af:f2:3e:4c:7a:57:e8:e4:8e:a4:e3:44:8e:22:13:5f:bf:
         a8:57:86:30:fb:63:61:95:e1:25:92:ae:3c:32:e5:be:18:0f:
         98:ad:be:0e:f9:92:69:fc:eb:a4:05:94:a3:21:1f:d1:fc:de:
         fd:79:ac:48:02:60:e8:6a:df:e7:3c:84:fc:60:10:ae:2f:50:
         a8:1e:e9:f2:6e:a1:22:80:41:8c:e1:38:23:d1:6a:69:df:80:
         1a:66:17:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:07 2025 by rpki-client