Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/323830343a323262343a3a2f33322d3438203d3e20323634313137.roa
File:                     323830343a323262343a3a2f33322d3438203d3e20323634313137.roa (raw, json)
Hash identifier:          6sD/Sf2anV1pS9eG9gDw+hoJ+XB/VpbA9sPrfdKEnJc=
Subject key identifier:   E5:65:0B:6B:4D:58:A5:A6:15:6C:AD:14:BB:FB:E7:3A:6C:66:09:AD
Certificate issuer:       /CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
Certificate serial:       0D89549F2FFE54AEFB3CFC424B8780DAC5806120
Authority key identifier: F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/323830343a323262343a3a2f33322d3438203d3e20323634313137.roa
Signing time:             Thu 04 Apr 2024 22:42:54 +0000
ROA not before:           Thu 04 Apr 2024 22:37:54 +0000
ROA not after:            Thu 03 Apr 2025 22:42:54 +0000
asID:                     264117
IP address blocks:        2804:22b4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl
                          rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:35:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:89:54:9f:2f:fe:54:ae:fb:3c:fc:42:4b:87:80:da:c5:80:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1
        Validity
            Not Before: Apr  4 22:37:54 2024 GMT
            Not After : Apr  3 22:42:54 2025 GMT
        Subject: CN=E5650B6B4D58A5A6156CAD14BBFBE73A6C6609AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1b:f0:01:15:7c:91:e4:6e:b5:ec:d8:97:55:
                    46:b0:06:6f:52:33:53:47:f3:30:61:9b:04:38:19:
                    ac:1e:82:6f:58:bd:b8:61:4d:ce:14:f9:64:12:5b:
                    ae:fe:1a:88:c9:c2:e6:44:23:30:6c:8b:d3:ae:40:
                    be:92:0d:8b:dc:b2:cb:6f:76:c1:fe:1b:a3:ce:5b:
                    c2:f0:5a:de:f0:28:52:6d:fb:fd:8e:3c:78:6e:17:
                    bd:8d:2f:ff:2a:ec:6f:17:04:cd:13:02:9b:06:f4:
                    56:42:f4:2a:05:1d:63:69:ff:ca:67:86:03:88:25:
                    83:3b:7c:d5:56:5d:14:f3:a3:c6:ba:ae:8c:56:b7:
                    f6:85:23:47:02:b6:17:ed:f7:82:da:ef:39:13:77:
                    ce:69:ee:0f:f0:f9:50:8a:9b:6e:3b:b9:a5:94:20:
                    5d:bd:62:d8:0b:f4:3a:2c:64:7c:20:c2:73:7d:82:
                    3b:ce:39:c4:3e:e8:a8:eb:bd:6e:30:c2:34:0c:15:
                    02:2a:61:27:a2:0c:bd:3d:c1:30:b3:97:49:d6:74:
                    6f:d1:58:16:52:d1:04:10:a2:0c:57:1a:40:27:64:
                    1b:75:00:e4:83:1c:19:fa:7d:1e:cf:9b:a2:2b:09:
                    d1:75:d5:c7:6b:ce:4e:d2:5f:ff:4c:9c:fd:81:a0:
                    82:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:65:0B:6B:4D:58:A5:A6:15:6C:AD:14:BB:FB:E7:3A:6C:66:09:AD
            X509v3 Authority Key Identifier:
                keyid:F3:D7:BC:2A:62:A3:A3:55:A4:38:BA:6B:F4:3C:6E:99:3B:37:CE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F3D7BC2A62A3A355A438BA6BF43C6E993B37CED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/2/323830343a323262343a3a2f33322d3438203d3e20323634313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:eb:80:21:5c:66:33:12:bc:58:a5:69:d9:ab:99:1d:e9:da:
         9e:45:60:97:94:09:d1:90:31:42:06:72:63:a3:54:f7:98:22:
         b7:83:0c:f4:6a:67:8e:87:f9:47:7c:ff:e2:17:b2:08:1f:8d:
         51:3d:bc:35:ed:fe:10:55:f5:3b:33:96:07:13:a3:61:87:fc:
         14:d7:5a:a0:7c:49:28:0f:9b:d0:5d:b8:81:2d:86:d5:da:26:
         50:cc:14:3b:3a:e7:3c:9d:29:fc:8e:36:e0:2d:72:25:35:cf:
         80:3d:bf:c4:8b:37:21:a4:1d:4b:c3:ba:83:9e:b4:23:00:c5:
         2d:a1:98:15:44:ee:8f:5a:a4:bf:e6:2e:24:e1:54:54:ff:d2:
         9e:33:01:2c:3c:fb:9f:6d:d0:d8:f6:07:86:6a:9a:31:18:44:
         6d:46:f8:e0:ff:b5:42:b5:32:37:2c:07:58:18:4c:4b:66:4d:
         fb:ac:4c:cc:ee:9e:c2:2e:39:27:93:33:c2:33:92:73:ce:b9:
         7c:99:3c:85:3f:31:74:51:86:9b:5d:76:29:a2:6e:b4:52:b2:
         0a:f9:fc:d3:51:26:40:ed:d4:df:a0:25:23:33:1e:fb:63:5e:
         3c:98:cc:f7:e4:42:15:b0:9f:3f:d4:9d:41:c3:4d:36:12:eb:
         b5:b9:f1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:40 2024 by rpki-client on console-fra.rpki-client.org