Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33332d3333203d3e20323633333230.roa
File:                     323830343a313433633a3a2f33332d3333203d3e20323633333230.roa (raw, json)
Hash identifier:          TLSyPFFbcrI0Peikt4mr2TC8ZFmsHOBt/7jRSr+dkak=
Subject key identifier:   A2:69:EF:B6:9D:51:84:C2:F8:86:96:AF:D9:3E:B1:58:CC:9B:0C:4F
Certificate issuer:       /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial:       1421552F688BA92EE88386693D9FF43E8F456DA9
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33332d3333203d3e20323633333230.roa
Signing time:             Mon 06 Jan 2025 18:43:00 +0000
ROA not before:           Mon 06 Jan 2025 18:38:00 +0000
ROA not after:            Mon 05 Jan 2026 18:43:00 +0000
asID:                     263320
IP address blocks:        2804:143c::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
                          rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:21:55:2f:68:8b:a9:2e:e8:83:86:69:3d:9f:f4:3e:8f:45:6d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
        Validity
            Not Before: Jan  6 18:38:00 2025 GMT
            Not After : Jan  5 18:43:00 2026 GMT
        Subject: CN=A269EFB69D5184C2F88696AFD93EB158CC9B0C4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:e7:1c:f6:2f:62:cf:90:d4:f0:26:f9:7f:
                    c0:d8:f1:68:06:81:29:02:f0:b6:b8:75:a5:1b:33:
                    60:91:02:dc:0d:82:7a:ea:c4:33:af:7a:f8:63:15:
                    cd:f3:98:24:1f:93:04:40:ee:3a:44:94:f1:5c:d4:
                    a7:88:db:f3:d1:bf:ef:35:b8:63:70:10:79:90:49:
                    d6:96:06:79:dd:2f:0a:54:ec:20:33:36:0e:8a:04:
                    63:44:da:38:ab:ce:6f:37:7e:35:93:3c:fb:10:59:
                    58:f8:14:5f:be:e4:33:48:00:5c:23:53:bd:cf:10:
                    9a:3e:11:be:1e:31:12:9a:a4:4e:28:57:3f:c0:56:
                    8d:fe:50:10:56:4a:9a:c8:1d:2e:1c:0c:ff:08:f8:
                    1c:78:72:d4:69:7d:61:13:d7:00:df:d9:0a:e8:0d:
                    41:fc:db:2a:de:d7:d9:38:e9:8a:7d:8a:d6:2f:25:
                    61:0f:0c:4d:7a:b5:26:86:1d:22:0f:dc:62:e7:9f:
                    8d:ad:7a:14:22:fb:dc:0a:73:b9:70:5b:7b:cd:d3:
                    d3:21:29:36:7b:9d:8d:4f:ca:26:03:fe:09:c7:13:
                    92:9d:ac:2b:38:5c:d5:11:38:b9:0b:3e:e9:fb:a4:
                    6b:2f:1b:94:6e:c1:96:f0:1e:f3:0e:75:b8:ce:02:
                    ed:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:69:EF:B6:9D:51:84:C2:F8:86:96:AF:D9:3E:B1:58:CC:9B:0C:4F
            X509v3 Authority Key Identifier:
                keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33332d3333203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:143c::/33

    Signature Algorithm: sha256WithRSAEncryption
         a6:fc:14:31:99:7d:e1:4a:b9:69:77:69:b8:71:1b:cd:86:7e:
         07:cd:0c:4a:71:f6:53:e0:77:7b:fd:db:af:d3:90:2c:d5:7c:
         dc:e5:d7:75:dc:7a:5c:09:70:3b:d6:b8:9f:7d:07:06:23:57:
         f3:7f:44:90:31:75:2d:0d:7f:d1:10:f2:8b:c9:49:7e:b0:60:
         a9:7b:49:7b:fb:35:d5:fd:34:4b:d7:3f:12:ec:64:a5:6b:9f:
         b3:4c:36:fe:70:cb:60:51:3f:0d:29:cc:42:05:3c:7f:e0:30:
         ab:32:b2:f3:58:34:1d:ee:15:02:2e:30:37:d6:a8:88:60:15:
         f6:ea:b8:9b:b4:19:c7:2f:38:d5:eb:b7:16:71:61:03:32:10:
         73:24:40:f1:13:93:a2:df:79:36:c6:83:66:b5:d7:cd:37:b2:
         9a:4d:a3:b6:e5:33:95:33:22:e5:2a:af:7e:3e:5c:29:c7:2f:
         fa:d9:3d:ac:8e:09:b5:8d:56:bf:d7:b9:4c:83:18:a8:f2:a9:
         72:34:84:d8:d1:7b:db:14:ec:ae:1e:2f:a1:e1:53:bc:9b:5e:
         46:c9:45:4e:51:36:37:15:46:de:21:89:0d:70:12:9b:5b:8e:
         20:76:5c:72:1a:6b:19:d5:40:28:35:3b:0e:86:6c:0f:fc:f8:
         54:58:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:39:07 2025 by rpki-client