Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa
File:                     323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa (raw, json)
Hash identifier:          WHHYl4WkCr9Dy7/p8D5SuvrsA2+YubqT77pimz+z1PQ=
Subject key identifier:   4C:DD:89:7B:4B:F1:EB:A8:ED:91:23:A4:9A:2F:A3:63:CB:3B:ED:C8
Certificate issuer:       /CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
Certificate serial:       4E5CE2452151D6FB2F70D483FA03C619AE1196CB
Authority key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa
Signing time:             Mon 23 Sep 2024 18:09:13 +0000
ROA not before:           Mon 23 Sep 2024 18:04:13 +0000
ROA not after:            Mon 22 Sep 2025 18:09:13 +0000
asID:                     271180
IP address blocks:        2804:7778:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl
                          rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:10:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:5c:e2:45:21:51:d6:fb:2f:70:d4:83:fa:03:c6:19:ae:11:96:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
        Validity
            Not Before: Sep 23 18:04:13 2024 GMT
            Not After : Sep 22 18:09:13 2025 GMT
        Subject: CN=4CDD897B4BF1EBA8ED9123A49A2FA363CB3BEDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:16:23:2e:3b:78:6a:cb:57:7f:50:b7:a8:
                    6b:9d:1a:3a:21:b9:77:69:76:4a:88:7d:e6:a6:10:
                    bf:fe:f7:45:32:a7:68:41:86:aa:17:8f:22:4d:74:
                    66:c9:57:46:90:e5:3c:31:f6:96:28:cc:2f:a0:fb:
                    8d:88:99:a4:fa:e4:82:f0:80:4d:1c:db:19:d5:78:
                    a7:64:55:5d:ce:40:a7:8b:bc:d8:06:77:ba:c2:fb:
                    c2:b8:b2:47:ad:80:57:c6:01:a3:88:3d:13:dd:46:
                    8f:58:a2:2e:be:52:4d:9e:e5:d1:1e:28:f3:04:2b:
                    50:40:e7:da:9e:11:4e:69:10:4d:d5:62:69:6b:15:
                    7d:d0:92:de:ee:fe:50:4f:82:b1:9d:cc:8b:40:f6:
                    fb:4b:91:d4:f1:65:67:6e:ac:66:04:14:c9:f5:c7:
                    ad:5a:a1:aa:1f:84:fb:58:71:5c:ed:6e:f1:21:a9:
                    83:8d:ab:fe:03:09:d1:e3:e5:fc:22:a1:d9:9d:f0:
                    08:5e:ec:9e:d5:9b:cb:f9:50:ca:cb:89:32:95:94:
                    77:86:2a:4d:2e:ea:d1:2e:8b:b4:e4:db:60:68:c7:
                    73:4d:18:d1:19:e2:d4:ab:e7:9a:87:fd:98:de:6e:
                    05:51:1a:5b:86:dc:e7:89:fa:7d:22:20:cf:66:1b:
                    3e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DD:89:7B:4B:F1:EB:A8:ED:91:23:A4:9A:2F:A3:63:CB:3B:ED:C8
            X509v3 Authority Key Identifier:
                keyid:A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3130303a3a2f34302d3430203d3e20323731313830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7778:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:c1:11:74:de:84:8f:db:a2:08:06:f1:34:03:35:50:6c:69:
         c2:95:4a:d1:dd:2a:8f:ad:d8:46:f5:f0:9c:84:65:0f:b0:a1:
         8a:be:87:b0:dc:a8:1d:ca:5c:dc:86:c3:13:ec:98:aa:c6:38:
         b7:d0:09:d3:a6:c4:49:7e:2b:9e:e8:c2:00:27:c1:66:e4:c2:
         5b:c4:0f:79:61:a1:5a:c1:9c:76:bd:3d:8d:83:4a:cc:60:eb:
         37:57:84:f8:46:91:9e:ea:db:5c:aa:90:e6:85:58:f5:64:1a:
         7a:a9:52:bb:4d:ba:d3:e8:7d:2b:95:80:52:21:7c:b0:72:43:
         ea:66:36:38:10:2d:6c:a1:63:c4:d1:47:9b:52:d6:a0:bc:74:
         fd:18:1a:c7:97:81:c7:e5:57:96:12:ea:ac:21:50:c7:b9:ab:
         63:7e:53:de:1e:6e:fc:47:c2:75:87:63:29:30:0f:48:fc:ff:
         bd:09:b6:f0:37:15:ed:db:1e:4e:69:5e:cd:76:ff:ae:ac:c1:
         a3:cc:14:4e:55:15:27:12:36:25:10:60:96:e3:3b:25:87:20:
         46:18:ea:51:cc:ad:05:3b:95:d7:31:2d:bf:c0:88:6d:40:35:
         1b:c0:29:d4:12:0d:ec:95:5d:75:64:6c:ae:4d:02:3f:fd:89:
         ba:5d:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:09 2024 by rpki-client on console-ams.rpki-client.org