Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
File:                     323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa (raw, json)
Hash identifier:          K3Jwc66TXNW0GUl/OOstdlWroz954+FGHf8gBUE9Lqk=
Subject key identifier:   95:1A:32:82:E8:11:52:DE:CC:62:99:2D:6E:98:F1:E8:04:6C:1D:CB
Certificate issuer:       /CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
Certificate serial:       03544B8D683C57F4EEA62D65438BB0A1EC4F3D32
Authority key identifier: AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa
Signing time:             Thu 04 Apr 2024 18:24:02 +0000
ROA not before:           Thu 04 Apr 2024 18:19:02 +0000
ROA not after:            Thu 03 Apr 2025 18:24:02 +0000
asID:                     264936
IP address blocks:        2804:3034:10::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl
                          rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 17:54:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:54:4b:8d:68:3c:57:f4:ee:a6:2d:65:43:8b:b0:a1:ec:4f:3d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E
        Validity
            Not Before: Apr  4 18:19:02 2024 GMT
            Not After : Apr  3 18:24:02 2025 GMT
        Subject: CN=951A3282E81152DECC62992D6E98F1E8046C1DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:81:5e:a0:14:36:c5:46:bd:2c:25:bb:5e:
                    e5:6f:c7:03:15:62:9f:dc:93:43:9b:40:85:80:e8:
                    fb:ef:62:2d:97:af:c4:4e:ca:9f:71:34:d3:1a:88:
                    4b:97:f8:81:3d:aa:2a:5c:bd:03:da:31:cf:7e:0d:
                    9d:e3:b1:1e:4c:61:de:e6:3c:d1:aa:a3:72:2f:95:
                    a5:00:9c:ae:ad:04:5f:a7:f9:66:60:69:4e:78:74:
                    55:24:08:0c:98:1c:1b:f4:f8:cf:fa:45:77:a6:eb:
                    b2:73:25:90:88:52:2e:bb:ce:db:f0:d4:bd:99:7f:
                    a3:2a:79:75:3c:cd:c2:e5:17:2f:25:6c:bf:f1:0d:
                    6c:c1:22:e7:ad:11:d6:39:81:68:24:c0:5e:f2:a1:
                    da:04:d7:29:2d:4d:87:7b:85:ab:90:d1:b3:78:6d:
                    a5:aa:f1:60:ed:e4:12:fe:fd:29:38:7f:dc:84:05:
                    a7:94:f6:ed:79:68:f7:e6:8a:b6:63:ff:d6:33:a1:
                    86:bf:e4:0e:18:05:bd:ee:33:d6:26:8c:6a:95:5e:
                    83:b8:b2:2f:c0:80:b8:ff:a4:70:28:1e:54:ba:29:
                    28:78:40:00:7a:80:7e:ce:00:35:6d:e1:32:9b:86:
                    ca:ab:d1:70:77:71:85:8b:dc:a6:98:75:05:a1:d6:
                    90:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1A:32:82:E8:11:52:DE:CC:62:99:2D:6E:98:F1:E8:04:6C:1D:CB
            X509v3 Authority Key Identifier:
                keyid:AB:40:03:9B:1E:5D:05:09:C5:1C:C3:58:7B:EF:6E:D2:A0:DF:E7:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AB40039B1E5D0509C51CC3587BEF6ED2A0DFE73E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/323830343a333033343a31303a3a2f34342d3434203d3e20323634393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3034:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         bc:6d:8c:f9:f6:42:f2:8e:14:3f:16:40:f0:1c:18:0b:fd:bc:
         70:37:d4:00:a6:6f:bb:83:db:6a:1c:56:0a:46:c0:60:fe:7b:
         c4:4a:4a:72:2d:05:19:24:9e:35:45:01:e0:fe:d5:ea:5d:d1:
         18:9d:69:05:a9:24:bc:e1:3b:4c:1f:2b:e8:d6:68:a7:40:a0:
         00:5b:28:47:dd:82:83:33:a1:a0:99:35:e2:7b:d5:92:62:82:
         12:e2:1f:13:14:d3:68:56:92:63:0e:67:8e:c7:8a:08:ed:92:
         00:f1:92:24:21:57:6a:49:f1:24:97:05:e4:62:0b:cf:24:62:
         6a:d0:51:27:7f:a9:79:3f:3d:ee:ed:20:9d:f0:fd:b1:a7:94:
         dc:db:e5:8b:57:b7:44:d6:1e:a3:14:40:ca:e9:cf:78:ff:97:
         2c:06:2b:8d:b7:70:31:71:9f:1d:ce:e3:d7:cb:fe:fd:da:bd:
         84:65:20:63:e0:e0:6e:bc:29:6b:62:c2:5e:fe:ce:2d:50:86:
         da:b3:41:a3:36:12:b9:3a:0d:b1:89:d9:82:55:b9:3e:a7:6d:
         57:9a:31:4c:90:ce:c0:27:00:5f:aa:67:67:83:df:af:70:68:
         b9:23:1c:91:44:d1:23:68:0c:40:5e:84:75:c5:95:3a:ad:56:
         a3:9e:e5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:18:13 2024 by rpki-client on console-ams.rpki-client.org