Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa
File:                     323830343a313732343a3a2f33322d3332203d3e20323633313236.roa (raw, json)
Hash identifier:          57BcGwUiC0b7Bkir+1qCxSLdpY+4gcJjIzRjn/CziZo=
Subject key identifier:   02:E1:85:10:69:D3:7D:DF:E9:12:2B:55:65:3A:4C:D0:4C:5F:D9:C7
Certificate issuer:       /CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
Certificate serial:       1FEAE65FBF8A33B19E213056E23E3D732208EEA1
Authority key identifier: 4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa
Signing time:             Wed 03 Apr 2024 18:32:13 +0000
ROA not before:           Wed 03 Apr 2024 18:27:13 +0000
ROA not after:            Wed 02 Apr 2025 18:32:13 +0000
asID:                     263126
IP address blocks:        2804:1724::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl
                          rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:ea:e6:5f:bf:8a:33:b1:9e:21:30:56:e2:3e:3d:73:22:08:ee:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA21A8D928CABC0C9EF13850635B31EAF3C2642
        Validity
            Not Before: Apr  3 18:27:13 2024 GMT
            Not After : Apr  2 18:32:13 2025 GMT
        Subject: CN=02E1851069D37DDFE9122B55653A4CD04C5FD9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:bc:5a:a6:6b:b0:43:65:39:87:68:ed:f8:77:
                    0b:1d:d5:97:5b:63:11:dd:b8:98:e3:ec:4d:96:44:
                    49:5c:2e:c8:c4:dc:6f:91:09:19:2f:50:80:b7:82:
                    44:ce:c2:5c:9b:83:0d:d2:d8:92:35:6a:00:1a:e0:
                    bd:fb:7b:78:0d:56:37:b5:d6:ad:98:9d:33:83:13:
                    0c:73:c7:29:4d:4e:80:f3:ec:ae:d3:7e:8a:62:d9:
                    29:fd:29:0b:9a:42:66:66:25:7c:56:07:23:ab:94:
                    78:dc:d0:00:4f:65:17:c7:11:64:07:41:58:2f:ff:
                    38:13:2b:85:8a:fd:7a:be:08:df:8b:3e:a4:71:6f:
                    8d:9e:83:32:81:84:e4:7a:e8:0b:cf:7b:0a:d2:67:
                    65:50:45:fd:3a:ea:69:f2:6e:b5:a8:8c:a5:45:6a:
                    67:4b:41:cb:a8:57:57:96:17:e6:91:d8:fa:70:d2:
                    f4:5a:a0:df:dd:00:b0:0c:07:33:ea:d1:82:96:ca:
                    fb:83:44:70:2a:e5:4a:c0:de:67:4b:24:0d:33:fb:
                    73:58:ef:7f:85:5c:51:53:a5:4b:68:da:81:89:10:
                    d8:87:45:96:76:f3:3a:d9:cd:94:68:15:94:8c:d5:
                    94:0b:2a:53:ec:a3:68:86:29:1e:3a:4d:ed:ef:fe:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:E1:85:10:69:D3:7D:DF:E9:12:2B:55:65:3A:4C:D0:4C:5F:D9:C7
            X509v3 Authority Key Identifier:
                keyid:4C:A2:1A:8D:92:8C:AB:C0:C9:EF:13:85:06:35:B3:1E:AF:3C:26:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA21A8D928CABC0C9EF13850635B31EAF3C2642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49uW1kChcDYAEjZeg8FXqY7EEpWZvB8z3xD4i2PYVTsg/1/323830343a313732343a3a2f33322d3332203d3e20323633313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1724::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:41:d3:87:b9:b6:ad:81:f4:c6:d8:03:05:a4:6c:42:db:
         5c:50:e4:f0:78:44:5f:44:f3:0b:c1:c9:b6:fb:db:98:d1:8e:
         45:49:c4:4d:73:0d:52:bd:22:50:8a:22:aa:69:69:7a:47:51:
         22:e5:9f:bf:b3:a8:71:1b:02:5e:f0:c5:38:ad:61:52:86:68:
         ac:eb:8b:83:f6:d9:69:7d:53:70:67:8c:a4:7e:9f:be:17:48:
         7a:60:a2:18:ea:70:c0:1d:ea:2f:89:d3:48:8c:ff:5c:d3:19:
         4a:92:01:e3:5c:0d:89:4f:55:89:c2:62:37:a7:0e:f4:f6:e2:
         fc:10:90:02:1e:02:12:45:4c:d9:60:f3:2f:68:60:09:14:a3:
         46:66:82:48:2a:df:2c:df:79:45:e9:bf:0c:48:be:93:63:a7:
         f4:f5:55:30:b2:67:38:aa:76:55:ba:84:9d:ef:59:57:9f:84:
         bf:33:d1:1d:fd:cf:d9:63:01:80:8a:66:5d:98:39:6d:cb:1f:
         bd:b0:be:9c:96:fd:57:d4:32:44:b6:43:ef:2c:d2:f6:1c:0f:
         87:2e:c3:ad:33:9a:c2:fe:11:0f:12:b8:6d:f0:d7:f7:c8:19:
         d5:28:2a:e0:35:f1:91:75:33:78:04:04:45:c3:84:f6:09:4e:
         7d:3c:be:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:20 2024 by rpki-client on console-fra.rpki-client.org