Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
File:                     323830343a346461343a3a2f33322d3438203d3e20323638323130.roa (raw, json)
Hash identifier:          G32eVvpnmuylp6ENKihdPUPb0K/jbuVj/iVwCisiuwc=
Subject key identifier:   06:A9:79:13:6D:B6:A7:A2:A0:B3:5A:FD:F8:F0:68:85:5B:5F:3D:D2
Certificate issuer:       /CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
Certificate serial:       28A2724CC996BEBD4D9A264C4D62752D60E61045
Authority key identifier: 0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa
Signing time:             Wed 03 Apr 2024 19:00:00 +0000
ROA not before:           Wed 03 Apr 2024 18:55:00 +0000
ROA not after:            Thu 03 Apr 2025 19:00:00 +0000
asID:                     268210
IP address blocks:        2804:4da4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl
                          rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a2:72:4c:c9:96:be:bd:4d:9a:26:4c:4d:62:75:2d:60:e6:10:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D
        Validity
            Not Before: Apr  3 18:55:00 2024 GMT
            Not After : Apr  3 19:00:00 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a9:a7:75:b0:50:ad:09:ab:8c:fa:42:24:4a:
                    cc:44:0f:03:b1:02:c6:8b:ba:54:bc:6f:ef:4a:00:
                    ae:01:69:16:83:09:bf:21:51:e7:15:e6:cf:eb:fe:
                    b2:09:79:7e:23:1b:a4:ed:ff:34:30:0a:ea:e1:10:
                    ac:d4:00:af:0c:c3:70:d0:16:4e:bb:f4:1e:4a:b6:
                    6a:a6:ab:25:08:ef:54:bb:8a:07:17:d2:bb:e5:cf:
                    4b:1e:15:a3:bd:24:19:44:cd:9b:ac:07:51:a3:df:
                    fc:ce:f4:0b:42:c9:fe:a2:b5:5a:fe:4a:9b:5d:c7:
                    5c:3e:13:0c:92:40:81:8a:11:13:cd:47:a8:22:34:
                    be:7b:74:8e:16:8f:18:4e:dc:8c:20:34:60:af:a5:
                    4f:b0:37:29:08:50:01:9a:54:03:16:25:d7:97:b2:
                    44:97:43:27:81:81:cb:b4:3c:71:cb:f1:7a:bb:13:
                    20:16:b7:ee:69:9a:30:b4:0c:63:30:d4:0c:6a:83:
                    42:3a:e3:1c:54:36:c3:06:dc:ac:21:ac:b2:3e:d5:
                    f6:e6:a0:47:3d:8c:14:5e:ae:af:32:a8:69:ac:f6:
                    05:05:d2:3e:fa:4e:94:c9:3d:45:b3:28:0f:20:c1:
                    b3:1c:da:43:62:29:b4:d9:ec:ae:b6:fa:a5:ec:aa:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A9:79:13:6D:B6:A7:A2:A0:B3:5A:FD:F8:F0:68:85:5B:5F:3D:D2
            X509v3 Authority Key Identifier:
                keyid:0D:98:1F:5D:CF:29:A7:FC:5E:CE:93:D3:B9:1C:A3:AC:16:08:95:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D981F5DCF29A7FC5ECE93D3B91CA3AC1608958D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WfapPb1g81AqvrHr414vPnJa5vvp5W7Db9Vge3bqicq/1/323830343a346461343a3a2f33322d3438203d3e20323638323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4da4::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:14:ea:f3:50:3e:46:e2:33:40:88:9a:44:67:11:eb:80:97:
         6b:4b:35:cb:c7:6b:1c:01:8d:ba:c2:c0:4a:f4:8d:98:42:b9:
         87:e3:54:67:5a:f9:4e:25:30:73:c3:76:ae:b9:73:6c:c1:bd:
         3d:b5:1b:2b:a0:4c:46:2c:40:b3:a2:e1:92:8a:99:82:98:0f:
         88:44:1e:43:ab:1f:81:3d:8f:08:c6:d2:14:bf:b3:4d:dc:a6:
         d6:a5:fa:8b:cd:37:b0:ec:7c:f4:50:40:b4:65:ab:b3:61:62:
         d1:0c:0f:8e:03:1e:96:97:ef:e8:82:79:fe:68:58:cf:54:64:
         f9:f7:d2:d2:80:22:a4:c5:6a:9f:0b:81:39:d4:51:4a:83:c5:
         e4:eb:93:c3:fb:00:84:1f:8a:b9:d0:d1:4f:b8:e5:90:24:92:
         5b:7b:4a:37:1b:ab:9d:ab:89:7b:ca:6f:31:04:9a:e9:08:79:
         e6:c9:ee:c3:0b:15:61:c3:3c:1e:10:47:de:c9:29:65:ad:8e:
         8a:59:25:96:be:73:cb:81:6e:3a:11:dc:cf:02:76:ce:a6:d3:
         fb:fb:ee:7d:3b:a6:64:30:a1:da:e1:6a:5d:e1:71:6f:02:4c:
         91:de:33:a3:37:ee:b8:17:8e:26:63:14:f5:4c:00:3e:a0:03:
         ae:93:61:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:44:14 2024 by rpki-client on console-ams.rpki-client.org