Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa
File:                     323830343a313438633a3a2f33322d3438203d3e20323633333336.roa (raw, json)
Hash identifier:          XKNUgNN/NXUYCN1kQDKpmuicPSzmu5KUUHDjPds8rKU=
Subject key identifier:   77:DE:5E:30:99:24:B0:71:62:2C:F4:C5:91:36:7B:49:80:22:D2:B6
Certificate issuer:       /CN=44C4E7EA427432C8AF052B0213629A818E595AF0
Certificate serial:       59E1A16DA0A67989F226144D49664FE19FDCBB95
Authority key identifier: 44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa
Signing time:             Mon 23 Dec 2024 17:01:14 +0000
ROA not before:           Mon 23 Dec 2024 16:56:14 +0000
ROA not after:            Mon 22 Dec 2025 17:01:14 +0000
asID:                     263336
IP address blocks:        2804:148c::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl
                          rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e1:a1:6d:a0:a6:79:89:f2:26:14:4d:49:66:4f:e1:9f:dc:bb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44C4E7EA427432C8AF052B0213629A818E595AF0
        Validity
            Not Before: Dec 23 16:56:14 2024 GMT
            Not After : Dec 22 17:01:14 2025 GMT
        Subject: CN=77DE5E309924B071622CF4C591367B498022D2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:b1:7f:ee:8d:ef:cf:e8:1c:b0:31:d3:8a:
                    56:2f:35:f9:ad:13:e3:87:41:4b:e4:1b:c1:46:84:
                    86:f8:74:48:c8:ec:6e:ec:84:d7:1f:b0:6b:e7:c3:
                    ac:73:9b:3c:0c:56:c0:63:a0:ae:53:e2:20:70:78:
                    43:39:31:97:d7:6f:44:ab:97:9b:24:71:9e:0d:e7:
                    8d:ef:6b:e7:37:86:b7:f9:da:c0:54:39:e3:9a:7e:
                    9e:1a:72:b7:a4:28:76:10:d1:90:ba:f1:90:88:39:
                    5b:e8:5d:14:69:72:44:09:66:d0:99:70:b3:1d:5c:
                    49:a6:9d:81:f9:3c:c6:84:6c:d9:f8:12:38:57:94:
                    5a:5b:7a:62:66:f2:6f:1e:66:ac:2a:2e:9b:6f:82:
                    0b:41:e2:75:96:bb:12:69:4c:7b:3e:83:1e:b0:21:
                    03:a8:2a:56:16:dd:e3:9a:ad:28:7c:ae:5d:35:d8:
                    86:58:fa:45:59:fd:d7:85:6d:d6:79:59:c3:24:04:
                    0e:3e:a0:62:01:5c:1f:9c:ca:b5:03:e4:5e:c4:83:
                    42:3a:95:cd:82:9b:5b:c9:93:d5:01:4c:e2:42:a0:
                    21:09:14:67:5c:c1:a6:a4:a2:ba:ae:3a:a7:cd:38:
                    db:fa:5b:db:70:1d:dd:58:58:f6:89:e2:b2:ad:36:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:5E:30:99:24:B0:71:62:2C:F4:C5:91:36:7B:49:80:22:D2:B6
            X509v3 Authority Key Identifier:
                keyid:44:C4:E7:EA:42:74:32:C8:AF:05:2B:02:13:62:9A:81:8E:59:5A:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/44C4E7EA427432C8AF052B0213629A818E595AF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44C4E7EA427432C8AF052B0213629A818E595AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB2q7aGTLvGBVtPrYUMJtdAtbXRXVCXQLAYGfFpQYH2J/0/323830343a313438633a3a2f33322d3438203d3e20323633333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:148c::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:33:fd:b8:15:9a:28:0a:c0:34:ff:9e:ad:df:5e:71:50:0b:
         aa:5c:2a:fa:cf:d1:cd:78:74:08:d6:9f:62:7c:fb:ce:12:17:
         86:08:e1:55:22:a3:38:6f:ef:df:d3:11:d2:d2:fd:6c:80:72:
         f1:d0:8e:96:fd:37:61:fc:0a:41:86:5b:52:7c:11:87:45:24:
         05:27:74:04:ac:8b:bf:8a:32:f8:3a:66:b0:eb:6f:3d:29:57:
         15:72:b6:06:40:68:0e:49:2e:e3:9e:c7:63:16:c1:4c:cd:e8:
         8d:8d:64:82:55:e2:a9:55:7b:0c:df:b2:cd:15:01:13:6e:f2:
         79:e3:4d:27:38:94:b5:d4:6a:82:77:ac:42:e4:8e:0b:35:66:
         25:26:0b:a2:c0:69:e8:17:34:4c:cc:b2:7f:6c:63:ec:bf:b1:
         f1:c4:f8:35:62:97:04:5f:8b:a3:58:db:65:50:59:ab:39:e1:
         b8:cd:3e:4c:c7:04:49:28:3f:d3:ce:11:64:f8:7d:aa:48:92:
         84:c9:4c:8b:92:b7:fb:83:97:af:8f:ab:48:cc:7c:6e:d1:5f:
         c9:e0:1c:48:a2:c1:16:e0:59:ac:ea:38:62:34:8d:d3:f4:ea:
         f7:1b:1b:d8:41:04:85:a5:19:2c:5f:72:85:ba:2c:e9:20:ca:
         ad:f9:ba:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:49 2025 by rpki-client