Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/323830343a336431343a3a2f33322d3438203d3e20323636323532.roa
File:                     323830343a336431343a3a2f33322d3438203d3e20323636323532.roa (raw, json)
Hash identifier:          pULZygqgcs+iP4Y31bNUKecBjJkNHBD4lN9HP5eIcwA=
Subject key identifier:   5E:F0:08:C2:74:79:2F:0D:FE:24:63:ED:F0:CE:CE:5E:4A:E9:21:AF
Certificate issuer:       /CN=26A6AC0E324AEAC3FC3940B6DAA4368880D3861C
Certificate serial:       5C24C97710C22B5E940BB4835FFBEF9DAB96369B
Authority key identifier: 26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/323830343a336431343a3a2f33322d3438203d3e20323636323532.roa
Signing time:             Sat 21 Dec 2024 19:19:16 +0000
ROA not before:           Sat 21 Dec 2024 19:14:16 +0000
ROA not after:            Sat 20 Dec 2025 19:19:16 +0000
asID:                     266252
IP address blocks:        2804:3d14::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.crl
                          rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 11:09:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:24:c9:77:10:c2:2b:5e:94:0b:b4:83:5f:fb:ef:9d:ab:96:36:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A6AC0E324AEAC3FC3940B6DAA4368880D3861C
        Validity
            Not Before: Dec 21 19:14:16 2024 GMT
            Not After : Dec 20 19:19:16 2025 GMT
        Subject: CN=5EF008C274792F0DFE2463EDF0CECE5E4AE921AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:14:4c:6e:18:d4:eb:43:20:68:a5:ac:89:
                    f8:04:66:d2:8e:32:74:a5:86:12:61:da:73:4d:3b:
                    5b:00:f1:33:31:c6:ed:64:cd:67:b4:0a:81:57:c4:
                    92:78:df:0d:c7:93:4c:ea:c2:15:c5:9e:f3:d6:91:
                    8c:5d:96:fe:12:dc:b8:a8:0e:17:fa:5f:b4:ea:a4:
                    0e:a9:95:74:57:be:2d:f1:7d:08:54:d6:d0:e9:29:
                    20:66:b5:c2:07:f5:bf:89:3a:c1:28:7c:47:5e:23:
                    97:ce:94:94:e4:b1:a0:22:e9:ad:cf:41:d6:0e:a5:
                    e6:94:70:af:eb:45:8d:2c:33:16:45:1a:b1:65:1d:
                    39:52:47:1c:6c:18:2f:c2:2a:f5:a4:de:ca:26:bd:
                    b2:3b:78:1e:d9:08:c9:42:b0:a8:11:19:e6:78:98:
                    18:93:f7:31:45:ca:77:dd:e5:3e:3c:7e:9b:6d:d6:
                    1f:81:9b:bc:96:23:28:0a:0c:03:ca:ab:fa:a1:bd:
                    4e:4f:f8:23:c3:bc:0f:4f:90:8e:91:9e:08:cf:a8:
                    e0:65:1b:93:68:3e:c4:c4:e9:39:ad:f7:77:25:a1:
                    2d:43:e7:bd:23:04:4a:b8:49:a7:be:6c:7f:83:a8:
                    64:c2:f3:e6:99:8f:7b:47:ac:e4:0b:d2:20:51:1b:
                    6b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F0:08:C2:74:79:2F:0D:FE:24:63:ED:F0:CE:CE:5E:4A:E9:21:AF
            X509v3 Authority Key Identifier:
                keyid:26:A6:AC:0E:32:4A:EA:C3:FC:39:40:B6:DA:A4:36:88:80:D3:86:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26A6AC0E324AEAC3FC3940B6DAA4368880D3861C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ceq4yLdGn7TM1nxzDKSsU9LgYyHwWG35QHbYwcC8DAN7/0/323830343a336431343a3a2f33322d3438203d3e20323636323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d14::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:c0:03:34:d9:6b:09:64:5a:f5:85:03:b9:2f:de:e9:8f:
         71:af:96:08:82:f4:7c:0a:73:53:ce:b9:5f:ea:41:f7:b9:f6:
         55:08:9b:14:96:66:40:3d:0b:d9:b6:32:f4:fd:17:57:16:60:
         12:89:9f:97:51:c0:00:35:d1:79:08:f2:bc:06:2b:2d:86:65:
         90:a6:3e:fe:6f:35:64:6c:9b:a5:07:0b:7e:a0:92:e0:79:fb:
         64:db:5c:33:25:e6:7a:3e:d4:bd:7f:0a:8d:ad:b8:10:d6:9d:
         3d:38:1e:e7:47:69:b8:9a:4b:80:f8:b1:bf:20:67:7a:0b:4e:
         32:df:aa:a5:52:c3:e0:cc:b9:22:3f:c2:63:96:1e:91:80:f8:
         7d:44:0a:a4:04:43:a3:d5:eb:47:41:e3:4d:2d:ec:08:b1:58:
         90:2a:cb:91:52:4e:f7:98:9c:9c:a1:04:7a:ab:66:e3:95:3e:
         fe:4d:c2:b2:89:ff:e0:9b:c6:90:66:35:67:27:8c:7c:a3:9a:
         1c:04:21:0c:b3:f3:b2:89:19:f5:f6:2d:64:37:2e:35:86:3c:
         17:a8:f2:ac:51:4b:bf:da:92:45:93:e8:9e:39:45:c5:11:d8:
         d0:12:8b:a7:5d:97:be:bb:e6:eb:1e:90:c7:61:d0:73:2d:5c:
         d4:8c:fa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:44:59 2025 by rpki-client