Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa
File:                     323830343a313634343a3a2f33322d3438203d3e20323632393033.roa (raw, json)
Hash identifier:          djvrOXXl0hc6fUaoQUceROUBaXsgWeypRlVdamr1uyQ=
Subject key identifier:   45:D1:B3:1C:F1:EA:AD:CC:DD:F6:75:EF:0E:D8:5C:1C:4E:F3:4A:B4
Certificate issuer:       /CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
Certificate serial:       3D44953B497EAFCB2191346029BD82A25B402128
Authority key identifier: 21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa
Signing time:             Wed 03 Apr 2024 18:31:40 +0000
ROA not before:           Wed 03 Apr 2024 18:26:40 +0000
ROA not after:            Wed 02 Apr 2025 18:31:40 +0000
asID:                     262903
IP address blocks:        2804:1644::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl
                          rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 18:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:44:95:3b:49:7e:af:cb:21:91:34:60:29:bd:82:a2:5b:40:21:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63
        Validity
            Not Before: Apr  3 18:26:40 2024 GMT
            Not After : Apr  2 18:31:40 2025 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:6c:58:55:7e:85:d8:49:ee:ed:6e:c9:1b:
                    f9:c7:41:20:a4:f8:ea:b7:b4:b4:50:aa:a7:f7:52:
                    3c:a6:a5:f8:8b:11:1b:a0:b8:03:f3:94:9a:53:34:
                    9d:d7:cf:74:ac:34:0c:9e:a0:12:7f:28:1c:85:d9:
                    84:34:cf:70:29:d1:c9:26:19:ca:b7:2c:c9:79:09:
                    93:c7:74:db:1f:8d:25:71:65:1e:ef:3f:52:d6:82:
                    41:65:72:ee:9e:ed:84:e7:bd:3d:9f:16:49:53:19:
                    c0:5b:ed:0d:ad:ca:bd:83:aa:73:17:b5:f0:67:0e:
                    b3:e0:ea:4f:85:31:24:47:b4:be:af:aa:89:83:e9:
                    27:c6:c5:65:cc:e5:cb:99:bf:16:c5:97:6c:a9:d9:
                    a5:2f:b4:9d:7f:20:f1:f8:5f:f5:b1:bb:29:af:23:
                    0b:af:36:9f:82:8b:8c:6b:72:ac:cd:ae:d9:34:f3:
                    bb:52:c5:6c:2d:79:98:20:1e:ea:49:ac:02:59:49:
                    ab:c2:32:36:21:b8:65:ce:00:95:b6:e1:9c:54:57:
                    37:8a:50:e9:e6:22:19:39:89:02:3f:e9:70:47:61:
                    4e:dc:9b:29:f4:6a:97:06:75:bb:20:54:c9:91:e5:
                    6f:c5:c0:86:16:02:3d:94:b7:c8:78:a9:e1:22:a7:
                    83:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D1:B3:1C:F1:EA:AD:CC:DD:F6:75:EF:0E:D8:5C:1C:4E:F3:4A:B4
            X509v3 Authority Key Identifier:
                keyid:21:B7:0D:C6:EA:46:AA:4D:2E:A2:56:63:D2:7B:CD:0C:7B:7B:3D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21B70DC6EA46AA4D2EA25663D27BCD0C7B7B3D63.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49aPvAHy9o9J5LCoZ4yiijP65M5SKFFzfeTwhwDDNe4v/1/323830343a313634343a3a2f33322d3438203d3e20323632393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1644::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:a9:c0:2a:eb:4a:0b:c4:62:c3:04:5a:3c:0d:d9:ac:02:9f:
         fe:97:b3:53:fe:ea:3e:5f:2b:87:83:2a:1e:be:c1:5a:95:57:
         8e:00:0d:6e:3a:e1:64:af:ef:af:56:46:8d:46:3f:30:b6:29:
         d6:3b:53:09:87:e3:25:45:fb:93:53:1e:6b:82:4c:5d:8c:84:
         99:59:7a:d1:f9:a4:f7:c1:44:bc:93:19:c7:a8:a7:7e:a7:35:
         de:0c:5d:a1:4e:a0:27:d4:ea:f2:11:7b:a5:98:2a:0e:35:de:
         94:0d:02:3a:43:20:be:fd:65:5f:72:93:95:d3:be:9c:36:18:
         cf:18:19:cd:62:4d:6b:cc:03:f8:7a:77:de:46:32:22:47:3a:
         8e:d9:93:fe:55:f3:7b:aa:8c:29:cd:aa:48:9c:f0:6a:a9:79:
         ab:15:a5:41:f4:f3:4c:e5:6d:e1:68:a3:94:8a:4b:1f:8d:2f:
         92:00:1c:c0:3d:ff:f8:54:80:17:44:5c:a1:5e:50:df:41:7b:
         19:54:86:65:18:d2:78:80:d5:74:94:2f:e1:d3:1e:6d:2e:33:
         98:12:e7:81:84:9d:64:b3:16:45:cf:a3:51:0c:49:9b:f8:3f:
         ea:b2:e1:52:03:77:00:78:c7:3e:5c:03:48:cb:57:12:ac:fe:
         dc:e4:00:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:02 2024 by rpki-client on console-ams.rpki-client.org