Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a383030303a3a2f33332d3333203d3e20323733363835.roa
File:                     323830343a386161633a383030303a3a2f33332d3333203d3e20323733363835.roa (raw, json)
Hash identifier:          ptJF2i2I7M7+H8bCgOGD5kRsHh+lxE749M7EAY9pOkM=
Subject key identifier:   C6:2A:46:32:71:2D:98:4B:5E:79:E2:B3:67:D9:9B:43:48:E2:CE:EE
Certificate issuer:       /CN=395B07F63C81D58C40572416F238D4140BA74B63
Certificate serial:       7733995770E2493BB409CB9423E83EE7D6B4C0D0
Authority key identifier: 39:5B:07:F6:3C:81:D5:8C:40:57:24:16:F2:38:D4:14:0B:A7:4B:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395B07F63C81D58C40572416F238D4140BA74B63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a383030303a3a2f33332d3333203d3e20323733363835.roa
Signing time:             Thu 15 May 2025 16:16:45 +0000
ROA not before:           Thu 15 May 2025 16:11:45 +0000
ROA not after:            Thu 14 May 2026 16:16:45 +0000
asID:                     273685
IP address blocks:        2804:8aac:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/395B07F63C81D58C40572416F238D4140BA74B63.crl
                          rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/395B07F63C81D58C40572416F238D4140BA74B63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395B07F63C81D58C40572416F238D4140BA74B63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 10:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:33:99:57:70:e2:49:3b:b4:09:cb:94:23:e8:3e:e7:d6:b4:c0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395B07F63C81D58C40572416F238D4140BA74B63
        Validity
            Not Before: May 15 16:11:45 2025 GMT
            Not After : May 14 16:16:45 2026 GMT
        Subject: CN=C62A4632712D984B5E79E2B367D99B4348E2CEEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:15:f8:02:82:2a:01:15:86:a0:15:6d:3f:c1:
                    e3:d3:17:5d:04:35:ff:6f:f7:8a:4f:17:da:43:f8:
                    13:62:37:26:e4:d0:7b:ed:72:26:88:60:63:da:da:
                    45:52:7f:ca:d4:c4:c4:a6:2f:e1:65:c0:d7:f0:12:
                    d1:6a:cd:fb:f4:4f:8e:7b:bb:1e:88:d9:ed:4f:4d:
                    6d:b5:e2:86:3b:96:26:0b:0f:09:be:57:c2:71:8f:
                    9f:5f:3a:12:56:23:86:05:91:d5:d6:ff:73:a0:1c:
                    bd:14:25:87:52:aa:52:0b:8e:9a:c3:f7:79:c7:73:
                    4e:b1:65:18:72:25:7d:7e:65:ae:0e:34:ed:bb:9e:
                    5e:a9:13:be:04:c7:02:b5:11:b9:1c:a4:c4:04:41:
                    a0:17:cb:40:f1:e5:60:f4:68:a7:9b:36:7a:ea:2f:
                    5b:c6:9e:c2:a5:d8:fb:20:8e:cf:fe:46:ba:f6:4e:
                    e4:50:b4:57:8d:26:4e:07:f9:ac:43:2d:cf:34:18:
                    25:e8:9d:89:2d:63:76:fd:e5:e3:3d:62:07:18:2d:
                    36:ef:e5:da:12:69:e1:19:2d:57:3f:c3:91:ff:5e:
                    7a:35:23:44:90:86:78:d6:04:0a:0e:70:49:56:0a:
                    46:9b:7e:86:6f:2f:ee:2e:fc:ec:07:fb:fd:c6:83:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2A:46:32:71:2D:98:4B:5E:79:E2:B3:67:D9:9B:43:48:E2:CE:EE
            X509v3 Authority Key Identifier:
                keyid:39:5B:07:F6:3C:81:D5:8C:40:57:24:16:F2:38:D4:14:0B:A7:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/395B07F63C81D58C40572416F238D4140BA74B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395B07F63C81D58C40572416F238D4140BA74B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AXsFMZrBm3cKWXDDr2d1mBG2q7fmTB8kD66RxsuZS8rs/0/323830343a386161633a383030303a3a2f33332d3333203d3e20323733363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8aac:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         6d:74:4b:8d:5c:ad:50:4f:eb:dd:8a:43:08:80:31:49:9c:11:
         d0:de:2a:32:82:d9:13:ac:8f:95:15:1d:f3:b9:ed:e5:d1:e1:
         0c:2b:4e:ae:7b:ab:bd:29:70:0a:c1:ac:c4:81:f1:a1:14:85:
         33:40:5e:37:f5:1c:0f:d2:62:8e:3d:34:b4:3f:2b:43:a5:17:
         7d:94:b6:ee:d2:8d:ab:5e:c6:99:9f:3a:9a:2f:60:61:ce:14:
         4e:46:c6:51:71:df:24:28:44:f0:a7:eb:ab:e6:d3:7f:5e:eb:
         28:8c:7e:c5:ca:44:22:d0:fc:f3:dd:f8:f3:4f:93:57:a4:e6:
         ff:37:97:bb:8e:64:d8:36:dd:40:57:c7:79:22:4c:93:3b:51:
         7f:97:46:0a:d1:6c:cc:72:7c:58:54:c1:fe:4d:fa:a2:83:59:
         f9:35:0f:a7:59:1e:a4:2d:6e:93:11:a7:72:27:fc:6a:e3:13:
         b6:df:fe:01:eb:ff:5c:61:d9:73:8a:d5:cf:b6:54:f8:c9:71:
         e7:2f:87:2d:d4:37:7d:1a:2e:da:a4:97:a8:86:50:5f:d9:c8:
         36:44:07:ca:e3:de:3d:88:a2:37:b1:64:71:c3:2c:e5:65:e0:
         35:55:87:71:3d:b9:47:23:78:db:19:47:dd:de:26:1e:3d:cc:
         b1:b6:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 02:03:14 2025 by rpki-client