Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/323830343a336634383a3a2f33322d313238203d3e20323636363530.roa
File:                     323830343a336634383a3a2f33322d313238203d3e20323636363530.roa (raw, json)
Hash identifier:          BymP1oE1knapGmmucKq85s1m4dhcM3LP2vsYwSrRS7o=
Subject key identifier:   43:69:92:DD:3F:F5:C2:65:0B:B8:16:60:55:84:83:46:96:B3:04:F0
Certificate issuer:       /CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
Certificate serial:       1868D226E18C7319253E7042FF863E020B3C00EE
Authority key identifier: 23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/323830343a336634383a3a2f33322d313238203d3e20323636363530.roa
Signing time:             Thu 20 Jun 2024 16:34:06 +0000
ROA not before:           Thu 20 Jun 2024 16:29:06 +0000
ROA not after:            Thu 19 Jun 2025 16:34:06 +0000
asID:                     266650
IP address blocks:        2804:3f48::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl
                          rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 14:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:68:d2:26:e1:8c:73:19:25:3e:70:42:ff:86:3e:02:0b:3c:00:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA
        Validity
            Not Before: Jun 20 16:29:06 2024 GMT
            Not After : Jun 19 16:34:06 2025 GMT
        Subject: CN=436992DD3FF5C2650BB816605584834696B304F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6e:3b:48:fc:f3:db:d1:ad:a3:0c:f2:1a:ef:
                    80:aa:e5:6f:7a:08:59:2f:aa:ca:bc:df:25:8f:c3:
                    79:d3:b6:fa:3d:7a:3b:d3:ab:70:7d:fc:c2:9c:22:
                    1f:e3:03:65:9f:3a:7f:d3:4d:5f:70:c5:d1:15:74:
                    22:c6:2f:a8:33:01:43:da:f0:70:7e:68:c7:b6:cd:
                    f4:a1:3c:8d:0c:26:c6:19:fd:6d:b8:f2:ad:de:a9:
                    f0:d1:c0:17:c1:8d:2b:05:4a:43:a9:19:1f:da:48:
                    38:2d:16:ec:f6:09:17:33:08:42:fd:97:3d:d1:7c:
                    bb:e6:27:0a:22:6b:00:13:35:dd:c2:f8:69:7d:79:
                    a2:72:6b:a4:bc:64:bc:80:e3:41:ad:6e:8d:fd:40:
                    47:d2:28:f7:1a:c8:e0:1a:fa:e8:8d:c0:db:2e:87:
                    27:56:3c:63:24:46:c3:07:39:f4:0c:30:11:86:20:
                    3e:9a:e6:e5:54:e4:16:7f:be:3b:f2:10:b3:0a:0c:
                    65:a1:36:ce:fd:f8:e4:ba:fd:38:33:f9:b9:2e:9e:
                    56:03:60:4a:0e:bb:c7:e9:94:f5:68:3e:7d:b9:cf:
                    03:ab:a1:f3:50:89:5a:e2:49:a1:8d:22:c2:cc:f0:
                    9b:12:75:41:d9:b8:e1:62:ee:e4:39:77:89:ef:3b:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:69:92:DD:3F:F5:C2:65:0B:B8:16:60:55:84:83:46:96:B3:04:F0
            X509v3 Authority Key Identifier:
                keyid:23:AC:A8:39:EC:B4:6C:C3:B5:BD:6C:86:BF:69:97:C1:8E:82:77:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ACA839ECB46CC3B5BD6C86BF6997C18E8277DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2XbZyVbAPDYNGk6kM85VE3r24EjGaX6wYCmQFLuZ92Q/0/323830343a336634383a3a2f33322d313238203d3e20323636363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f48::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:77:1e:74:12:0b:4c:22:ee:9e:f6:09:1c:db:66:98:64:96:
         79:8d:9a:6d:db:b8:3a:7c:66:47:ee:c7:21:0d:49:5d:0d:ca:
         c9:cd:91:97:45:d9:25:12:a6:80:b8:11:a7:b6:e4:64:72:89:
         49:31:2e:86:9f:15:6c:18:2d:96:66:82:c5:cf:85:25:ef:0e:
         48:92:c4:4a:90:08:92:c6:a2:9d:49:62:f7:12:3b:21:d5:56:
         30:db:1f:85:9c:6b:60:f6:a1:46:ed:5a:4e:9e:5a:ae:d5:67:
         c4:9b:48:7e:b1:1d:78:06:a5:d5:b3:7a:88:58:1e:e1:2d:71:
         64:e8:13:d6:86:bd:44:09:35:a9:b2:cd:5b:a2:59:c2:a0:57:
         b6:8f:76:7e:d9:63:5e:1c:e7:1e:d5:5a:81:ab:55:33:60:64:
         07:be:c5:fa:b5:ee:2d:dd:3a:dd:26:aa:4a:f3:b6:91:76:a6:
         61:fc:f3:c2:ee:23:36:7e:9a:a4:e5:43:27:3d:45:3a:3d:07:
         8e:0f:c9:67:c7:82:87:12:9a:98:55:d7:18:93:86:15:df:9c:
         c4:27:38:f9:e5:79:98:01:e1:6c:9d:d7:90:e3:3e:63:a8:d9:
         91:ee:c1:e3:11:4b:e8:94:3a:2f:16:c6:2e:9e:eb:06:89:a2:
         f6:26:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:05 2025 by rpki-client