Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33342d3334203d3e20323637363038.roa
File:                     323830343a343433303a3a2f33342d3334203d3e20323637363038.roa (raw, json)
Hash identifier:          a70HXg85l8p3A/g9HTVTPdkMj0CdTM5aVfc7Je+7ba0=
Subject key identifier:   44:08:7D:8F:07:C0:F9:E1:BE:DB:58:21:6A:EB:3A:FE:96:24:9B:D6
Certificate issuer:       /CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
Certificate serial:       742189B0EE19D85A29E0BB364A153A120541C4F2
Authority key identifier: 37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33342d3334203d3e20323637363038.roa
Signing time:             Fri 30 May 2025 23:31:29 +0000
ROA not before:           Fri 30 May 2025 23:26:29 +0000
ROA not after:            Fri 29 May 2026 23:31:29 +0000
asID:                     267608
IP address blocks:        2804:4430::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl
                          rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 06:24:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:21:89:b0:ee:19:d8:5a:29:e0:bb:36:4a:15:3a:12:05:41:c4:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=371070DB3AF9489AC044A01894F7F3DEA5016C1F
        Validity
            Not Before: May 30 23:26:29 2025 GMT
            Not After : May 29 23:31:29 2026 GMT
        Subject: CN=44087D8F07C0F9E1BEDB58216AEB3AFE96249BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e5:e2:ff:b0:10:6d:92:22:c9:30:b7:10:a2:
                    c7:8e:78:29:3c:13:23:ab:58:20:c4:95:99:bb:ca:
                    a2:92:e2:b8:95:ce:12:4d:1c:3c:d0:8e:ea:35:ae:
                    a6:a5:8e:11:02:8f:87:f3:99:cf:b0:dd:be:b0:58:
                    e6:38:ef:04:26:a1:7a:29:17:c6:9f:0b:f9:61:61:
                    eb:aa:c9:12:3f:44:5c:cf:49:fa:7b:b8:9a:5b:ce:
                    44:ab:44:f4:45:18:4b:6a:ee:4e:41:80:fd:9c:b1:
                    59:e4:0b:1e:5a:07:d6:28:40:52:4d:30:2c:42:bd:
                    03:ac:18:fe:66:a9:9a:b5:fb:cc:04:6d:b5:9d:10:
                    e0:5a:48:a3:ed:d2:d9:dd:36:10:1d:47:42:65:48:
                    3f:34:d3:72:fd:b5:53:2f:19:db:33:db:06:dc:71:
                    48:8f:ea:d9:a7:99:8b:c8:51:98:a4:60:6a:53:d6:
                    ff:f4:12:57:d8:eb:3c:04:8d:b3:c1:e8:e3:22:26:
                    8c:4e:c7:85:18:99:43:a5:7d:1d:aa:2a:df:76:0f:
                    6d:b8:62:43:2c:36:1b:b8:4f:c3:10:f7:a7:e2:e7:
                    b9:ea:5c:35:f0:ea:b7:6c:03:df:a2:a8:98:d6:ff:
                    c3:a4:6d:a2:b3:c0:ba:51:90:26:eb:e2:de:77:2c:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:08:7D:8F:07:C0:F9:E1:BE:DB:58:21:6A:EB:3A:FE:96:24:9B:D6
            X509v3 Authority Key Identifier:
                keyid:37:10:70:DB:3A:F9:48:9A:C0:44:A0:18:94:F7:F3:DE:A5:01:6C:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/371070DB3AF9489AC044A01894F7F3DEA5016C1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/1/323830343a343433303a3a2f33342d3334203d3e20323637363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4430::/34

    Signature Algorithm: sha256WithRSAEncryption
         4f:81:2c:df:ba:bf:4f:70:c9:b0:e6:5b:6f:59:6b:bd:86:40:
         52:93:d4:78:61:e9:f3:c0:85:3e:fe:91:3a:e4:b0:7b:90:f0:
         74:09:fa:cc:51:64:f7:cf:fc:25:fa:9e:b8:90:aa:7b:c2:3e:
         f3:c9:3a:33:17:64:99:4b:5b:48:54:3f:b8:db:e3:af:fe:4d:
         65:00:aa:62:30:99:00:7e:06:cf:fd:68:a8:ef:37:34:d5:74:
         d1:6c:8d:24:5e:7f:19:49:4c:e7:3c:7c:3e:b8:2a:35:bc:fe:
         71:9d:3f:e5:2a:35:41:07:0a:41:f9:b2:5f:3e:64:21:b9:43:
         f6:b2:17:6e:ec:28:78:2d:4e:bc:8c:18:2d:24:d4:c5:7f:e6:
         fe:0d:97:ea:44:3e:7f:ae:55:26:cd:cc:5e:26:e1:eb:fd:0d:
         fe:66:53:55:98:99:98:2f:97:9c:82:7f:19:17:16:ce:6b:8f:
         33:ce:a5:32:6c:36:28:ea:7e:99:21:b6:47:24:2d:07:04:28:
         32:86:04:6e:f4:87:16:0e:7b:ad:76:f3:5c:91:94:94:9e:ef:
         01:c7:1d:ab:12:f3:a3:58:8c:3d:b1:38:c9:7d:be:fd:f7:f2:
         91:eb:a6:76:01:51:e3:7d:59:85:71:e2:8f:eb:15:12:14:81:
         63:f3:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:28:51 2025 by rpki-client