Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a3a2f33342d3334203d3e20323635343836.roa
File:                     323830343a333465303a3a2f33342d3334203d3e20323635343836.roa (raw, json)
Hash identifier:          lP9yLdGOkCk+3ShNrz6bkeh6s9PD/F1QN6A9J9tvCxQ=
Subject key identifier:   3C:E9:71:02:1F:2A:5C:FB:0F:22:85:8A:CF:F3:75:98:C5:3C:A7:F8
Certificate issuer:       /CN=32D842DEE7974134E5B4C88618DC7A30F4029092
Certificate serial:       3404270C42E476A70C88ADACF047FA06C21BE51A
Authority key identifier: 32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a3a2f33342d3334203d3e20323635343836.roa
Signing time:             Thu 05 Jun 2025 21:01:02 +0000
ROA not before:           Thu 05 Jun 2025 20:56:02 +0000
ROA not after:            Thu 04 Jun 2026 21:01:02 +0000
asID:                     265486
IP address blocks:        2804:34e0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl
                          rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 02:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:04:27:0c:42:e4:76:a7:0c:88:ad:ac:f0:47:fa:06:c2:1b:e5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32D842DEE7974134E5B4C88618DC7A30F4029092
        Validity
            Not Before: Jun  5 20:56:02 2025 GMT
            Not After : Jun  4 21:01:02 2026 GMT
        Subject: CN=3CE971021F2A5CFB0F22858ACFF37598C53CA7F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:65:b6:d5:af:52:60:f9:a4:0e:2c:93:0d:
                    96:38:01:ff:4a:fe:3f:b0:e1:fb:d7:64:ea:19:e0:
                    94:98:bd:fc:53:9a:37:7c:d1:0a:3d:0a:2a:88:5d:
                    4c:12:aa:d7:39:9f:06:08:37:a4:61:1f:c3:c6:c4:
                    c9:d1:03:b8:8c:ee:22:52:09:70:dd:36:af:68:fe:
                    e9:53:da:e8:d3:19:18:72:d7:05:06:6e:b3:0b:93:
                    28:30:dc:f0:50:fc:6b:13:87:7b:ed:5a:d6:a5:6e:
                    cf:d0:26:8e:f0:2e:7f:61:48:54:17:21:5f:2b:f2:
                    87:c7:d2:15:30:54:06:69:0d:bb:3a:2a:56:db:91:
                    07:f5:09:6f:fa:ab:68:3e:a5:9d:8b:c5:61:c4:b8:
                    ab:f2:1e:32:f5:5c:03:95:dc:16:f3:92:78:c3:de:
                    fa:ab:87:a9:11:da:c5:1e:7f:cb:21:dc:69:e4:4e:
                    aa:e8:d1:c6:14:57:e9:ef:e7:93:aa:6a:3a:50:cf:
                    c9:e7:11:3c:1d:2d:61:99:cf:ee:41:4c:35:e4:b5:
                    20:32:a1:ae:8c:1c:7c:e5:61:5f:1f:7e:58:78:8c:
                    80:09:81:4e:3a:dc:db:c3:55:3f:63:8f:9e:90:06:
                    fb:ea:26:e7:7a:b6:b3:d0:0d:6f:a7:07:a0:e7:91:
                    76:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E9:71:02:1F:2A:5C:FB:0F:22:85:8A:CF:F3:75:98:C5:3C:A7:F8
            X509v3 Authority Key Identifier:
                keyid:32:D8:42:DE:E7:97:41:34:E5:B4:C8:86:18:DC:7A:30:F4:02:90:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/32D842DEE7974134E5B4C88618DC7A30F4029092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D842DEE7974134E5B4C88618DC7A30F4029092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EcJrPRXVZchaNbzuEzRXeitZgQTK5tHk8SkLXtgVqKfS/0/323830343a333465303a3a2f33342d3334203d3e20323635343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34e0::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:92:e3:82:1a:19:2b:be:6f:4b:2f:64:7e:5c:81:fa:d7:a0:
         25:77:46:67:df:45:37:37:2a:85:4d:16:9a:76:f7:ea:b4:72:
         cb:e2:73:91:4b:b2:b4:3f:96:aa:88:54:ab:3f:f3:be:4b:88:
         7b:02:8d:13:2b:20:49:fa:cb:e6:ed:2e:fd:b2:ad:9b:44:b0:
         29:06:86:41:d6:44:ad:42:f0:55:5e:63:75:3b:d7:a0:ad:15:
         44:53:41:e2:b0:d0:1c:12:28:7c:3a:34:7f:a1:92:5a:8a:2c:
         95:3d:de:cf:fb:f7:62:ed:6c:1b:69:5c:22:6f:55:81:f9:34:
         4e:1c:7c:18:f8:df:03:21:2b:3c:38:62:09:93:0e:5d:df:cd:
         e0:fe:52:16:0c:ef:4c:64:86:7e:85:2b:1f:c6:b0:dd:6e:67:
         be:8a:bd:c0:6a:83:00:d9:9b:97:d8:8b:a6:20:36:f8:63:2c:
         4d:2c:26:e0:aa:ca:45:58:ea:f2:a8:63:e3:ee:ab:86:23:6f:
         f3:65:c3:8e:6d:ee:41:fa:4a:7b:a1:f2:64:9d:02:c1:eb:b7:
         de:47:1d:92:2a:8c:04:c2:b5:5b:19:21:de:b5:53:09:79:38:
         55:cf:eb:03:ab:5d:02:95:c4:17:10:b5:0d:06:86:c3:d1:b0:
         82:e7:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:31:15 2025 by rpki-client