Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa
File:                     323830343a343032343a3a2f33322d3438203d3e20323635393337.roa (raw, json)
Hash identifier:          V7TwoOWKUSWc+0Haj+CkU0bEHi8dKEltSEF5YYdLQ1s=
Subject key identifier:   44:A9:69:C4:93:2D:D3:BD:CB:B3:2E:F4:62:BF:D3:CB:91:38:E1:83
Certificate issuer:       /CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
Certificate serial:       74549B445407C0CD6BAC596BBA7C8D55FE535AA6
Authority key identifier: 7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa
Signing time:             Thu 06 Mar 2025 09:16:58 +0000
ROA not before:           Thu 06 Mar 2025 09:11:58 +0000
ROA not after:            Thu 05 Mar 2026 09:16:58 +0000
asID:                     265937
IP address blocks:        2804:4024::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl
                          rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 13 Apr 2025 11:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:54:9b:44:54:07:c0:cd:6b:ac:59:6b:ba:7c:8d:55:fe:53:5a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326
        Validity
            Not Before: Mar  6 09:11:58 2025 GMT
            Not After : Mar  5 09:16:58 2026 GMT
        Subject: CN=44A969C4932DD3BDCBB32EF462BFD3CB9138E183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:92:77:6e:84:fc:bd:2e:97:1e:e2:5f:11:
                    55:2f:0d:e7:71:7e:ef:54:41:b9:59:ce:cf:cd:06:
                    d8:4c:51:73:40:91:c3:12:3f:e8:48:b1:1a:82:a4:
                    fd:cd:12:9a:9c:ac:e1:d8:58:1c:c0:89:1d:92:57:
                    4a:06:b5:3f:7f:4c:46:d6:9d:b4:ff:e5:28:15:84:
                    75:ac:10:c6:51:f2:58:89:33:24:07:ed:88:2c:a9:
                    60:7f:22:e6:78:29:6e:34:3a:8c:09:6b:82:cc:5c:
                    39:0e:f1:49:8a:86:34:5c:a5:d3:1d:5f:3a:86:37:
                    e8:4c:90:78:76:d3:47:de:dd:86:7b:9d:e9:74:21:
                    ed:28:9b:ab:9d:05:f7:cf:09:e2:1a:2f:0d:df:ce:
                    e7:12:61:3a:a5:e0:b8:1c:6b:f5:14:39:eb:14:bf:
                    98:90:49:48:16:f6:f3:ad:ea:8e:27:27:76:be:75:
                    61:5a:71:c0:ce:d8:89:63:93:b7:f8:5c:fb:33:d8:
                    6d:93:d6:d3:32:d5:e4:39:4b:f9:0f:3a:1e:e2:38:
                    df:1a:fc:83:1a:de:97:d8:33:71:c3:e0:b6:50:6f:
                    26:53:8b:6f:fc:ee:57:bd:06:b9:b2:1d:7c:64:2d:
                    bc:df:12:1d:87:5e:77:c6:9d:d8:74:dd:dc:03:b0:
                    44:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A9:69:C4:93:2D:D3:BD:CB:B3:2E:F4:62:BF:D3:CB:91:38:E1:83
            X509v3 Authority Key Identifier:
                keyid:7E:06:F0:AD:6C:3D:CC:EE:31:9A:92:B1:30:6C:4C:4D:DD:99:23:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7E06F0AD6C3DCCEE319A92B1306C4C4DDD992326.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2nQq7qfL1f4fjaU4jxT7vT6Y2kamm1p2kt2kXzCo6pA3/1/323830343a343032343a3a2f33322d3438203d3e20323635393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4024::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:4b:47:3b:26:c7:c8:51:87:e2:05:41:6a:cd:66:0b:2d:
         65:b8:36:6e:1e:3c:60:4a:6e:7a:b8:dd:57:cc:3c:bc:6f:3e:
         b6:f6:12:e1:b8:6e:e7:38:74:72:67:b4:d0:5f:d0:ca:d9:e7:
         4c:c9:10:e7:39:4e:51:b9:27:7b:e1:5a:60:a7:72:a4:42:8c:
         a7:bf:a6:12:94:13:93:01:67:50:c6:7b:ca:68:3c:da:c0:63:
         08:6d:40:4e:1e:94:f4:8b:11:32:98:3d:d0:22:f3:bf:99:04:
         6b:c7:22:40:69:73:c7:ea:f4:58:e6:0e:e2:6d:b5:ff:25:ec:
         ba:64:5c:62:e6:cc:1f:7e:59:9a:d9:64:f6:9c:84:d1:d6:a0:
         90:f8:5e:01:4e:66:c6:cb:4b:cf:79:15:3d:f8:71:59:e9:ef:
         e4:56:fb:05:42:fd:d0:54:fd:1b:9f:77:2c:1a:20:4b:27:20:
         f5:e5:93:5e:b0:9d:db:8e:c6:31:57:72:70:02:13:4b:1f:76:
         d1:3b:ba:08:ed:05:fa:19:ff:54:33:00:61:08:05:04:56:5d:
         fb:87:6f:41:8e:e8:f0:b6:28:fc:80:5c:b6:23:6d:79:75:23:
         7c:80:b5:22:5e:a8:ef:45:50:e5:19:aa:34:d3:38:0f:15:52:
         4e:c3:06:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:55:27 2025 by rpki-client