Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a383030303a3a2f33342d3334203d3e20323637363038.roa
File:                     323830343a343433303a383030303a3a2f33342d3334203d3e20323637363038.roa (raw, json)
Hash identifier:          nV8fWfhf9MyPFf7uS9x8q+9U1c9j1k9FxtgZ4jeo6iI=
Subject key identifier:   26:6F:45:1A:80:3F:78:8D:66:E5:47:2A:5C:ED:94:0E:FE:CD:E3:5E
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       0735857B202A1BB107275EC871781AF8983E5CA6
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a383030303a3a2f33342d3334203d3e20323637363038.roa
Signing time:             Fri 30 May 2025 23:32:35 +0000
ROA not before:           Fri 30 May 2025 23:27:35 +0000
ROA not after:            Fri 29 May 2026 23:32:35 +0000
asID:                     267608
IP address blocks:        2804:4430:8000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:35:85:7b:20:2a:1b:b1:07:27:5e:c8:71:78:1a:f8:98:3e:5c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May 30 23:27:35 2025 GMT
            Not After : May 29 23:32:35 2026 GMT
        Subject: CN=266F451A803F788D66E5472A5CED940EFECDE35E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:ab:6d:6e:17:f4:c0:4f:1c:b3:89:e3:0d:
                    75:34:17:bb:e6:23:3c:2c:fb:b6:e3:b2:fb:96:e9:
                    74:28:37:94:4d:81:40:82:c2:db:9f:0d:33:4b:e2:
                    e2:11:3b:0d:53:b5:86:c9:cd:79:3c:42:c4:a8:28:
                    b1:8a:58:a2:7d:3b:52:e4:99:5a:bc:e8:44:26:f2:
                    59:f5:df:36:31:bd:fa:6d:ee:35:b8:48:7a:bb:a6:
                    f6:a1:36:43:94:3b:7a:cd:cc:a7:0e:f9:e5:bb:a5:
                    ee:31:33:ce:2b:3b:f8:26:34:7c:e9:b1:e7:9d:e7:
                    68:6b:9c:a7:7b:24:04:9b:d3:07:26:9c:59:18:01:
                    9a:d4:7a:19:d0:46:b2:34:ff:7c:ec:17:66:46:5a:
                    93:f2:3f:a0:90:e2:70:33:ad:00:91:3d:31:8d:a9:
                    51:79:62:cf:8a:d0:f6:8c:3c:cd:16:31:1d:f2:f8:
                    fd:e1:fc:fd:41:26:44:bb:76:cf:1c:84:3b:c9:ba:
                    cf:87:7a:48:93:92:09:7f:3b:2e:a5:b5:e1:14:90:
                    2b:bd:bb:53:35:37:af:e6:e3:d7:24:06:d9:18:61:
                    86:d6:13:b1:00:07:f2:85:17:87:f2:24:5e:1e:65:
                    95:9b:2b:c3:d7:e1:32:78:dd:99:15:7c:ef:d8:7c:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:6F:45:1A:80:3F:78:8D:66:E5:47:2A:5C:ED:94:0E:FE:CD:E3:5E
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a383030303a3a2f33342d3334203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4430:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         09:db:f3:9b:48:39:17:92:19:36:e4:64:27:3a:3e:e7:ce:7b:
