Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
File:                     323830343a346132633a3a2f33322d3438203d3e20323637323232.roa (raw, json)
Hash identifier:          K65c6CQDYmeBQFWU/ufGUImXBQEHhvkmt5bgL91Dh7s=
Subject key identifier:   FC:B7:55:B0:8D:58:54:34:57:87:3D:40:79:95:BA:B1:E8:48:9C:11
Certificate issuer:       /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial:       246931E79EBE2DBFF233BD50539AA0259F3A8848
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa
Signing time:             Thu 06 Mar 2025 09:21:54 +0000
ROA not before:           Thu 06 Mar 2025 09:16:54 +0000
ROA not after:            Thu 05 Mar 2026 09:21:54 +0000
asID:                     267222
IP address blocks:        2804:4a2c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
                          rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 10:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:69:31:e7:9e:be:2d:bf:f2:33:bd:50:53:9a:a0:25:9f:3a:88:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
        Validity
            Not Before: Mar  6 09:16:54 2025 GMT
            Not After : Mar  5 09:21:54 2026 GMT
        Subject: CN=FCB755B08D58543457873D407995BAB1E8489C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:93:fc:98:a7:41:0a:63:cb:56:7d:7f:fc:6a:
                    44:f6:80:b2:88:26:c5:e3:d7:37:df:35:d2:30:3a:
                    6a:f1:e2:b3:69:d5:61:ff:fe:46:d8:06:46:e8:88:
                    44:9c:5b:92:1f:3a:a9:fa:55:19:8d:e9:e8:fe:7a:
                    e2:28:33:8b:f2:2e:e7:c5:d8:fc:3d:60:80:7c:24:
                    34:30:0b:ba:66:87:3c:ae:2c:cd:b5:fa:6e:cd:1a:
                    9d:53:b0:83:6f:e2:4b:73:fa:fe:d7:83:be:2f:87:
                    4d:76:b6:3d:5d:cc:11:6f:4a:24:a3:91:5b:d0:e7:
                    12:a1:e7:ef:ae:67:b6:b5:78:37:26:67:b4:ff:ba:
                    28:1a:f4:19:48:17:4a:61:76:f8:5c:26:64:bd:de:
                    25:b6:ca:26:3b:28:20:b1:98:5c:4d:0c:9c:78:f5:
                    ec:3b:72:ae:12:3e:0f:7d:ce:c7:0a:c4:9a:1f:90:
                    e4:4a:fa:d0:61:e0:aa:cd:1e:ff:ac:e7:03:7e:2c:
                    be:8d:5c:c4:79:6a:b2:a5:c4:f6:72:66:b2:2f:61:
                    e7:ab:79:31:f3:01:cb:b5:28:7c:c6:d4:a4:2a:31:
                    ff:ef:54:62:7b:7d:16:dd:fe:a8:7e:b1:ab:2b:92:
                    e5:b9:f1:54:51:21:f2:e4:44:d3:f2:43:0a:a6:5b:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B7:55:B0:8D:58:54:34:57:87:3D:40:79:95:BA:B1:E8:48:9C:11
            X509v3 Authority Key Identifier:
                keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/323830343a346132633a3a2f33322d3438203d3e20323637323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:e4:c4:13:28:ec:51:e4:cf:bc:c7:8a:98:fa:2f:a9:ac:
         47:e6:28:df:3c:21:80:85:1f:21:f5:88:8f:4b:21:2e:1c:a4:
         00:9b:38:b0:33:a7:af:db:74:3b:f4:30:1e:67:4b:91:94:45:
         85:c7:da:8c:99:ef:97:d4:8e:97:7a:e2:94:e4:9d:e8:7e:fc:
         0f:90:e8:45:a9:41:98:c6:76:cc:c7:dd:4b:b9:b7:41:ac:b3:
         d7:39:1a:05:f3:fc:db:fc:99:3d:d0:04:f5:a1:06:38:ff:dd:
         9a:53:5e:88:ea:36:27:90:0d:f2:ad:01:1e:90:64:1a:07:d9:
         6a:00:28:54:16:bc:11:08:0f:69:e6:62:08:aa:ad:b4:5e:95:
         5e:4c:48:f2:3e:11:69:21:d4:00:60:ea:70:5f:ad:c2:65:c7:
         b5:2e:2d:01:49:e8:a3:76:9c:0f:6e:b3:64:4b:c1:46:40:3a:
         d8:6a:ca:ad:1d:40:56:2c:b3:33:88:4f:b4:7d:2a:4e:ec:fa:
         f5:46:14:db:97:13:33:4e:09:e7:66:62:12:cd:f0:7c:15:af:
         65:a0:d9:72:ea:a1:5a:b8:26:10:dc:ff:2c:8b:60:76:3c:65:
         66:ae:07:4e:a0:11:c2:84:67:d0:3e:42:ff:3a:8e:00:2f:35:
         05:13:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:10:57 2025 by rpki-client