Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa
File:                     323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa (raw, json)
Hash identifier:          14wQJ+yspPaae8ltY/fDflCfTQYGJZ68MyueBpyH/Mo=
Subject key identifier:   F9:97:C0:8F:C2:FD:CE:FF:6C:10:07:84:72:91:9A:59:27:0B:0B:0F
Certificate issuer:       /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial:       6C2D7FA8AB3F6A6EE0624FCD94192E6FADA5D7C3
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa
Signing time:             Mon 06 Jan 2025 18:44:01 +0000
ROA not before:           Mon 06 Jan 2025 18:39:01 +0000
ROA not after:            Mon 05 Jan 2026 18:44:01 +0000
asID:                     263320
IP address blocks:        2804:143c:ff00::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
                          rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2d:7f:a8:ab:3f:6a:6e:e0:62:4f:cd:94:19:2e:6f:ad:a5:d7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
        Validity
            Not Before: Jan  6 18:39:01 2025 GMT
            Not After : Jan  5 18:44:01 2026 GMT
        Subject: CN=F997C08FC2FDCEFF6C10078472919A59270B0B0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:27:9a:c7:85:41:cb:a8:69:6a:91:fd:6d:
                    a7:36:77:5e:e5:ec:d0:be:f5:70:9b:e6:e1:ec:23:
                    27:ff:66:7f:3b:d8:26:44:16:d2:c7:55:71:bc:cb:
                    b2:8f:12:06:d1:fe:06:68:1f:16:26:34:4d:26:46:
                    51:20:70:30:d7:75:c7:9b:87:53:8a:06:86:5e:be:
                    86:74:9e:1d:b5:98:4f:a0:37:b5:c0:d4:2b:d8:0f:
                    d0:89:8b:67:08:ec:10:44:7c:5d:f0:d5:d8:9a:6e:
                    ea:46:dc:5a:d1:69:03:1a:26:bd:4d:e3:5e:a7:ed:
                    df:d4:47:1b:c0:42:6c:cb:c4:ac:9c:0f:bc:33:20:
                    be:47:b5:78:5b:8d:b7:c1:01:9a:1f:a4:c6:92:81:
                    68:cc:2f:06:85:d5:6a:94:d0:ff:c3:df:76:e8:94:
                    0e:f0:53:4d:9e:ee:48:c9:6c:e6:98:d1:e9:16:9a:
                    12:d5:c5:5f:ba:74:d6:9b:83:6b:a0:94:6b:03:a4:
                    df:e2:7c:bb:c2:5c:c1:28:04:5c:b0:0a:31:42:44:
                    6d:46:9b:9a:b3:e0:4a:3c:f1:1c:3c:12:b5:ed:a2:
                    66:7e:71:f4:f6:ad:c7:38:ed:f2:9e:5a:fa:cb:cd:
                    8c:79:16:5b:a4:e4:b9:38:16:8d:ed:87:ef:d9:1c:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:C0:8F:C2:FD:CE:FF:6C:10:07:84:72:91:9A:59:27:0B:0B:0F
            X509v3 Authority Key Identifier:
                keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:143c:ff00::/44

    Signature Algorithm: sha256WithRSAEncryption
         89:6b:12:4d:33:62:37:3e:37:01:24:d3:b3:ce:56:6c:ac:1b:
         87:46:b8:0f:d7:7f:6b:b4:03:15:a5:2a:b3:98:70:8b:99:53:
         df:a8:a8:95:65:5e:9f:b0:db:9d:9c:41:41:b0:7e:3c:91:31:
         86:f4:c8:65:4f:53:5b:8f:07:88:df:76:75:3d:e9:c8:93:c0:
         28:ec:1c:23:53:ed:16:81:91:3b:29:f6:d3:9e:2f:2d:2c:3a:
         4b:14:df:19:4c:33:e7:62:78:0b:d7:e9:30:61:ef:c4:3f:83:
         b7:ec:e6:1a:77:c9:40:13:14:27:b0:96:9f:cb:fb:e5:83:64:
         de:7e:77:a0:c9:d3:95:e9:1c:5a:78:e1:bf:96:dd:fa:a3:47:
         d5:b9:5e:ec:72:68:94:78:80:fa:6f:dd:5b:7c:a9:b0:75:71:
         c4:00:69:87:f8:55:85:13:9c:b7:49:4e:ad:e7:20:13:19:23:
         7b:82:ab:4a:0e:e4:82:ab:ee:0a:46:46:ce:57:ed:38:33:ce:
         bd:d5:3d:f4:1b:43:cf:cc:08:11:96:78:a8:ec:51:fd:ab:54:
         24:55:48:9b:b4:43:ff:cc:cb:30:00:13:4e:61:84:e9:08:77:
         3b:48:0c:2f:31:0a:1b:82:dd:42:0e:8a:31:3f:29:96:20:e9:
         1d:04:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:50:23 2025 by rpki-client