Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a3a2f33332d3333203d3e20323639333733.roa
File:                     323830343a363361303a3a2f33332d3333203d3e20323639333733.roa (raw, json)
Hash identifier:          3xNc3nWAuntIdtLTscKEcHDOA1sAB+/NQ1nD/nr0eRw=
Subject key identifier:   C7:52:8C:8E:0C:65:51:07:D5:FC:8F:A2:1E:E7:F9:BD:AC:C8:E7:0A
Certificate issuer:       /CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
Certificate serial:       519E7EC6C5B80DB14966B87B3EED627714233558
Authority key identifier: 2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a3a2f33332d3333203d3e20323639333733.roa
Signing time:             Thu 06 Mar 2025 04:00:07 +0000
ROA not before:           Thu 06 Mar 2025 03:55:07 +0000
ROA not after:            Thu 05 Mar 2026 04:00:07 +0000
asID:                     269373
IP address blocks:        2804:63a0::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl
                          rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 16:59:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:9e:7e:c6:c5:b8:0d:b1:49:66:b8:7b:3e:ed:62:77:14:23:35:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D
        Validity
            Not Before: Mar  6 03:55:07 2025 GMT
            Not After : Mar  5 04:00:07 2026 GMT
        Subject: CN=C7528C8E0C655107D5FC8FA21EE7F9BDACC8E70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a7:a1:c2:20:0d:be:97:88:16:73:09:b6:88:
                    e8:86:23:ad:58:fb:2b:ae:39:4a:29:9b:2a:4a:61:
                    1d:81:14:f7:c9:8d:c2:d6:b3:00:1b:14:de:86:02:
                    26:ee:cc:aa:02:03:6f:b0:28:63:60:17:9f:46:50:
                    64:5d:32:85:ad:49:4a:94:7b:a2:8e:03:ac:5c:6f:
                    ef:7a:f6:16:d8:5e:76:9a:ca:37:65:fe:d1:76:98:
                    a6:10:ae:b6:5d:d9:ea:74:da:9c:58:e0:67:c3:ff:
                    63:d7:33:0b:06:11:81:db:4d:1f:72:3f:9e:a6:24:
                    39:5d:5b:ba:b1:15:69:13:64:00:26:18:6c:66:db:
                    2e:62:a5:c0:19:5c:62:6c:0a:ff:1a:91:ba:07:13:
                    41:84:e1:a9:94:76:e5:ab:5e:2f:62:eb:c8:b7:0c:
                    3a:1f:bd:b7:65:13:3c:21:b8:78:b7:38:28:cf:8b:
                    8e:5d:b5:fc:73:90:9e:0d:af:a7:c5:e7:16:80:91:
                    62:c6:f6:f5:01:e6:a4:af:3c:c3:38:26:42:a1:c0:
                    53:ac:c3:5c:fb:63:35:d7:a2:d3:a3:64:dd:7b:66:
                    0f:37:a6:9a:66:67:13:46:8e:41:64:5a:a7:1f:d4:
                    1f:6a:ac:7e:79:e9:51:f4:55:93:a3:20:1c:e4:73:
                    34:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:52:8C:8E:0C:65:51:07:D5:FC:8F:A2:1E:E7:F9:BD:AC:C8:E7:0A
            X509v3 Authority Key Identifier:
                keyid:2C:C0:B2:2D:7C:2B:5C:28:6F:EA:B5:49:8F:FF:34:11:FE:6C:19:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CC0B22D7C2B5C286FEAB5498FFF3411FE6C199D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J6U7zJYjxzxhvRUqiRW1BeBBcL7imnGL43pJs4MHQ7xo/1/323830343a363361303a3a2f33332d3333203d3e20323639333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:63a0::/33

    Signature Algorithm: sha256WithRSAEncryption
         64:7b:29:7c:e8:ed:1e:1f:cd:3c:f3:39:f8:75:5e:e8:39:76:
         f3:be:71:5c:5d:4a:93:c4:1b:7e:1d:29:3c:e7:6b:d8:1d:58:
         ca:fb:9f:e1:d6:8e:f0:48:69:6a:e5:91:95:89:db:0d:8d:91:
         4d:e5:35:1f:e2:01:48:dc:9d:6a:e7:ec:16:2e:7e:7b:59:fa:
         55:87:e9:42:35:e6:55:a8:e0:52:c6:35:6f:30:95:cf:a6:de:
         1f:22:39:df:eb:7e:f1:d4:46:2a:22:40:46:df:4f:ba:5f:c7:
         f6:fb:69:5a:11:9f:f4:cd:c9:cd:63:0d:6e:b2:f0:15:3d:ce:
         49:4a:b8:3c:50:43:11:7b:88:55:b8:cf:0f:b1:48:90:3d:a1:
         29:4a:62:5b:e5:ef:37:c8:73:94:fa:02:4d:55:3e:5a:03:37:
         f6:95:04:3b:8e:b7:75:b5:04:ed:f2:3e:95:14:15:83:14:f4:
         f9:9f:63:4e:3c:a8:fc:3a:91:f8:dc:0b:23:e6:75:9d:7b:e4:
         cd:30:8a:96:4e:2d:5d:84:5b:ee:4e:5c:4f:10:d9:8c:3e:f2:
         6d:c7:b5:2c:47:11:6e:d2:a7:84:de:41:b9:7b:3e:33:7f:9f:
         1e:83:19:7c:9d:b2:59:10:fb:ca:48:aa:37:22:be:a6:07:56:
         82:e8:d5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:34:45 2025 by rpki-client