Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666638303a3a2f34342d3434203d3e20323633333230.roa
File:                     323830343a313433633a666638303a3a2f34342d3434203d3e20323633333230.roa (raw, json)
Hash identifier:          1w1EE2bxWM8P1mKfcZIpj1YZtt1qW10Yf2+Q1G///xg=
Subject key identifier:   8B:D9:96:FD:E3:F3:EE:CA:19:90:38:39:A4:6B:73:35:07:0C:1F:D0
Certificate issuer:       /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial:       5828E236F36DA4240461C83794E12C0584F95150
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666638303a3a2f34342d3434203d3e20323633333230.roa
Signing time:             Mon 06 Jan 2025 18:43:59 +0000
ROA not before:           Mon 06 Jan 2025 18:38:59 +0000
ROA not after:            Mon 05 Jan 2026 18:43:59 +0000
asID:                     263320
IP address blocks:        2804:143c:ff80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
                          rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 06 Apr 2025 05:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:28:e2:36:f3:6d:a4:24:04:61:c8:37:94:e1:2c:05:84:f9:51:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
        Validity
            Not Before: Jan  6 18:38:59 2025 GMT
            Not After : Jan  5 18:43:59 2026 GMT
        Subject: CN=8BD996FDE3F3EECA19903839A46B7335070C1FD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:40:bf:d3:18:f2:b5:fb:be:b4:5c:8c:b7:
                    1f:76:73:ed:f7:05:d5:9a:c0:ce:8b:49:39:e4:94:
                    b2:f4:c4:7a:89:23:36:94:40:46:ec:3f:79:cb:86:
                    86:f8:3c:15:fe:33:1c:d5:4d:8f:95:ef:2a:69:04:
                    24:43:ce:5c:af:df:e3:eb:80:df:45:e9:80:b2:f1:
                    21:0d:b2:3a:bf:c9:8a:ea:30:a0:02:74:2b:a7:04:
                    0b:83:76:64:f9:d3:28:82:33:a8:b4:fb:24:b6:01:
                    72:d3:fb:e9:7a:14:02:b1:14:af:5d:16:59:90:32:
                    24:17:1d:c8:2f:20:ca:24:c2:13:9e:67:f3:40:19:
                    75:ae:f8:15:10:8d:9b:5e:8c:b5:db:fc:a0:93:ca:
                    ff:84:d2:fa:e4:5b:fb:aa:cc:16:d7:ad:33:db:8b:
                    64:a2:d9:cd:80:bf:1c:07:eb:ec:6e:a8:f1:83:07:
                    ec:5a:ac:a3:a2:54:75:62:ec:1c:62:18:3c:5f:f4:
                    84:33:52:a4:7e:f9:c0:b6:79:4d:88:1d:93:52:3c:
                    db:7b:f2:f1:4b:12:ec:cd:ae:9a:bf:d1:58:fd:b8:
                    63:02:19:ae:b5:3c:dd:6f:21:32:68:dc:c4:da:c5:
                    5f:f5:79:9e:e0:bb:f8:be:be:62:5a:a1:b9:1e:67:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D9:96:FD:E3:F3:EE:CA:19:90:38:39:A4:6B:73:35:07:0C:1F:D0
            X509v3 Authority Key Identifier:
                keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666638303a3a2f34342d3434203d3e20323633333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:143c:ff80::/44

    Signature Algorithm: sha256WithRSAEncryption
         25:ef:96:d8:13:d9:c5:10:d8:07:3f:6f:fb:dc:e1:7e:51:08:
         18:85:f0:8e:1f:fc:e5:29:a8:b4:a5:75:49:4c:bf:1c:d2:7b:
         cc:02:39:af:8b:3b:74:08:72:91:84:4d:07:e3:23:69:f5:2f:
         57:6f:07:b8:2a:9e:fe:21:8e:ab:9d:d0:a8:eb:3c:58:4f:c8:
         7c:a4:12:19:18:58:12:77:37:44:c3:bd:87:c0:b8:21:86:bf:
         94:b4:6b:ed:7a:61:7e:89:1e:1d:09:c0:03:09:08:c4:44:99:
         3c:ab:15:e6:b3:f0:ad:dc:30:a5:5f:fb:ac:c4:2e:73:4e:95:
         85:02:48:24:e7:e6:0c:29:f1:c0:35:42:0d:f2:69:ef:d0:1c:
         02:5f:2f:11:48:31:bb:06:2f:15:04:a6:fc:b1:e9:ad:42:78:
         00:a0:20:34:90:9f:c3:bb:d0:7a:15:5a:88:f2:29:4c:55:10:
         d9:b5:d5:4b:d4:2b:f7:45:1f:a5:0e:9f:1c:36:7e:c9:10:22:
         47:1c:2f:2e:a2:0e:47:c0:ff:d2:42:df:ae:c9:8e:25:d8:a9:
         cf:8d:7d:61:49:8c:72:fc:74:5e:7b:df:8e:7f:e7:be:f3:ff:
         dc:7d:19:59:76:42:8d:da:6b:00:1d:69:7f:9b:29:37:31:6e:
         bb:46:11:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:49:14 2025 by rpki-client