Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
File:                     323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa (raw, json)
Hash identifier:          IJ7tPkaKYceY8Kc5OfhUEDiVu44s9YxsegiUTtlTDmo=
Subject key identifier:   65:4D:ED:A9:47:FE:9D:75:82:B1:26:F1:9A:0E:7C:4C:19:A6:76:B8
Certificate issuer:       /CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
Certificate serial:       4A98010431B07B107AB4263A33A820C94193B90F
Authority key identifier: AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa
Signing time:             Thu 04 Apr 2024 16:11:25 +0000
ROA not before:           Thu 04 Apr 2024 16:06:25 +0000
ROA not after:            Thu 03 Apr 2025 16:11:25 +0000
asID:                     263522
IP address blocks:        2804:1338:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl
                          rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 14 Nov 2024 15:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:98:01:04:31:b0:7b:10:7a:b4:26:3a:33:a8:20:c9:41:93:b9:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE62729B7C2F675CBB616815CBA292A798BEB4B
        Validity
            Not Before: Apr  4 16:06:25 2024 GMT
            Not After : Apr  3 16:11:25 2025 GMT
        Subject: CN=654DEDA947FE9D7582B126F19A0E7C4C19A676B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:29:e3:bb:78:19:ec:de:fe:fd:71:16:c8:
                    03:a3:f8:57:85:7f:a7:12:06:77:1b:d5:75:6e:c8:
                    09:18:de:b2:33:5b:9a:66:0a:9d:fe:9b:12:e3:ca:
                    74:d7:06:d0:d0:31:57:b6:07:68:d3:b1:64:50:9b:
                    a2:33:a8:ad:ca:de:1c:b4:63:0f:fe:9e:83:af:31:
                    5b:74:fb:08:4c:91:15:59:de:18:b6:38:93:63:d8:
                    55:75:73:5d:62:57:1d:4e:b5:f2:b7:60:85:60:77:
                    5a:aa:e4:4b:6b:85:42:9c:d1:7e:a1:ac:f5:6d:93:
                    ef:f7:ef:0b:0f:ba:4e:ba:bd:95:2c:fb:2a:6c:62:
                    ea:61:9e:e1:d7:a3:ab:62:bf:2c:01:c3:9f:e9:e0:
                    67:03:5e:c1:44:05:c9:07:d6:12:69:04:5d:e7:c9:
                    5f:20:d7:21:74:ac:ee:55:93:7b:37:80:28:c6:91:
                    c3:eb:89:b8:f6:d6:74:ad:ee:9f:cf:be:cf:6a:75:
                    5e:ff:ea:ae:d3:41:03:ae:4d:ac:74:3a:94:06:5a:
                    54:28:2d:81:b0:9c:a4:4f:a8:89:89:2d:35:76:13:
                    b9:20:9b:da:5b:16:95:0c:18:ae:79:e5:a9:d0:41:
                    35:f2:78:bb:be:ab:12:e0:bc:fd:f3:9f:e4:37:5a:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4D:ED:A9:47:FE:9D:75:82:B1:26:F1:9A:0E:7C:4C:19:A6:76:B8
            X509v3 Authority Key Identifier:
                keyid:AD:E6:27:29:B7:C2:F6:75:CB:B6:16:81:5C:BA:29:2A:79:8B:EB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ADE62729B7C2F675CBB616815CBA292A798BEB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn8VNxiYMQJR8fdq6EUMKZRJvQEtbFY4KWidtneeDQH6/1/323830343a313333383a343a3a2f34382d3438203d3e20323633353232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1338:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:c9:bf:49:fb:6b:a2:32:d2:b5:fc:d7:bc:6e:66:fa:71:11:
         95:11:8d:2e:ef:8a:75:d1:3d:9d:b9:fc:54:31:97:5b:f1:fd:
         5b:69:f4:ec:27:3c:70:87:78:c6:dc:95:c5:36:b5:2b:2e:de:
         b9:55:0d:22:cf:c6:46:fe:cd:60:c9:58:fe:5e:90:f2:59:95:
         3f:f7:1e:c9:34:eb:30:37:9e:0b:a8:c2:4e:78:88:76:6d:e4:
         55:66:8f:d4:ac:c0:15:e4:52:8b:ff:7d:ec:4c:61:0a:b0:18:
         7b:fe:77:ad:12:6e:71:30:d9:29:ce:94:b4:1d:5c:ed:d7:33:
         61:c8:6a:50:e1:2b:5d:fd:c9:dc:6a:0d:52:b8:e8:ad:be:5f:
         3d:7e:7f:92:b6:a2:c8:54:32:f4:40:4b:5c:d5:9a:87:ee:18:
         37:40:fa:d3:92:46:5d:79:69:6a:6d:e1:83:3d:1b:67:fc:a0:
         5b:1c:8b:2f:bc:43:77:4d:ba:d2:a3:0f:57:2c:a3:c2:63:73:
         b4:ee:cf:66:60:bb:9e:e5:4a:67:9d:51:a4:10:3e:63:6c:eb:
         c2:60:29:2f:0a:e5:17:c6:f1:ec:e4:20:89:89:0b:0e:d6:49:
         5c:0e:34:ef:9f:80:e7:1a:ec:53:1e:25:01:1c:10:7f:22:fe:
         1f:ac:14:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 15:37:10 2024 by rpki-client on console-fra.rpki-client.org