Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/323830343a346363343a3a2f33322d3438203d3e20323637333930.roa
File:                     323830343a346363343a3a2f33322d3438203d3e20323637333930.roa (raw, json)
Hash identifier:          FnQM9Oa7Bm6aqpy7D0LGliznb3yEcWcsCQLKG81NwSU=
Subject key identifier:   3A:DB:69:1D:3B:E7:58:F6:7A:E7:1C:05:87:D8:60:3C:9B:7F:3E:25
Certificate issuer:       /CN=66DCAA5522EEEC15CC978DE673986E897244B698
Certificate serial:       0784A1CF1F0E642D5584E0F7349163E502A1A5D2
Authority key identifier: 66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/323830343a346363343a3a2f33322d3438203d3e20323637333930.roa
Signing time:             Mon 06 May 2024 13:49:54 +0000
ROA not before:           Mon 06 May 2024 13:44:54 +0000
ROA not after:            Mon 05 May 2025 13:49:54 +0000
asID:                     267390
IP address blocks:        2804:4cc4::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl
                          rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 12:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:84:a1:cf:1f:0e:64:2d:55:84:e0:f7:34:91:63:e5:02:a1:a5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66DCAA5522EEEC15CC978DE673986E897244B698
        Validity
            Not Before: May  6 13:44:54 2024 GMT
            Not After : May  5 13:49:54 2025 GMT
        Subject: CN=3ADB691D3BE758F67AE71C0587D8603C9B7F3E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6b:88:ab:f2:7d:b9:86:b6:25:2d:3c:9d:3a:
                    6c:97:6a:e9:80:05:57:99:d1:20:a6:cb:16:d3:4b:
                    ca:7c:55:e1:5b:f5:db:2f:b6:8e:8f:02:34:92:8c:
                    f5:bc:1d:6b:b2:c3:8a:c5:d0:b9:7f:06:8c:a2:68:
                    63:24:96:55:da:c9:c5:ec:4c:1b:43:06:d6:dc:99:
                    4a:4c:de:9f:ba:ff:72:fd:a8:f0:23:af:60:d5:5c:
                    25:c6:10:95:e3:93:1c:00:c9:4a:15:e9:80:18:e7:
                    4b:2e:12:8b:43:de:9f:b3:f3:be:e9:12:fb:19:97:
                    56:28:4c:48:70:a4:b1:ca:a8:37:2e:2a:30:ce:f8:
                    87:e4:c1:42:22:4d:99:57:ac:e0:c7:64:4c:83:5c:
                    e6:55:f0:46:04:05:d7:84:83:8a:7b:aa:12:a6:c0:
                    02:29:13:66:93:31:84:31:45:cd:3b:f9:b4:0d:d8:
                    7d:21:a5:bb:50:e9:bb:75:38:de:58:5d:13:5c:8e:
                    da:8a:e6:ae:2a:e6:2b:6c:5e:81:c8:cc:50:ac:69:
                    ec:7e:83:92:92:20:e3:87:e0:5f:dc:82:68:af:d5:
                    46:c7:34:0a:ab:fe:9c:71:31:2e:82:75:63:73:74:
                    cc:70:0c:a1:06:dd:b5:ab:08:ea:b0:09:26:17:e0:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DB:69:1D:3B:E7:58:F6:7A:E7:1C:05:87:D8:60:3C:9B:7F:3E:25
            X509v3 Authority Key Identifier:
                keyid:66:DC:AA:55:22:EE:EC:15:CC:97:8D:E6:73:98:6E:89:72:44:B6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/66DCAA5522EEEC15CC978DE673986E897244B698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/66DCAA5522EEEC15CC978DE673986E897244B698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4hFQuzMRWocs3CsoQC8rkFBEvFyzsbC75j2YyvUYNVbk/0/323830343a346363343a3a2f33322d3438203d3e20323637333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:64:5d:d5:d7:0f:21:9f:62:fd:3d:eb:49:b9:ff:b0:f8:98:
         d0:6e:dc:7a:f4:bd:00:54:8f:25:b1:b8:7c:26:fc:58:b5:92:
         a2:39:58:be:ec:9b:5f:2b:ee:a8:79:7a:3a:26:e4:7a:c0:12:
         95:72:1e:74:b2:59:11:63:08:95:ef:22:93:96:63:ea:7d:9d:
         95:64:3d:72:d3:d8:96:b9:2a:d0:6a:d3:50:f3:2e:68:0c:b1:
         ef:db:c4:91:9c:19:0f:2e:74:05:af:4c:ea:53:93:a3:6d:ce:
         bf:1d:2b:91:a1:3a:9a:5a:c0:9c:23:b9:7f:3e:69:d0:ec:a9:
         0f:45:60:8f:d4:5f:51:1c:f6:0f:8b:ee:ae:29:2e:71:14:70:
         16:af:9c:17:bc:15:60:9b:a6:47:7b:f6:da:23:02:b9:5d:36:
         c9:f7:f9:ea:73:4d:1a:81:02:59:f4:ce:cf:11:7c:e7:ee:ea:
         2e:2e:77:f1:60:a5:7f:41:51:e7:e5:7f:35:e9:2e:97:0c:b6:
         9b:f7:fd:1c:8a:60:0a:0e:cd:38:ef:af:8c:5a:af:6c:26:96:
         48:e7:0a:cd:87:d3:8e:c1:11:1e:9c:bc:41:55:e0:e9:f2:69:
         42:c5:ce:eb:9a:8c:77:79:dd:49:ef:8a:2d:94:0a:19:52:a8:
         0b:61:11:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:53 2025 by rpki-client