Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6463383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6463383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          JdxhkWAvZ2SnV+MVRB2R6boRodLM2Dv0tt0MxAH8UR8=
Subject key identifier:   27:A9:31:44:A5:18:72:C5:3B:01:B6:5F:F4:55:95:2A:8D:3A:F8:4B
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       5338CC3C09F6BC3F81133F371014CD06F7FCE1DF
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6463383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:24 +0000
ROA not before:           Thu 16 May 2024 11:33:24 +0000
ROA not after:            Thu 15 May 2025 11:38:24 +0000
asID:                     263338
IP address blocks:        2804:1494:dc8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 03 Jun 2024 03:32:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:38:cc:3c:09:f6:bc:3f:81:13:3f:37:10:14:cd:06:f7:fc:e1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:24 2024 GMT
            Not After : May 15 11:38:24 2025 GMT
        Subject: CN=27A93144A51872C53B01B65FF455952A8D3AF84B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7d:2f:ef:b4:9d:cb:eb:d1:28:d0:41:2c:ba:
                    6c:60:90:95:9f:88:12:93:7b:f1:b5:79:af:75:47:
                    ef:f7:e6:95:84:4c:df:0a:aa:3c:c1:65:74:7d:54:
                    94:33:15:40:53:f7:52:96:52:96:4b:e3:f6:d8:f5:
                    e8:23:53:73:a7:0a:1f:af:23:8c:c7:96:da:5c:de:
                    83:1e:26:66:d5:2e:1a:bd:2f:9c:90:92:0e:72:43:
                    25:4f:52:f3:30:f9:3a:46:5e:cc:8f:ad:3e:5c:b1:
                    0f:a1:c5:7f:b6:d3:4d:70:14:b8:85:5d:f0:bc:cb:
                    6e:6c:32:01:65:cd:a5:8d:63:f3:f1:40:7d:79:ec:
                    4e:8a:5d:01:3c:0d:78:f7:36:dc:9e:85:28:94:d7:
                    fa:eb:93:84:dd:58:41:c1:3f:5b:16:08:7c:52:89:
                    82:e7:60:76:5b:74:02:0a:4b:44:92:ea:8d:37:6c:
                    22:cf:f0:eb:ed:b2:43:fe:5b:fc:d0:e1:cd:7e:b7:
                    b6:8a:ef:d9:58:48:71:8a:ed:d2:7a:aa:b0:90:89:
                    06:6c:24:5f:2f:81:78:63:e8:46:16:8e:4b:51:9b:
                    b6:b5:c6:f3:ee:06:63:c6:c5:6c:84:4b:d0:d4:49:
                    fd:27:4c:67:5a:ef:1d:cd:7c:c8:12:ef:51:0e:a7:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A9:31:44:A5:18:72:C5:3B:01:B6:5F:F4:55:95:2A:8D:3A:F8:4B
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6463383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:dc8::/45

    Signature Algorithm: sha256WithRSAEncryption
         65:b1:4b:32:ab:a2:ea:c2:e4:82:de:12:b1:eb:d8:22:ae:14:
         84:12:d3:e0:72:87:c6:c3:6f:a9:60:f5:4b:d8:37:07:1e:7f:
         9f:2c:69:af:9c:f5:c3:25:72:b5:84:b4:d0:87:40:e7:16:d1:
         8f:f0:e8:24:4b:3c:19:8d:cb:8e:6c:29:18:1d:29:31:d7:f6:
         cd:27:3a:03:8c:4d:43:b0:9a:dd:ba:f6:41:ad:34:e4:a1:45:
         b1:22:11:09:18:2e:24:b5:ef:1e:74:d9:32:dc:8c:07:27:6e:
         f0:c0:77:ed:52:3f:4c:56:30:3e:6f:3e:11:af:bc:e1:94:53:
         a6:d8:0f:08:49:14:bf:20:8d:4b:85:b4:94:64:d5:77:50:e3:
         21:18:a0:61:4d:98:53:29:bb:68:94:4f:fd:96:63:a0:0a:20:
         a7:32:81:e0:2d:64:d2:30:0a:02:af:eb:c2:60:65:d2:7b:4a:
         c0:42:ae:9f:6e:3d:e1:2c:ac:cd:60:d1:e3:5c:92:6d:09:9a:
         4f:5c:2d:df:04:ee:c8:16:42:4b:0e:73:8c:23:5c:af:fa:54:
         9d:7f:74:a1:8b:c5:0a:25:e9:13:67:59:fa:54:b7:08:75:51:
         f9:53:62:b2:76:91:6d:3e:51:5b:90:01:a5:87:06:54:78:9e:
         eb:53:a3:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 09:14:32 2024 by rpki-client on console-ams.rpki-client.org