Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33322d3332203d3e20323731313137.roa
File:                     323830343a373638343a3a2f33322d3332203d3e20323731313137.roa (raw, json)
Hash identifier:          sz/U9hddI2Pf0fcjELDGeONUG1isw666zmxLUWkyMCE=
Subject key identifier:   3E:B7:2B:23:AC:E5:34:44:AA:AB:30:7B:55:5A:7D:BF:C8:27:E2:4A
Certificate issuer:       /CN=62D01A32125D7B1F626C38C25BC340B899793CFA
Certificate serial:       65D93D02AC40F9E7530DD689070E48A79F239399
Authority key identifier: 62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33322d3332203d3e20323731313137.roa
Signing time:             Thu 06 Mar 2025 21:39:20 +0000
ROA not before:           Thu 06 Mar 2025 21:34:20 +0000
ROA not after:            Thu 05 Mar 2026 21:39:20 +0000
asID:                     271117
IP address blocks:        2804:7684::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl
                          rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 00:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:d9:3d:02:ac:40:f9:e7:53:0d:d6:89:07:0e:48:a7:9f:23:93:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62D01A32125D7B1F626C38C25BC340B899793CFA
        Validity
            Not Before: Mar  6 21:34:20 2025 GMT
            Not After : Mar  5 21:39:20 2026 GMT
        Subject: CN=3EB72B23ACE53444AAAB307B555A7DBFC827E24A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:81:14:8f:57:1d:62:6f:3a:73:d1:88:b1:03:
                    e7:8a:13:6d:0f:9a:09:ac:19:4d:fd:9e:e9:9b:c8:
                    65:8d:63:30:19:e7:48:84:0f:16:1d:ae:88:26:f8:
                    d6:ce:30:23:06:f8:ee:44:68:56:8c:5d:da:6d:e0:
                    2f:f7:f4:2f:7b:0a:0d:f9:62:86:81:03:8c:9f:97:
                    86:b8:e3:b7:0f:28:00:80:42:6d:5d:47:ee:87:ae:
                    f1:a1:2f:50:52:b1:8c:30:68:7a:6a:23:ec:4b:d8:
                    9d:3f:a2:02:cb:f5:ae:54:a8:4f:4a:4a:c0:a3:25:
                    73:fa:d1:4e:71:b9:5e:e4:4a:40:58:4c:29:99:7d:
                    ce:82:76:fa:b7:58:70:58:e3:f3:d4:c5:14:cb:14:
                    90:19:2c:d4:49:00:6c:90:6c:51:7e:08:47:8e:b8:
                    46:0d:2a:ab:a8:53:49:2c:49:d3:2f:a5:e6:fa:5e:
                    5f:0c:55:be:a5:34:be:0a:f6:32:32:ff:17:71:40:
                    57:bc:86:51:c4:8d:c1:cd:6c:ec:df:e4:b2:2f:50:
                    2b:44:39:70:f0:0a:ea:10:99:33:40:38:e0:16:44:
                    66:aa:06:1d:c4:13:df:1c:af:ad:27:e8:33:4e:2d:
                    53:1b:a6:f4:42:8b:dd:63:8f:ab:87:6f:88:ad:cc:
                    7e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B7:2B:23:AC:E5:34:44:AA:AB:30:7B:55:5A:7D:BF:C8:27:E2:4A
            X509v3 Authority Key Identifier:
                keyid:62:D0:1A:32:12:5D:7B:1F:62:6C:38:C2:5B:C3:40:B8:99:79:3C:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/62D01A32125D7B1F626C38C25BC340B899793CFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62D01A32125D7B1F626C38C25BC340B899793CFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/1/323830343a373638343a3a2f33322d3332203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:67:7c:f5:fd:db:1e:99:76:9b:e6:6e:97:c2:6a:a2:2b:bf:
         6a:59:17:ea:de:91:2d:0a:87:b4:78:27:a1:1c:ba:0f:05:42:
         cd:2b:9c:d6:fa:9e:87:16:cc:99:31:06:2b:7f:b3:20:4d:ab:
         08:8d:0b:db:d0:42:f9:00:5a:6c:ff:4f:34:e2:bf:c2:48:61:
         4e:92:76:98:48:f0:24:8b:c6:1f:fa:c8:b1:0b:7e:7d:0c:8b:
         84:28:de:de:b9:ea:d3:e6:2e:c9:dc:2b:f8:57:7b:f4:63:cf:
         2d:2a:1c:fe:a2:4e:21:50:18:fa:c9:cd:a8:7d:b0:fd:99:73:
         28:ac:3a:4d:9a:be:1e:7b:c8:12:1a:f6:d1:ba:ac:fd:2b:e0:
         33:34:0e:df:12:32:81:42:c9:67:35:94:8a:e6:00:3d:6c:b7:
         65:2a:3c:86:75:68:cc:c3:12:ab:2d:c5:8b:69:eb:1f:dc:c1:
         45:1f:45:5b:60:67:c8:fa:46:95:23:ee:14:50:f1:d3:d7:a0:
         9c:a9:07:90:e1:ca:9b:59:01:a3:20:59:6a:55:e3:0d:d7:7f:
         03:4a:8f:b7:4a:8d:56:ce:c9:25:cf:49:0a:58:c5:e5:66:e9:
         4b:ea:f9:c8:68:c8:42:00:55:42:7a:f2:09:15:77:a7:b2:c4:
         d4:f2:55:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:31:44 2025 by rpki-client