Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/323830343a366162383a3a2f33322d3438203d3e20323730333535.roa
File:                     323830343a366162383a3a2f33322d3438203d3e20323730333535.roa (raw, json)
Hash identifier:          IDv8ydkbWDszmddR5Lm2hO9qj2kSxy/I5GR8S/zBFqE=
Subject key identifier:   EF:04:8D:FF:BF:54:B3:C4:A1:84:68:C3:85:93:D4:48:E2:CC:99:07
Certificate issuer:       /CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
Certificate serial:       398BBCF30EC91EA7A6F10C0D6B1196068C2522D1
Authority key identifier: 8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/323830343a366162383a3a2f33322d3438203d3e20323730333535.roa
Signing time:             Thu 04 Apr 2024 22:56:52 +0000
ROA not before:           Thu 04 Apr 2024 22:51:52 +0000
ROA not after:            Thu 03 Apr 2025 22:56:52 +0000
asID:                     270355
IP address blocks:        2804:6ab8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl
                          rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:8b:bc:f3:0e:c9:1e:a7:a6:f1:0c:0d:6b:11:96:06:8c:25:22:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A114164BBA9BC4B3A50A729116BC7574D2CD6EF
        Validity
            Not Before: Apr  4 22:51:52 2024 GMT
            Not After : Apr  3 22:56:52 2025 GMT
        Subject: CN=EF048DFFBF54B3C4A18468C38593D448E2CC9907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:29:28:2a:3f:63:cb:24:e9:84:0f:d0:a5:54:
                    f6:a3:66:cd:28:5b:08:5f:6d:b4:23:89:f0:d0:d7:
                    ef:b2:bc:2b:df:85:d5:b2:89:03:0a:17:0a:8a:8a:
                    a4:a7:dc:8c:23:d8:fa:30:08:06:e8:ce:0d:c1:93:
                    2e:e6:54:14:97:a3:8c:81:53:b7:12:64:91:cc:0f:
                    1d:b3:4a:0e:de:28:85:9f:61:53:42:eb:8c:47:b6:
                    9e:b1:01:6a:a8:33:f7:ef:f0:71:8b:94:12:59:37:
                    f9:d1:8a:4f:5a:d3:5e:cf:16:d2:44:ee:2f:ea:0c:
                    67:17:b7:b8:e3:52:cf:14:0d:f2:81:5f:ac:34:d2:
                    c6:cd:04:67:a9:e2:b5:92:db:e6:08:57:83:c7:c5:
                    10:31:11:b2:34:d1:51:3b:ab:df:43:83:5f:01:14:
                    f7:08:bb:f0:7c:72:0c:20:f6:4b:19:1b:1f:3e:8a:
                    b8:9b:2d:75:f0:b4:6f:4e:a5:7b:7b:b8:98:d6:08:
                    ff:e6:92:12:0b:0e:42:92:0a:76:2a:33:96:db:56:
                    41:e4:d2:05:bf:d0:70:5f:29:8e:4f:67:d0:51:f0:
                    c5:26:62:bf:1f:e0:e8:b2:40:f0:2f:0b:15:95:66:
                    f9:b8:1d:54:b9:f4:18:b5:89:a0:00:ec:bd:4f:0d:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:8D:FF:BF:54:B3:C4:A1:84:68:C3:85:93:D4:48:E2:CC:99:07
            X509v3 Authority Key Identifier:
                keyid:8A:11:41:64:BB:A9:BC:4B:3A:50:A7:29:11:6B:C7:57:4D:2C:D6:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A114164BBA9BC4B3A50A729116BC7574D2CD6EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2GQcjSb3Px6M1mp3zRnHah9zMQAbYMCaQVKitqjsotaQ/1/323830343a366162383a3a2f33322d3438203d3e20323730333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ab8::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:c7:be:01:c3:ec:ea:1b:37:a2:88:5f:fe:af:0b:45:89:4e:
         65:7e:8f:47:55:f8:4c:48:b4:06:eb:22:af:c9:94:7d:fb:9e:
         07:7c:39:60:91:91:2a:eb:fe:06:a1:38:26:94:df:ec:b0:a9:
         95:0b:9b:e7:d3:5a:9a:13:9e:1f:d4:e3:d9:33:85:dd:0f:2c:
         81:e2:48:14:03:7f:28:c0:2d:b1:9c:0b:8e:02:d4:60:a0:3b:
         68:9e:69:4f:13:a9:73:d9:e5:93:bc:af:af:d1:c9:9d:8f:e6:
         dd:70:db:c2:d9:1f:ec:5d:c9:e0:2b:12:92:73:16:44:22:62:
         49:b2:b8:4b:0f:05:c2:fe:80:43:50:2d:51:3f:47:59:c7:9b:
         a2:e5:ac:2a:3f:41:4e:b8:86:a7:90:47:4c:c5:6b:82:76:ea:
         fd:7b:be:81:15:74:33:86:7a:9a:ee:52:94:78:96:33:91:2c:
         49:0e:3d:fd:b2:22:b3:67:a1:61:1c:62:b1:f1:f3:2a:9f:16:
         64:74:57:96:58:32:68:1e:e3:75:fe:05:7e:3d:d4:c4:79:5b:
         3f:6e:84:96:f8:00:41:98:f0:9f:e9:f1:c6:c9:b0:37:a0:4c:
         c0:49:7c:8b:33:e5:43:fd:a9:84:46:06:45:fc:e5:94:bd:ba:
         ec:3e:9b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:18 2024 by rpki-client on console-fra.rpki-client.org