Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa
File:                     323830343a323062343a3a2f33322d3332203d3e20323634353039.roa (raw, json)
Hash identifier:          eZfk6S4YjlWZjrBukYfFHtz1idsqpzgnAFbuCzG/ZuU=
Subject key identifier:   79:41:B7:39:C9:E1:CC:3C:AE:0F:85:D2:06:C4:FE:C4:75:12:B1:4A
Certificate issuer:       /CN=C67FC27679C5C58D1A1904874E35000B74C71E78
Certificate serial:       1A8D45C1754303BA9E658B3D2ACFF5D0C09C3991
Authority key identifier: C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa
Signing time:             Wed 03 Apr 2024 18:31:38 +0000
ROA not before:           Wed 03 Apr 2024 18:26:38 +0000
ROA not after:            Wed 02 Apr 2025 18:31:38 +0000
asID:                     264509
IP address blocks:        2804:20b4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl
                          rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:10:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:8d:45:c1:75:43:03:ba:9e:65:8b:3d:2a:cf:f5:d0:c0:9c:39:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C67FC27679C5C58D1A1904874E35000B74C71E78
        Validity
            Not Before: Apr  3 18:26:38 2024 GMT
            Not After : Apr  2 18:31:38 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5d:b9:67:84:65:67:98:ec:a1:26:36:3f:bc:
                    c6:0c:35:37:d9:15:f1:6a:95:eb:a0:25:c9:a2:e3:
                    cf:e3:1c:c5:24:79:98:5c:29:51:29:ab:36:5f:ed:
                    fc:12:20:77:ed:48:5a:07:a4:0f:5b:df:5d:c8:b4:
                    fe:5a:d9:b6:9b:b9:8f:75:13:98:b6:f1:9b:7e:42:
                    97:35:23:aa:76:37:17:c4:3a:64:ab:74:35:df:e4:
                    c4:d8:50:d1:2f:50:db:80:33:43:43:08:09:42:58:
                    5a:d5:40:66:54:ec:86:dc:2d:6e:1e:9f:4e:61:06:
                    16:04:09:44:02:b9:5f:7a:0a:3e:e6:55:32:44:dc:
                    d5:a6:cc:f4:6b:f0:83:61:a4:09:e5:fc:e3:15:f5:
                    37:e8:96:99:3b:a3:4d:25:19:10:19:59:74:8c:03:
                    69:2a:c0:c5:99:57:e2:08:78:bb:af:af:7c:63:1a:
                    cc:9d:b2:4d:61:ed:68:91:57:34:89:fb:f2:52:57:
                    03:ff:8a:9f:9d:d8:d1:30:78:b9:c5:b8:e9:50:96:
                    41:fe:e2:9c:e1:e8:65:17:01:6f:b2:c7:b1:54:0e:
                    16:15:73:a8:e3:87:52:43:22:81:38:c5:3c:3b:dd:
                    15:3d:af:a2:5d:30:43:bf:86:ff:53:52:40:6c:bf:
                    f5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:B7:39:C9:E1:CC:3C:AE:0F:85:D2:06:C4:FE:C4:75:12:B1:4A
            X509v3 Authority Key Identifier:
                keyid:C6:7F:C2:76:79:C5:C5:8D:1A:19:04:87:4E:35:00:0B:74:C7:1E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/C67FC27679C5C58D1A1904874E35000B74C71E78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C67FC27679C5C58D1A1904874E35000B74C71E78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/1/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:4c:b8:cf:23:f4:6e:bb:3c:c0:ac:f0:42:44:34:e1:5d:
         a7:ce:46:42:0f:bb:5e:f3:4e:1e:d3:85:93:f4:8f:cc:3c:eb:
         ff:e3:a7:cd:96:ca:2f:80:3b:15:b8:f3:74:13:b5:13:56:56:
         69:9a:03:d4:24:76:81:06:49:c2:55:48:93:90:59:bb:47:a0:
         71:81:62:a3:6a:5e:14:64:bb:22:d6:00:e7:c5:78:44:b1:da:
         5d:b6:aa:33:25:22:47:75:ca:b2:b0:a7:2b:49:c1:63:7d:d5:
         bf:60:57:15:82:76:19:0c:17:36:20:06:54:cf:04:9a:1d:82:
         3f:05:72:a7:b8:f6:f5:9e:ba:97:b7:99:14:bf:66:d3:4f:3d:
         c3:c2:0d:5f:b8:a1:89:e5:94:9b:ef:4f:21:2e:5f:c9:6d:08:
         8a:8f:72:4f:5b:aa:cc:6c:44:5f:19:ba:08:a4:50:17:58:fc:
         c9:56:7f:5c:96:f6:1e:c8:23:fb:31:ef:79:6a:0f:35:96:bd:
         84:04:72:7f:33:ed:a7:91:b5:4f:8c:4b:dc:25:71:10:b2:b4:
         49:a8:1b:17:f3:16:3e:7b:88:14:dc:0f:c2:de:c5:89:f7:d7:
         21:8f:93:0e:b7:ce:60:41:00:6c:ab:7a:fe:62:8e:fd:54:65:
         4a:3d:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:05 2024 by rpki-client on console-ams.rpki-client.org