Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa
File:                     323830343a323434383a3a2f33322d3438203d3e20323634323132.roa (raw, json)
Hash identifier:          CnKzZMJ5I1DKoGBYPMGkMew43H66mYH2dttY5QoEUjo=
Subject key identifier:   B8:E2:62:6F:DA:82:24:A9:BA:21:36:55:E7:72:8C:AC:26:B5:9E:9C
Certificate issuer:       /CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
Certificate serial:       3A566DDF8BF7A2A23A49C1C199139FB3AC92045D
Authority key identifier: 91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa
Signing time:             Thu 04 Apr 2024 05:47:14 +0000
ROA not before:           Thu 04 Apr 2024 05:42:14 +0000
ROA not after:            Thu 03 Apr 2025 05:47:14 +0000
asID:                     264212
IP address blocks:        2804:2448::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl
                          rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:48:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:56:6d:df:8b:f7:a2:a2:3a:49:c1:c1:99:13:9f:b3:ac:92:04:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91D34B9E6993B17B315517C2B8D7A7587070F90E
        Validity
            Not Before: Apr  4 05:42:14 2024 GMT
            Not After : Apr  3 05:47:14 2025 GMT
        Subject: CN=B8E2626FDA8224A9BA213655E7728CAC26B59E9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:56:a3:8d:ed:08:70:35:20:b4:bc:e8:ab:67:
                    a3:18:10:6e:ea:9b:9e:e0:46:1d:a2:79:b3:59:20:
                    71:68:53:ee:80:30:e2:69:7f:b3:85:b2:62:9e:c0:
                    56:68:d6:dc:aa:46:ca:9b:52:98:24:3b:ec:ba:16:
                    b6:50:b9:1d:06:c6:19:b0:08:33:56:14:56:52:86:
                    59:bf:08:ae:9b:9c:54:2c:86:40:15:f2:eb:bf:85:
                    98:95:d2:bb:8b:5a:0b:5b:a2:38:d1:02:4f:09:d3:
                    4d:4e:8e:56:d8:74:59:fa:ae:92:dc:e6:15:35:7b:
                    0a:52:09:44:a4:83:23:3c:a5:8c:c8:a6:b2:99:aa:
                    80:03:56:dc:d8:2a:7f:50:10:94:48:8f:df:1f:45:
                    f6:59:72:20:9a:9e:14:7a:52:2e:a7:71:a6:21:f8:
                    8e:fd:98:13:d2:a0:c6:7a:68:a3:09:8a:aa:f1:69:
                    1e:3b:98:6a:37:bc:07:2d:05:c8:00:bd:58:be:20:
                    a8:90:c5:aa:d7:8b:d0:5f:cf:bf:d0:53:e3:94:99:
                    68:7c:a3:1f:f6:93:38:da:5c:65:7b:6d:9d:a0:81:
                    66:bd:72:97:6c:09:67:90:48:55:7f:24:e7:d9:a0:
                    ba:b8:57:1f:dd:73:9e:f4:08:09:fa:29:07:bb:97:
                    6b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E2:62:6F:DA:82:24:A9:BA:21:36:55:E7:72:8C:AC:26:B5:9E:9C
            X509v3 Authority Key Identifier:
                keyid:91:D3:4B:9E:69:93:B1:7B:31:55:17:C2:B8:D7:A7:58:70:70:F9:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91D34B9E6993B17B315517C2B8D7A7587070F90E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14ReHpk6nNKY78BqS13JzFDTQ2KSXDbB4iTYUSfye781/1/323830343a323434383a3a2f33322d3438203d3e20323634323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2448::/32

    Signature Algorithm: sha256WithRSAEncryption
         d5:64:dc:77:38:1c:30:f3:e4:59:fc:51:53:d6:ad:1a:df:0f:
         05:4a:03:1e:fc:69:fb:ac:c8:5b:fb:36:81:c4:df:a5:26:eb:
         4d:b7:b8:53:d6:9a:1f:90:36:1b:16:7f:62:7a:f6:3d:2f:94:
         ba:ee:02:05:d6:47:40:dc:01:be:f3:22:60:3a:ee:b5:43:38:
         0c:20:23:fc:fb:6f:7d:60:db:9b:e7:b4:53:77:a4:3f:9b:91:
         d5:a4:97:9d:3d:21:15:c8:e9:c9:36:f9:e7:1c:11:92:58:b8:
         b7:55:09:75:03:fb:d4:e2:db:20:23:dc:15:b4:02:7f:6a:de:
         d9:0a:fc:15:07:f4:01:14:fa:bb:09:64:48:8f:32:7b:f1:8f:
         67:99:6a:8d:d6:80:4a:42:ef:a5:22:ec:78:95:fa:dc:d4:88:
         c9:81:3e:5a:9c:f3:ae:60:ae:8c:f9:2b:5e:59:5e:a2:db:16:
         6e:88:78:d4:0d:b4:9d:76:3a:ee:91:48:86:3a:be:f0:3e:ad:
         6e:8a:4c:c6:45:59:ab:9f:7a:c5:0b:03:90:79:31:5e:90:3c:
         de:9a:1d:9c:59:d5:06:59:04:ac:6c:5b:63:6e:0f:d7:2f:af:
         7a:e9:d9:99:4e:42:0b:0f:1f:f7:3a:e3:3d:28:4f:66:be:3f:
         4b:94:93:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:30 2024 by rpki-client on console-fra.rpki-client.org