Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a3a2f33322d3438203d3e20323637363139.roa
File:                     323830343a343431303a3a2f33322d3438203d3e20323637363139.roa (raw, json)
Hash identifier:          qCPT4dyWJ3V3ayoc5zBQhUWtj8G22CsdxEuGEjeHcts=
Subject key identifier:   1E:E2:2F:B9:2E:23:E3:67:D8:F9:A2:F6:7E:4B:D9:96:22:7E:4F:28
Certificate issuer:       /CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223
Certificate serial:       465D03CAE070B2652BC354DF25A5BF43820F6B20
Authority key identifier: E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a3a2f33322d3438203d3e20323637363139.roa
Signing time:             Tue 27 Aug 2024 15:57:48 +0000
ROA not before:           Tue 27 Aug 2024 15:52:48 +0000
ROA not after:            Tue 26 Aug 2025 15:57:48 +0000
asID:                     267619
IP address blocks:        2804:4410::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl
                          rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5d:03:ca:e0:70:b2:65:2b:c3:54:df:25:a5:bf:43:82:0f:6b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E11F8ABED7D76E5375A8436FD1F79955FF2FE223
        Validity
            Not Before: Aug 27 15:52:48 2024 GMT
            Not After : Aug 26 15:57:48 2025 GMT
        Subject: CN=1EE22FB92E23E367D8F9A2F67E4BD996227E4F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:6f:70:1c:c2:ce:44:99:9c:9d:77:19:a3:
                    31:9c:03:aa:7b:75:56:fc:ad:f2:f1:bc:74:ce:87:
                    b3:78:49:a5:1f:6c:0b:0c:f9:f0:e2:5a:a4:7a:02:
                    63:bc:23:3b:dc:50:d0:4c:3a:d6:58:23:fc:45:69:
                    9f:28:5d:48:7a:44:d8:83:c3:6c:a7:d1:24:18:fc:
                    fe:d2:a2:3e:be:7a:53:9f:fb:af:d2:aa:a5:aa:9e:
                    36:77:d5:9a:76:23:74:e1:dc:39:b9:70:f6:ca:d2:
                    36:d6:a9:78:bc:08:ac:39:8a:6a:f9:5a:93:78:98:
                    a1:04:0c:40:83:a4:4d:87:ae:3b:53:fc:b2:c6:ba:
                    3b:38:72:c7:56:ba:a3:4d:88:0e:f6:ee:cc:ab:6b:
                    09:f5:2a:a8:b4:30:41:a4:e4:27:c2:51:f6:ac:5d:
                    2e:6b:9a:01:4b:4a:18:65:db:64:77:4e:55:28:a7:
                    4b:73:b1:a1:85:86:23:cc:d0:86:03:d8:0d:44:19:
                    ee:ce:e1:5c:58:c9:7b:ca:7c:1d:10:40:5c:71:86:
                    06:7f:fe:3a:a6:c4:f3:b9:3e:ba:b2:1e:4a:a9:ba:
                    90:08:b0:8e:df:6b:32:dc:fa:e6:d5:03:06:99:ba:
                    31:c9:0f:31:34:a1:79:02:bc:12:bc:ae:3a:7a:fa:
                    0a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E2:2F:B9:2E:23:E3:67:D8:F9:A2:F6:7E:4B:D9:96:22:7E:4F:28
            X509v3 Authority Key Identifier:
                keyid:E1:1F:8A:BE:D7:D7:6E:53:75:A8:43:6F:D1:F7:99:55:FF:2F:E2:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E11F8ABED7D76E5375A8436FD1F79955FF2FE223.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHhPd3WtrXsq9sgvjHTihY834RGYZMZxzS43yCKWFou/0/323830343a343431303a3a2f33322d3438203d3e20323637363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4410::/32

    Signature Algorithm: sha256WithRSAEncryption
         ab:48:5f:a6:c1:0c:eb:c0:9b:f0:43:eb:b1:b7:8d:e0:da:c3:
         e5:19:17:99:a1:17:64:7f:8f:42:71:e0:cd:c1:b2:99:fd:84:
         1b:3b:96:d0:20:17:ce:ff:2b:32:85:6e:18:ca:d4:a9:f4:20:
         e9:30:79:c4:c7:36:3e:2e:17:35:9f:7b:c6:d1:10:22:21:8d:
         e6:7c:78:9a:13:6d:ff:34:fb:71:21:65:d3:7b:cf:ec:ac:a8:
         60:09:a3:63:2f:64:96:d8:eb:3b:4a:38:b9:8a:f4:fd:06:31:
         a9:e4:37:3b:2d:69:55:f8:1c:96:a8:7a:af:68:62:97:9f:f7:
         11:68:3f:12:20:3d:98:e0:85:ac:9c:0d:64:53:0e:fd:4a:a5:
         d8:eb:0e:e4:79:16:12:8b:85:78:5b:45:fd:a3:e8:8f:d9:88:
         1a:35:5b:58:61:f8:d0:30:af:dc:93:e3:cd:d6:e5:02:e8:80:
         42:37:bd:42:ce:29:33:6e:39:1e:1b:f8:3b:9b:03:7c:d3:f5:
         39:c5:43:e2:0c:10:64:ab:70:10:11:e9:79:7f:9e:ff:74:99:
         6b:34:d9:9c:c9:ad:2f:a8:43:40:8c:92:68:4e:07:e3:1b:7c:
         98:62:b2:88:98:a9:ce:f3:89:e5:57:0f:2c:b1:33:f9:4c:b8:
         7c:b1:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:50:02 2024 by rpki-client on console-fra.rpki-client.org