Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33332d3333203d3e20323633393230.roa
File:                     323830343a323763303a383030303a3a2f33332d3333203d3e20323633393230.roa (raw, json)
Hash identifier:          9UwLiF5OKZ3uc65jVmy9DDJ1aJCDtEO7fbCsrGT9dCc=
Subject key identifier:   97:6F:7A:2D:8D:B7:27:63:94:DD:04:51:DB:53:5A:A2:D5:8C:B5:9E
Certificate issuer:       /CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
Certificate serial:       3D558FB2EE6A952CD04E5BC4907ADE5AD8EE9CD3
Authority key identifier: CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33332d3333203d3e20323633393230.roa
Signing time:             Tue 15 Apr 2025 01:57:08 +0000
ROA not before:           Tue 15 Apr 2025 01:52:08 +0000
ROA not after:            Tue 14 Apr 2026 01:57:08 +0000
asID:                     263920
IP address blocks:        2804:27c0:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl
                          rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 16:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:55:8f:b2:ee:6a:95:2c:d0:4e:5b:c4:90:7a:de:5a:d8:ee:9c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE122135E9291251C3E65EDC261A4CC410CF3BD5
        Validity
            Not Before: Apr 15 01:52:08 2025 GMT
            Not After : Apr 14 01:57:08 2026 GMT
        Subject: CN=976F7A2D8DB7276394DD0451DB535AA2D58CB59E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:21:ae:11:0d:b0:01:45:5e:ff:71:20:05:10:
                    7e:6b:a0:c6:12:13:c6:53:1d:17:75:c7:f0:cb:dd:
                    93:ad:2b:de:68:b4:f6:db:0f:b2:6f:88:b4:ac:c0:
                    7e:63:41:7b:2e:0b:dc:04:3a:3f:6e:9a:d7:f5:9a:
                    6f:6e:5b:27:20:e4:35:10:49:69:99:bc:6b:37:bb:
                    bb:69:fc:00:95:dd:4a:5e:ef:42:82:7f:2f:64:07:
                    9c:a3:8b:c0:59:87:28:8c:38:05:8e:32:aa:52:e2:
                    00:ae:42:94:e4:7d:9f:1c:6c:9e:a0:c2:4b:ed:00:
                    41:14:94:48:d2:97:48:5b:e5:21:42:08:19:72:1d:
                    63:3e:20:46:b1:45:8b:af:ac:ad:0d:4c:a5:e1:7a:
                    88:1c:01:a8:52:60:32:3d:ec:82:65:e4:12:35:46:
                    c8:7a:20:4d:0a:93:91:7b:70:4d:1d:81:39:ec:fa:
                    b4:28:76:a3:26:aa:c5:a8:64:24:e4:a8:6d:71:1b:
                    2b:0a:3b:55:7c:cb:97:21:67:f9:07:d3:10:85:4b:
                    66:68:e2:04:f7:92:b9:e4:4a:77:b8:69:d3:a6:d2:
                    ea:f4:49:98:ad:14:1c:d1:0a:f4:10:dc:35:fe:b7:
                    75:3a:46:b6:a1:e9:64:3a:be:0a:93:89:0c:cf:f0:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6F:7A:2D:8D:B7:27:63:94:DD:04:51:DB:53:5A:A2:D5:8C:B5:9E
            X509v3 Authority Key Identifier:
                keyid:CE:12:21:35:E9:29:12:51:C3:E6:5E:DC:26:1A:4C:C4:10:CF:3B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/CE122135E9291251C3E65EDC261A4CC410CF3BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CE122135E9291251C3E65EDC261A4CC410CF3BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EF72MJe18spBAbLNVDuc6B3BipCfNKntQNwuhZAwe88o/0/323830343a323763303a383030303a3a2f33332d3333203d3e20323633393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:6b:0a:d6:0c:1a:55:d9:45:40:1b:69:d5:49:77:e3:75:b9:
         aa:e0:a1:d9:3a:1c:ff:c1:b4:d1:fa:6f:cb:83:07:44:7d:b4:
         f8:b4:f1:21:07:06:8e:3f:fd:d8:84:3b:77:9f:23:7a:95:fa:
         d7:5a:98:bd:93:7e:63:85:91:6b:c3:89:da:5f:52:e7:2c:66:
         e0:1c:f1:94:a6:85:20:89:16:b1:06:8b:03:02:b5:87:9b:b4:
         0f:57:3f:c6:b2:8c:00:ed:49:01:d5:a3:72:cf:6f:2a:4f:e9:
         ab:ed:e0:19:b9:89:69:df:78:ab:e4:c6:60:9d:20:01:70:d5:
         e4:88:17:f2:5a:ff:c9:bf:63:95:a5:be:0f:4e:0d:03:f9:b2:
         a3:32:7c:90:c3:ab:a3:29:cf:e5:a0:36:27:2b:f1:08:1d:dd:
         2a:af:d2:8a:dd:e7:f0:ac:15:c7:27:ff:73:cf:55:8a:95:06:
         75:17:8d:dc:81:da:ac:d6:8b:15:43:0c:32:d0:80:d5:67:49:
         a3:88:49:6c:2b:77:2d:fd:26:5a:e8:f7:20:b4:83:8d:d5:33:
         5c:68:96:7c:7b:16:1c:b7:da:30:24:7b:6e:a3:c7:7a:0b:19:
         50:4b:92:9f:d3:8d:b2:4b:ce:3e:e6:64:13:8d:66:67:8c:31:
         f2:50:0b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:12:13 2025 by rpki-client