Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa
File:                     323830343a333964633a3a2f33322d3438203d3e20323636303535.roa (raw, json)
Hash identifier:          lVjQzNWaA6sgin+JcE6yIGp5pKVWTu71HlqWbMqLcRA=
Subject key identifier:   63:FF:B7:62:A3:77:44:B5:56:35:E7:14:19:F5:4F:69:85:6E:07:8E
Certificate issuer:       /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Certificate serial:       235F8364C8928217BE63C6C8F49BEBD8971B59B7
Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa
Signing time:             Sat 21 Dec 2024 16:18:18 +0000
ROA not before:           Sat 21 Dec 2024 16:13:18 +0000
ROA not after:            Sat 20 Dec 2025 16:18:18 +0000
asID:                     266055
IP address blocks:        2804:39dc::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl
                          rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:5f:83:64:c8:92:82:17:be:63:c6:c8:f4:9b:eb:d8:97:1b:59:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
        Validity
            Not Before: Dec 21 16:13:18 2024 GMT
            Not After : Dec 20 16:18:18 2025 GMT
        Subject: CN=63FFB762A37744B55635E71419F54F69856E078E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:b6:b1:f1:1b:07:9a:c6:af:70:2d:76:ee:
                    ea:ac:80:10:c7:a0:f6:a0:9c:c3:d0:12:85:64:f4:
                    c0:1f:33:c8:82:9e:cd:90:d4:97:f6:37:b9:24:cf:
                    03:e6:f2:9a:11:45:e8:d9:82:44:e6:8c:1f:61:de:
                    8d:31:5d:08:17:9d:3c:90:bb:8d:dd:e0:84:a8:43:
                    10:d3:06:e1:7e:71:2f:c7:e3:15:21:6e:f4:ca:a1:
                    b6:7e:cb:02:52:79:c4:32:e3:4c:7c:89:df:94:cb:
                    ea:60:b0:df:67:36:1d:de:d4:f0:48:b1:e6:9b:d4:
                    d5:3b:e1:a2:5b:d9:3f:cc:b0:da:ce:37:ce:8e:f4:
                    fd:1a:38:72:12:a8:fa:61:be:0d:45:1c:13:4a:90:
                    1d:64:f8:ff:e3:d6:f2:a3:57:51:b2:cd:05:63:2b:
                    0c:7a:0a:89:bb:4c:d3:94:80:22:91:d0:b8:b6:da:
                    49:11:2e:9b:a7:9b:e7:28:5f:45:2f:ee:16:4a:8a:
                    5f:e7:9d:37:19:5f:0f:b1:65:93:3d:00:eb:08:2c:
                    1d:14:27:14:90:49:e3:af:9b:be:04:bd:1e:8e:f9:
                    86:dc:9d:ca:d9:54:e3:b7:b9:8e:df:e4:74:9c:78:
                    d8:4c:a1:39:09:15:94:84:e0:b2:88:e5:77:93:0e:
                    0a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FF:B7:62:A3:77:44:B5:56:35:E7:14:19:F5:4F:69:85:6E:07:8E
            X509v3 Authority Key Identifier:
                keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/323830343a333964633a3a2f33322d3438203d3e20323636303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:b9:66:be:b3:5c:e0:ad:3e:1b:c1:2d:7c:57:53:43:99:b9:
         7a:dc:24:1c:3d:62:76:98:42:8b:dc:75:55:a8:e9:50:ba:b5:
         9e:b6:b2:f6:9c:a4:00:b1:57:6a:42:f7:ee:9f:7d:55:6c:31:
         82:5e:12:0a:b7:bf:0c:bc:69:78:cb:a8:9c:5f:e1:1c:b0:51:
         38:8f:a4:70:57:b0:ba:9b:32:11:15:00:c4:23:1e:57:6a:77:
         41:4b:6b:dd:44:83:a4:01:24:cb:81:03:3f:0b:2e:30:35:f5:
         db:b2:9f:8a:77:54:6c:cf:1f:8e:7a:f4:d3:da:74:89:44:ff:
         6c:df:ed:69:4a:2d:33:37:4f:a6:50:e9:af:bf:98:8c:79:f3:
         18:0c:c6:c7:9a:3b:66:ef:79:67:99:80:ad:ed:d3:86:10:00:
         d1:f6:58:1a:3d:a2:33:1f:90:7e:2c:3f:15:39:2e:04:ab:f1:
         3a:9e:28:36:ae:33:96:0a:96:ac:34:96:03:1f:0d:04:48:f7:
         1a:fc:e1:68:58:94:6f:af:2a:06:91:3e:4c:4f:29:8d:90:b8:
         8b:90:67:93:aa:1f:2c:6a:b7:86:99:3a:c4:a2:57:3e:cf:58:
         24:7d:6d:41:4d:93:5f:ff:06:90:b2:ef:5d:b0:e1:4a:73:57:
         5d:14:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:05:03 2025 by rpki-client