Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33322d3438203d3e20323637323831.roa
File:                     323830343a346231303a3a2f33322d3438203d3e20323637323831.roa (raw, json)
Hash identifier:          Nq4CAup9ieUAKEloo9o9YsjB98qQ5CdxCC5m6fGRYNo=
Subject key identifier:   36:90:D6:10:90:C2:02:EF:D8:90:E5:B1:F7:05:BB:B9:26:DD:8B:37
Certificate issuer:       /CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
Certificate serial:       242EE1B285B569FC9DBF5890949CEF8CA6629F5E
Authority key identifier: E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33322d3438203d3e20323637323831.roa
Signing time:             Wed 25 Sep 2024 21:20:12 +0000
ROA not before:           Wed 25 Sep 2024 21:15:12 +0000
ROA not after:            Wed 24 Sep 2025 21:20:12 +0000
asID:                     267281
IP address blocks:        2804:4b10::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.crl
                          rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2e:e1:b2:85:b5:69:fc:9d:bf:58:90:94:9c:ef:8c:a6:62:9f:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8B3AB514984BFB74981D1416FB52358A5A796BE
        Validity
            Not Before: Sep 25 21:15:12 2024 GMT
            Not After : Sep 24 21:20:12 2025 GMT
        Subject: CN=3690D61090C202EFD890E5B1F705BBB926DD8B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:cd:c1:14:1a:7d:1a:73:0a:37:6e:63:76:
                    3d:42:ed:b3:e7:4a:58:8b:38:7d:78:09:72:f7:b3:
                    c7:fc:a1:89:57:51:92:b4:70:b2:76:61:66:c1:79:
                    aa:98:e1:1e:66:5c:4f:05:1d:79:c5:ba:a7:7a:17:
                    06:4d:a9:51:a1:21:af:a8:91:d4:ee:88:a6:c5:a3:
                    39:33:2f:82:6f:d6:35:9f:da:c8:63:bd:81:9e:43:
                    09:35:2f:1e:f3:5e:89:10:41:5a:15:ab:c5:4e:8e:
                    f3:dd:46:98:6d:5c:50:94:f8:6e:96:25:a0:44:98:
                    08:14:02:60:45:83:14:a7:af:98:41:96:89:de:f2:
                    13:31:cb:de:0a:8b:f6:ba:0a:98:6f:02:da:cf:3a:
                    ff:2e:2d:b3:0d:85:ee:76:7c:20:18:e2:ed:59:13:
                    c5:49:f1:7e:2b:5c:d8:e2:01:1c:42:1c:d9:74:0a:
                    bb:31:7e:96:27:1d:ee:e0:fa:ef:03:5a:83:df:df:
                    1a:c7:39:4e:df:d0:88:02:76:d2:36:af:b0:9e:d5:
                    9f:8e:c7:85:ae:0a:a8:f4:db:0c:6c:04:3a:f3:af:
                    15:4a:76:84:ee:8f:d2:cf:9a:08:b3:14:67:c1:46:
                    79:a0:95:9e:4b:47:31:0a:1c:03:cc:54:7f:b9:41:
                    5a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:D6:10:90:C2:02:EF:D8:90:E5:B1:F7:05:BB:B9:26:DD:8B:37
            X509v3 Authority Key Identifier:
                keyid:E8:B3:AB:51:49:84:BF:B7:49:81:D1:41:6F:B5:23:58:A5:A7:96:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/E8B3AB514984BFB74981D1416FB52358A5A796BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E8B3AB514984BFB74981D1416FB52358A5A796BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/323830343a346231303a3a2f33322d3438203d3e20323637323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:f6:92:20:38:6e:64:be:5e:f6:d6:31:7b:a6:7f:ad:40:b2:
         2c:7d:e5:9f:da:88:1d:34:87:e0:ff:f3:14:2b:28:c3:23:b2:
         a5:ff:89:c3:ad:75:cf:bc:bc:be:61:b8:18:2a:0f:8c:fa:d8:
         82:61:9a:11:12:3c:35:32:71:7f:3a:b1:9a:e9:28:6c:9f:98:
         ca:e2:5e:e5:50:78:f6:2d:b0:38:3d:d1:06:8d:6a:cd:29:63:
         d8:49:d5:80:86:d0:89:df:6d:a6:af:c0:9e:7e:84:b4:1d:96:
         a1:f6:86:bb:09:d3:84:db:41:e9:2c:c6:b0:42:9e:77:f9:43:
         02:02:39:3d:7d:f4:9f:95:8f:75:f8:27:bf:71:c8:1b:46:9d:
         38:5f:73:57:11:24:f1:b8:b9:c5:8a:2d:e8:2c:4f:c0:84:6b:
         1a:e9:08:82:12:de:3a:37:39:1c:4f:8d:dd:f9:b7:cf:1e:43:
         66:ed:4a:b1:ab:5d:aa:bb:85:12:b1:c9:a0:13:7e:96:bd:39:
         a8:c4:f5:19:4c:c1:d7:49:ba:4a:03:06:cc:5f:0e:cd:08:9a:
         a5:3d:d7:e0:5d:03:12:02:12:70:1f:77:a0:c4:26:a9:57:91:
         17:d3:8b:d5:65:e2:71:b8:42:ba:c9:87:3d:ed:d0:5d:95:24:
         5f:c2:0a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:30 2024 by rpki-client on console-ams.rpki-client.org