Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a3a2f33322d3332203d3e20323632393738.roa
File:                     323830343a346434343a3a2f33322d3332203d3e20323632393738.roa (raw, json)
Hash identifier:          JwF3Yc0Skl0fo8lx+pEGRTVbivZXE5LoaDMWmDboN/U=
Subject key identifier:   09:5C:66:07:0A:70:E4:E4:AD:18:BE:73:F4:9A:5C:5C:E6:EF:84:E5
Certificate issuer:       /CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
Certificate serial:       4D285691028511E2D14758A1638C49AA31ECF927
Authority key identifier: 9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a3a2f33322d3332203d3e20323632393738.roa
Signing time:             Thu 04 Apr 2024 06:05:32 +0000
ROA not before:           Thu 04 Apr 2024 06:00:32 +0000
ROA not after:            Thu 03 Apr 2025 06:05:32 +0000
asID:                     262978
IP address blocks:        2804:4d44::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl
                          rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:28:56:91:02:85:11:e2:d1:47:58:a1:63:8c:49:aa:31:ec:f9:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41
        Validity
            Not Before: Apr  4 06:00:32 2024 GMT
            Not After : Apr  3 06:05:32 2025 GMT
        Subject: CN=095C66070A70E4E4AD18BE73F49A5C5CE6EF84E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:8a:17:b4:c0:f0:54:07:78:21:cd:fd:e6:
                    76:43:28:e2:ac:4c:35:cb:ce:a4:1b:72:24:c4:22:
                    39:95:b1:46:f7:cf:46:99:4f:f5:47:b8:64:2a:c5:
                    cd:fb:98:92:8e:5c:b9:30:e1:61:1d:cd:99:10:f1:
                    d0:31:e1:05:e5:4c:37:28:83:57:77:3a:1a:45:24:
                    b8:89:bf:a1:eb:49:ca:c6:e1:d9:8c:8d:13:ae:fc:
                    d5:02:0d:80:08:a3:ec:2a:0f:11:88:36:5c:58:61:
                    db:7a:7c:73:09:28:49:0a:2d:14:71:ce:20:b0:f1:
                    74:e7:02:f8:7f:57:09:13:e1:f7:6e:0c:8f:83:37:
                    3e:91:8d:83:74:66:e1:67:3a:de:5b:5e:26:0a:c9:
                    92:9f:39:9c:08:3b:52:a8:ac:8b:f8:ea:33:00:29:
                    95:6c:7e:5a:4f:2e:62:e4:42:ef:d7:3c:6b:46:62:
                    e3:b2:ad:3f:35:30:4c:d8:b3:e8:f9:7e:21:d0:05:
                    a6:c2:3d:70:f2:86:0c:a6:2f:55:b9:95:c5:e7:3c:
                    2e:d9:dc:a9:ba:c2:05:dc:d2:f8:14:c8:c0:5b:bf:
                    84:14:30:ef:48:24:10:9b:fb:37:ee:0c:4f:e9:10:
                    7f:0e:a9:45:1e:b3:40:b7:b1:71:bc:5a:a0:6c:04:
                    6f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5C:66:07:0A:70:E4:E4:AD:18:BE:73:F4:9A:5C:5C:E6:EF:84:E5
            X509v3 Authority Key Identifier:
                keyid:9B:83:28:18:9A:0C:FF:53:E9:ED:3A:2F:20:7F:FB:B9:CA:E6:1A:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B8328189A0CFF53E9ED3A2F207FFBB9CAE61A41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/1/323830343a346434343a3a2f33322d3332203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d44::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:11:e4:b6:8e:82:8e:ca:ec:9f:66:a1:ce:99:42:b1:7e:47:
         6c:8d:f7:a0:e8:c7:f9:f7:18:a3:59:9d:d5:10:72:17:b1:52:
         70:e5:e7:69:95:48:b2:58:5a:37:05:d6:09:92:3d:1d:10:5d:
         93:f0:bd:58:9f:65:ec:34:af:c8:0b:77:e8:4b:7d:65:51:ed:
         bb:4a:aa:ef:b2:eb:96:c6:53:53:6c:6d:04:79:62:ca:48:32:
         94:b0:9e:fc:c0:6e:3e:84:76:e8:93:e2:1c:2d:54:6c:9c:13:
         57:b0:4a:92:9a:76:e3:3a:db:ba:21:55:dd:b3:7d:cc:a7:88:
         71:99:38:f7:92:a8:0a:c9:cd:e5:0d:5b:f4:b4:15:22:a1:fd:
         92:cb:c8:1f:52:26:b1:ea:22:52:9a:a8:6b:36:58:18:32:41:
         a7:33:e0:be:ce:3c:83:39:04:aa:2d:21:0a:4e:c2:c5:e5:39:
         3f:c8:b3:1c:3e:78:3f:4c:20:72:25:e8:1b:fc:b3:2b:07:98:
         a4:f9:3b:be:53:54:c9:53:e3:81:b2:0f:0a:3f:fa:e4:ee:b2:
         08:27:0b:d5:fd:91:fc:2a:ee:c3:2e:18:b6:d4:e0:2e:19:a5:
         6f:c6:84:22:ca:93:a9:28:d8:d8:de:b6:5d:9c:0c:52:81:f9:
         38:d5:90:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:35 2024 by rpki-client on console-fra.rpki-client.org