Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa
File:                     323830343a313561343a3a2f33322d3434203d3e20323633343030.roa (raw, json)
Hash identifier:          VX19Z63xB2lZzXQUh0Pz85qxJTgELtypgrInYKjEe08=
Subject key identifier:   54:4D:99:DE:5D:A2:9A:1B:26:82:19:68:00:05:BB:1E:74:B5:93:16
Certificate issuer:       /CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
Certificate serial:       4416CE869219F2A0774FF199D1D909B1F2206793
Authority key identifier: CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa
Signing time:             Thu 04 Apr 2024 10:57:45 +0000
ROA not before:           Thu 04 Apr 2024 10:52:45 +0000
ROA not after:            Thu 03 Apr 2025 10:57:45 +0000
asID:                     263400
IP address blocks:        2804:15a4::/32 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl
                          rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:16:ce:86:92:19:f2:a0:77:4f:f1:99:d1:d9:09:b1:f2:20:67:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9
        Validity
            Not Before: Apr  4 10:52:45 2024 GMT
            Not After : Apr  3 10:57:45 2025 GMT
        Subject: CN=544D99DE5DA29A1B268219680005BB1E74B59316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ed:ca:6d:74:93:e4:ca:5d:77:0e:d7:34:b8:
                    80:05:83:1f:3d:f8:cd:a8:e6:ec:16:79:72:70:63:
                    aa:5c:a8:d8:8c:f3:b7:5e:f0:96:65:d1:1d:74:b7:
                    87:52:5e:70:8d:c3:35:38:56:74:ae:39:03:a8:be:
                    e7:28:84:e5:e4:71:08:ad:91:cd:9f:4d:b9:52:73:
                    d4:5b:42:85:46:bd:99:72:01:4f:76:c2:43:43:e9:
                    81:80:37:fc:41:a1:b5:e5:1a:4f:62:b6:53:8a:4a:
                    6f:63:fd:df:ce:fd:c3:cf:71:f9:5a:0d:1a:be:17:
                    63:0a:ce:eb:a8:ad:a3:73:9f:9b:3f:79:83:f2:9d:
                    64:2c:6b:4e:cb:2b:f6:fb:a8:18:9c:79:4f:a8:53:
                    95:81:35:79:bf:55:16:5b:e3:bb:7e:b2:35:2e:87:
                    5c:57:fb:b7:ac:08:35:79:77:e8:dd:ee:72:80:52:
                    6a:95:96:84:81:f4:af:96:dd:19:db:3c:70:d1:c7:
                    c3:b8:df:bc:e3:06:eb:7c:6b:26:bd:7f:29:f2:5a:
                    4f:ca:fc:dc:1b:3f:22:ce:cf:42:2f:a7:47:ec:f1:
                    66:d8:bd:fd:66:27:40:6f:bc:0c:c8:d1:4b:94:1c:
                    21:e9:34:d9:95:ee:8b:ac:7c:cd:df:6b:ba:88:32:
                    d0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4D:99:DE:5D:A2:9A:1B:26:82:19:68:00:05:BB:1E:74:B5:93:16
            X509v3 Authority Key Identifier:
                keyid:CD:23:91:FA:7C:28:AE:0F:9C:8B:2B:99:E1:90:92:A3:48:7A:2E:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD2391FA7C28AE0F9C8B2B99E19092A3487A2EC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EhnvAwQBxyPbkhUphMQnxCuTEDgv7kSB1aTD418ThSX/1/323830343a313561343a3a2f33322d3434203d3e20323633343030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:8d:23:49:36:4c:7c:c8:fb:3b:9d:75:27:04:c4:d4:2a:00:
         9e:42:40:9e:5a:69:6a:c8:b8:5f:11:4b:53:1c:2d:ce:46:66:
         74:39:96:a7:80:8c:e4:93:24:66:c2:d4:a2:b6:48:94:57:99:
         4c:83:42:87:81:ac:58:82:f9:39:a0:3f:f3:24:da:a6:99:8d:
         0e:ec:e7:8c:91:b8:ca:2b:7d:89:2b:64:39:28:d8:e0:c8:df:
         26:60:87:22:87:c4:36:7f:f4:74:17:40:0b:da:3a:5d:1e:87:
         5e:e2:4a:10:98:fd:0a:9c:86:8b:67:2c:e2:7c:0a:15:65:d0:
         aa:e5:2d:33:43:6c:e7:03:84:49:d5:4b:63:c7:f1:d5:46:ae:
         e9:6d:7e:f5:e8:c2:f7:eb:25:2d:e0:7b:b5:f0:9d:3c:c9:fa:
         d7:3f:0a:e6:65:a5:64:d0:d6:e7:ce:72:05:1b:2d:20:81:d8:
         d6:c5:54:f9:6e:6f:99:e4:3f:76:1e:48:02:b9:d2:47:d6:55:
         8c:33:8d:fe:98:de:bb:ca:24:42:81:8e:03:bc:5f:e6:78:80:
         01:e3:4c:bf:57:57:5f:7d:3a:e0:44:fa:00:2b:ef:89:29:59:
         ed:99:81:a9:ff:4f:0e:10:93:77:44:01:17:01:70:7f:8a:31:
         64:08:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:29 2024 by rpki-client on console-ams.rpki-client.org