Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a633030303a3a2f33342d3334203d3e20323731303530.roa
File:                     323830343a373537633a633030303a3a2f33342d3334203d3e20323731303530.roa (raw, json)
Hash identifier:          ANtWPLny+JiqdYoyAa1BOgpCo2dOE5R3fa0pCgg9hhI=
Subject key identifier:   33:17:7E:49:49:11:1A:8C:41:94:13:AB:9A:D3:8C:7B:D4:2A:8C:A9
Certificate issuer:       /CN=77FC05774545175D19D108F204EAE421372252B0
Certificate serial:       2DC0F047F75B3713D525B645CEA039069AE5BC0D
Authority key identifier: 77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a633030303a3a2f33342d3334203d3e20323731303530.roa
Signing time:             Thu 05 Jun 2025 16:12:28 +0000
ROA not before:           Thu 05 Jun 2025 16:07:28 +0000
ROA not after:            Thu 04 Jun 2026 16:12:28 +0000
asID:                     271050
IP address blocks:        2804:757c:c000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl
                          rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 17 Jun 2025 13:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c0:f0:47:f7:5b:37:13:d5:25:b6:45:ce:a0:39:06:9a:e5:bc:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77FC05774545175D19D108F204EAE421372252B0
        Validity
            Not Before: Jun  5 16:07:28 2025 GMT
            Not After : Jun  4 16:12:28 2026 GMT
        Subject: CN=33177E4949111A8C419413AB9AD38C7BD42A8CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:42:76:d1:59:b2:d4:e1:11:21:fb:25:67:
                    ea:19:52:4c:0d:a9:c9:05:c3:5d:f0:f1:a4:b8:58:
                    f1:29:d3:1c:fe:2c:af:4c:96:b0:33:16:f4:96:13:
                    f2:b1:94:84:6f:e5:49:d7:c6:1d:cb:56:01:10:8e:
                    74:1f:cf:69:47:d2:80:c3:a4:19:48:02:9e:67:c5:
                    3d:9b:58:fa:18:9d:c3:53:d7:b6:5e:e8:a9:0d:e4:
                    8a:40:41:c5:de:1f:e0:80:46:ad:50:af:c4:b1:c5:
                    30:c0:db:0c:d5:75:8e:48:19:24:03:42:04:c1:a3:
                    85:c4:99:a7:a5:15:c9:1e:da:dd:ae:c3:a9:f5:4b:
                    b6:3f:2d:bc:63:a2:41:41:a1:39:71:e0:4b:16:a8:
                    4c:32:ff:40:02:04:f7:06:00:d5:ae:2a:cd:08:11:
                    1c:2d:e1:57:05:8f:a6:7f:71:8f:fd:e5:c4:18:6e:
                    0f:a5:79:89:8b:ba:ea:11:bd:ae:8f:70:57:e7:42:
                    7f:8d:50:f6:b9:16:d5:9d:c8:d1:a2:db:7e:d3:02:
                    9a:9e:86:b2:ce:76:fc:be:21:59:22:a8:4e:18:d5:
                    69:ee:37:b7:fe:ad:fd:29:72:60:76:7f:67:2f:c9:
                    f9:15:7d:ca:b9:f4:6b:00:1f:5e:64:64:bf:21:e3:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:17:7E:49:49:11:1A:8C:41:94:13:AB:9A:D3:8C:7B:D4:2A:8C:A9
            X509v3 Authority Key Identifier:
                keyid:77:FC:05:77:45:45:17:5D:19:D1:08:F2:04:EA:E4:21:37:22:52:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/77FC05774545175D19D108F204EAE421372252B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/77FC05774545175D19D108F204EAE421372252B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5EhPwFaFMworcpiZuKkQUsrnM1GRqABqJ4DExAmBbKsL/0/323830343a373537633a633030303a3a2f33342d3334203d3e20323731303530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:757c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3d:71:01:95:32:dd:25:41:a6:3c:d4:df:26:36:71:72:ce:79:
         11:97:98:2e:63:f8:5a:42:60:c9:e7:09:b0:76:28:4b:fc:7e:
         b9:76:fe:66:5f:00:79:88:f1:af:7d:e0:0c:99:2f:d9:18:1b:
         63:22:8b:d6:1d:36:25:f2:fd:ca:36:24:8a:fe:28:17:9d:ee:
         cf:5b:0a:38:7f:e5:2d:d2:35:a3:7d:3f:10:1b:5e:fe:fe:bb:
         5a:0b:f6:07:f5:42:3f:52:3d:51:52:9d:3d:d6:f5:3c:f4:20:
         dd:5a:17:87:0d:73:98:ba:62:37:58:3b:e5:dc:36:61:14:70:
         0e:fb:22:6a:9b:fc:bf:6a:61:3a:8a:77:56:3c:61:51:b3:8c:
         ce:b0:d8:cc:99:6a:f6:2f:d9:ea:21:b1:59:e3:75:03:4c:74:
         70:34:c6:f0:f6:59:ba:e7:37:70:b2:d7:c3:8a:e5:8e:3d:18:
         35:da:f8:60:c8:33:e7:0e:12:c3:f4:83:cc:02:dc:92:58:e6:
         ba:68:e3:ff:ad:ac:d7:f1:4c:b4:cf:d8:a4:cc:78:92:22:a0:
         5d:8b:bc:6a:ff:2a:3a:5e:6c:c1:b0:68:8b:92:58:03:a3:01:
         3d:da:f5:be:c0:d5:a5:27:eb:db:6a:61:45:84:58:e5:61:1a:
         a1:c1:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:23:55 2025 by rpki-client