         12:63:6a:da:69:f6:6e:6f:ce:fd:1b:3e:f6:a8:10:46:ca:30:
         7f:b0:43:67:b6:aa:46:c0:65:d0:30:90:a5:8f:1d:e1:20:e6:
         8c:2c:07:40:26:f6:b2:dd:22:30:fe:4a:c9:ed:d0:83:70:3d:
         e7:fe:0a:05:3a:22:11:41:f8:91:a5:cb:d5:b3:a0:99:85:c0:
         ca:59:a4:9d:f5:0e:91:e3:9f:8b:81:7c:14:ef:30:0e:3d:20:
         9c:d9:ae:94:9d:83:5c:49:f2:1b:d9:3d:57:d4:5f:66:07:02:
         d7:3b:87:78:26:91:82:49:58:5a:6d:a0:21:0e:93:4a:aa:3f:
         ef:3c:0b:64:78:b4:af:6e:6d:59:ca:fe:a6:86:15:65:f0:7e:
         fb:1c:9f:5e:a7:10:c5:d4:a1:c6:5d:79:26:8d:59:64:4a:95:
         e7:52:ab:d0:9a:2e:f9:06:20:f6:36:91:dc:b1:0e:44:c8:5a:
         60:a9:0a:38:ea:9f:9e:fe:c1:3a:54:d6:1b:12:fe:05:ff:9d:
         04:36:e9:6d:c6:85:62:17:5d:5d:4a:fb:0f:b8:2d:97:d8:60:
         18:ad:af:22:4e:7a:34:42:63:17:2d:42:38:b9:ae:d1:7f:80:
         2c:bf:f5:3f
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUBzWFeyAqG7EHJ17IcXga+Jg+XKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcxMDcwREIzQUY5NDg5QUMwNDRBMDE4OTRGN0YzREVB
NTAxNkMxRjAeFw0yNTA1MzAyMzI3MzVaFw0yNjA1MjkyMzMyMzVaMDMxMTAvBgNV
BAMTKDI2NkY0NTFBODAzRjc4OEQ2NkU1NDcyQTVDRUQ5NDBFRkVDREUzNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC206ttbhf0wE8cs4njDXU0F7vm
Izws+7bjsvuW6XQoN5RNgUCCwtufDTNL4uIROw1TtYbJzXk8QsSoKLGKWKJ9O1Lk
mVq86EQm8ln13zYxvfpt7jW4SHq7pvahNkOUO3rNzKcO+eW7pe4xM84rO/gmNHzp
seed52hrnKd7JASb0wcmnFkYAZrUehnQRrI0/3zsF2ZGWpPyP6CQ4nAzrQCRPTGN
qVF5Ys+K0PaMPM0WMR3y+P3h/P1BJkS7ds8chDvJus+HekiTkgl/Oy6lteEUkCu9
u1M1N6/m49ckBtkYYYbWE7EAB/KFF4fyJF4eZZWbK8PX4TJ43ZkVfO/YfFs7AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUJm9FGoA/eI1m5UcqXO2UDv7N414wHwYDVR0j
BBgwFoAUNxBw2zr5SJrARKAYlPfz3qUBbB8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQWZ6aTNEbll3aG8yOFZEbUtqUmFVWDUzZG1ldEs2eVB3ZFZ4REVVWDlO
TG8vMS8zNzEwNzBEQjNBRjk0ODlBQzA0NEEwMTg5NEY3RjNERUE1MDE2QzFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM3MTA3MERCM0FGOTQ4OUFD
MDQ0QTAxODk0RjdGM0RFQTUwMTZDMUYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FmemkzRG5Zd2hvMjhWRG1LalJhVVg1M2RtZXRLNnlQd2RWeERFVVg5TkxvLzEv
MzIzODMwMzQzYTM0MzQzMzMwM2EzODMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzNzM2MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigERDCAMA0GCSqGSIb3DQEBCwUA
A4IBAQAJ2/ObSDkXkhk25GQnOj7nznsSY2raafZub879Gz72qBBGyjB/sENntqpG
wGXQMJCljx3hIOaMLAdAJvay3SIw/krJ7dCDcD3n/goFOiIRQfiRpcvVs6CZhcDK
WaSd9Q6R45+LgXwU7zAOPSCc2a6UnYNcSfIb2T1X1F9mBwLXO4d4JpGCSVhabaAh
DpNKqj/vPAtkeLSvbm1Zyv6mhhVl8H77HJ9epxDF1KHGXXkmjVlkSpXnUqvQmi75
BiD2NpHcsQ5EyFpgqQo46p+e/sE6VNYbEv4F/50ENultxoViF11dSvsPuC2X2GAY
ra8iTno0QmMXLUI4ua7Rf4Asv/U/
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:51:16 2025 by rpki-client