Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a376666663a3a2f34382d3438203d3e203532393133.roa
File:                     323830343a313038383a376666663a3a2f34382d3438203d3e203532393133.roa (raw, json)
Hash identifier:          40kFQ6W1iV4fHLw/s1VW8Oplt9arGGKbwO8qjFT28H4=
Subject key identifier:   46:DD:6B:45:7D:8E:B5:DE:1A:A5:35:31:2C:F4:69:D2:1A:7C:14:05
Certificate issuer:       /CN=8204A8F62764E655E183BB09417B0875F11B3A7D
Certificate serial:       7C7CC1406A1A20AD5C285D258B487E00CDA19A33
Authority key identifier: 82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a376666663a3a2f34382d3438203d3e203532393133.roa
Signing time:             Thu 04 Apr 2024 09:45:16 +0000
ROA not before:           Thu 04 Apr 2024 09:40:16 +0000
ROA not after:            Thu 03 Apr 2025 09:45:16 +0000
asID:                     52913
IP address blocks:        2804:1088:7fff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl
                          rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 00:21:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:7c:c1:40:6a:1a:20:ad:5c:28:5d:25:8b:48:7e:00:cd:a1:9a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8204A8F62764E655E183BB09417B0875F11B3A7D
        Validity
            Not Before: Apr  4 09:40:16 2024 GMT
            Not After : Apr  3 09:45:16 2025 GMT
        Subject: CN=46DD6B457D8EB5DE1AA535312CF469D21A7C1405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:36:d0:00:48:80:92:a0:ed:76:d6:22:93:
                    09:54:0b:5c:06:e6:07:06:a2:df:3e:0b:a0:5f:d5:
                    d9:93:f2:87:c0:99:fc:bd:43:9f:88:a8:1a:b3:75:
                    ea:bc:8d:ac:05:ec:6e:1a:ef:34:f2:3c:95:cb:6b:
                    7e:0c:13:f1:fd:1b:4d:bc:ef:c5:21:0a:59:43:4d:
                    d9:09:9c:13:57:88:b2:9b:5b:82:52:02:2c:60:46:
                    58:9a:7e:7d:22:12:ef:b5:04:1f:e8:ef:64:12:de:
                    d2:09:aa:a0:f0:6e:2b:df:96:ef:97:ff:1b:78:7f:
                    cb:c8:27:e1:97:3a:58:01:56:cd:4f:e7:3d:f7:75:
                    bf:86:c8:f8:ed:a3:18:e0:82:81:8e:1a:77:b6:6b:
                    58:3f:b6:cc:d4:bd:27:4e:69:38:f8:1b:22:eb:f2:
                    1a:20:38:ab:39:f2:c0:fd:63:07:3d:71:9d:fb:72:
                    f6:de:16:47:5f:91:6b:8a:8e:31:e9:1d:be:1a:bf:
                    27:9d:1c:b0:ca:eb:9f:e2:79:30:cc:35:5f:ab:eb:
                    2c:3a:bf:c3:c0:de:50:f1:60:6b:09:7a:b3:33:85:
                    51:f3:a3:50:3f:8d:d7:2b:ff:23:3f:c0:35:91:8d:
                    d0:48:fc:c8:55:fb:9b:16:00:79:3f:dc:36:15:bb:
                    a6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DD:6B:45:7D:8E:B5:DE:1A:A5:35:31:2C:F4:69:D2:1A:7C:14:05
            X509v3 Authority Key Identifier:
                keyid:82:04:A8:F6:27:64:E6:55:E1:83:BB:09:41:7B:08:75:F1:1B:3A:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/8204A8F62764E655E183BB09417B0875F11B3A7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8204A8F62764E655E183BB09417B0875F11B3A7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/1/323830343a313038383a376666663a3a2f34382d3438203d3e203532393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1088:7fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:ad:d6:40:b5:12:e8:1d:20:6d:6b:c9:fa:3d:8e:2c:1a:b2:
         98:27:2d:7a:55:b9:0b:8d:4c:5f:c3:22:d4:48:d0:07:50:7d:
         20:84:52:4e:aa:be:6e:7e:d8:53:ab:5e:86:8a:de:67:61:f1:
         01:34:d5:f8:3e:07:91:9c:ee:2d:33:3a:f5:fe:7d:f9:e9:7a:
         be:c6:b5:d2:94:63:13:2f:f4:e5:8f:75:55:a0:03:73:f1:cc:
         23:68:d9:48:5e:6a:e1:6f:ca:6c:a4:73:06:54:e7:e8:4d:1e:
         62:5a:21:13:d0:2c:8c:1b:19:91:aa:c4:29:80:f0:9e:f4:2d:
         1f:03:cc:37:2c:fa:16:0a:74:e6:e9:b0:01:cf:73:5f:7f:7a:
         81:b3:78:7b:36:92:c2:83:1f:3c:2f:54:ac:6c:9b:1c:b2:33:
         58:06:9c:d7:b1:5c:54:5e:de:5e:a4:bd:20:dc:82:d7:25:94:
         23:a4:a4:08:80:ec:b1:df:da:89:d1:d2:55:8b:2b:5c:cc:80:
         42:e3:4c:d4:41:1c:68:cf:9a:d6:3b:01:aa:28:80:7c:6e:e2:
         42:94:63:ad:28:c2:28:df:e6:ea:15:9b:53:5b:71:76:83:78:
         8c:31:c5:0f:ea:ec:19:61:61:12:ad:c3:3c:3f:9f:e2:47:6e:
         36:67:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:30 2024 by rpki-client on console-fra.rpki-client.org