Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/323830343a376332303a3a2f33322d3334203d3e20323731343737.roa
File:                     323830343a376332303a3a2f33322d3334203d3e20323731343737.roa (raw, json)
Hash identifier:          KsM5DjA+LPpqSG18AKMERsHSuFRnigrcfmdp7/4Y/Sg=
Subject key identifier:   84:6B:AD:02:DE:DF:3E:C6:8C:D5:06:CC:19:42:61:C2:B2:42:47:42
Certificate issuer:       /CN=4ABC2853483C8D55A291610B3C655D5FD053740E
Certificate serial:       45E1C3DBB611C41F035597AB402E06169C807457
Authority key identifier: 4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/323830343a376332303a3a2f33322d3334203d3e20323731343737.roa
Signing time:             Wed 03 Apr 2024 22:56:19 +0000
ROA not before:           Wed 03 Apr 2024 22:51:19 +0000
ROA not after:            Wed 02 Apr 2025 22:56:19 +0000
asID:                     271477
IP address blocks:        2804:7c20::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.crl
                          rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e1:c3:db:b6:11:c4:1f:03:55:97:ab:40:2e:06:16:9c:80:74:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ABC2853483C8D55A291610B3C655D5FD053740E
        Validity
            Not Before: Apr  3 22:51:19 2024 GMT
            Not After : Apr  2 22:56:19 2025 GMT
        Subject: CN=846BAD02DEDF3EC68CD506CC194261C2B2424742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:47:68:88:cb:5f:be:f2:d7:33:8b:17:87:
                    68:87:4a:3f:41:b6:c9:ff:3c:97:4a:02:59:31:37:
                    70:5a:51:39:3f:18:9b:ff:a0:b1:0e:67:77:4b:2c:
                    cc:8b:cd:46:c0:a1:67:9a:89:ab:49:d5:a8:f2:55:
                    57:e7:f6:d8:2c:9e:b2:9c:94:40:8f:8b:47:37:e1:
                    87:9e:bf:1f:a6:8d:ea:9b:95:66:14:1a:b7:71:92:
                    69:3a:a3:3a:0e:71:0b:25:c7:6d:e2:cb:38:89:94:
                    76:a7:b6:4a:6b:ce:8c:9f:19:9f:9d:af:33:4e:2f:
                    a1:3d:30:53:fc:9c:46:7b:69:d2:5f:72:1f:20:b0:
                    f6:06:81:02:8a:99:c7:76:62:7f:6c:ae:66:5d:a6:
                    d1:53:0f:d1:f3:b1:64:c1:17:8d:70:5a:af:4d:4e:
                    14:69:2e:41:c4:dd:1e:97:90:8b:1e:5e:4f:4a:30:
                    ce:3a:d8:14:fb:fc:c4:79:43:f7:78:9f:dd:05:5b:
                    70:fa:a5:75:df:3b:26:7b:34:06:39:56:34:65:16:
                    d6:d9:26:03:4d:58:0c:73:39:cd:22:8e:f3:aa:f0:
                    a5:d4:c9:c6:be:50:9b:81:10:4d:ce:85:f5:17:a9:
                    fa:3a:bd:10:52:83:76:a1:7a:6e:f6:ab:f4:22:c5:
                    fb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:6B:AD:02:DE:DF:3E:C6:8C:D5:06:CC:19:42:61:C2:B2:42:47:42
            X509v3 Authority Key Identifier:
                keyid:4A:BC:28:53:48:3C:8D:55:A2:91:61:0B:3C:65:5D:5F:D0:53:74:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/4ABC2853483C8D55A291610B3C655D5FD053740E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ABC2853483C8D55A291610B3C655D5FD053740E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/1/323830343a376332303a3a2f33322d3334203d3e20323731343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:c8:17:1c:1d:6f:d0:a0:93:35:e3:33:81:0b:19:31:43:
         c6:55:58:d5:1b:84:f5:2a:b7:f2:f1:2c:4d:1a:3f:e8:76:9a:
         e4:d8:5d:6d:f5:72:5e:48:38:0a:4e:e1:db:26:c9:22:8f:d2:
         c8:e6:92:96:d0:22:34:f7:2d:c7:00:0d:94:a9:c3:26:2d:a7:
         a5:c1:83:cb:a6:73:16:1b:78:5a:73:40:09:0b:b8:89:7a:6c:
         2f:c5:13:94:f4:50:07:62:2c:ef:39:4c:06:34:75:cc:6a:d4:
         87:e1:57:f7:fc:d1:40:74:e8:6a:79:14:0f:6e:51:d5:30:c3:
         e3:74:fa:35:cd:10:3c:27:63:1b:0b:49:a2:a9:fe:6f:b6:b9:
         75:53:a0:7d:62:b2:f6:3a:47:83:cf:e5:a5:bf:db:5b:5d:9a:
         55:26:12:fa:51:61:6e:a0:8e:b5:26:42:81:31:54:52:55:16:
         eb:02:f7:00:1c:d6:34:7d:0d:3f:b4:0e:73:a1:85:2b:e6:0b:
         11:4a:38:d1:87:9f:e7:48:21:75:90:0c:e4:b1:e5:66:aa:bf:
         80:af:aa:d1:8b:e2:55:af:9a:0c:b6:ea:ef:ef:01:de:ba:53:
         f6:ac:d1:dd:66:03:4a:21:b8:52:20:4b:f3:df:52:d7:9b:10:
         12:f8:8c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 07:56:06 2024 by rpki-client on console-fra.rpki-client.org