Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a3a2f33322d3332203d3e20323636343630.roa
File:                     323830343a333832383a3a2f33322d3332203d3e20323636343630.roa (raw, json)
Hash identifier:          +sb1Mvim27ZmMqLh3Us4/PVXqzgY2iD8fH1118vhnns=
Subject key identifier:   37:53:E9:BB:D8:AB:70:A5:83:CB:48:D2:26:51:1B:34:85:36:F1:09
Certificate issuer:       /CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
Certificate serial:       349B1BBA9D80A64D0FC873EFFEFC0FA95EBD710F
Authority key identifier: 46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a3a2f33322d3332203d3e20323636343630.roa
Signing time:             Tue 11 Jun 2024 13:27:42 +0000
ROA not before:           Tue 11 Jun 2024 13:22:42 +0000
ROA not after:            Tue 10 Jun 2025 13:27:42 +0000
asID:                     266460
IP address blocks:        2804:3828::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl
                          rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 09:23:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9b:1b:ba:9d:80:a6:4d:0f:c8:73:ef:fe:fc:0f:a9:5e:bd:71:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466BB256CC5A7F7C0E206E5D0FC94B894B488172
        Validity
            Not Before: Jun 11 13:22:42 2024 GMT
            Not After : Jun 10 13:27:42 2025 GMT
        Subject: CN=3753E9BBD8AB70A583CB48D226511B348536F109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:47:1c:65:77:b4:8a:ad:79:9d:d9:32:fd:34:
                    45:25:b7:38:42:ca:b3:6d:a3:41:ce:c3:32:de:05:
                    81:f8:1b:c1:dc:bc:18:03:84:fa:28:c0:ab:8b:d8:
                    2a:73:47:1d:1d:86:bb:fc:4a:a6:fe:46:7d:92:13:
                    20:41:9c:cf:d8:1a:de:a1:44:58:4b:30:4a:bf:8a:
                    ff:64:86:07:b8:a1:52:0b:a7:20:a6:ae:7e:25:08:
                    b2:c7:2e:c5:65:42:a5:93:fc:e7:76:cb:3e:b6:3e:
                    81:9b:08:53:e0:76:83:39:f5:25:ad:14:af:2f:de:
                    90:67:d2:88:f3:ff:ca:4d:0e:e0:d0:11:f0:47:db:
                    a9:c0:8b:32:c7:06:86:68:01:73:73:1d:eb:4f:0c:
                    e4:b8:6a:95:40:c6:83:db:b1:b1:8d:5f:f8:9f:4f:
                    d9:98:62:d6:8f:3c:dd:29:53:b6:a6:8f:19:99:c5:
                    65:13:93:d6:70:31:5b:a6:ff:45:64:08:d2:52:d9:
                    fb:99:67:6f:1c:f0:be:5b:11:d2:aa:b2:e5:c7:f5:
                    f3:d3:45:9f:31:30:98:3f:d5:64:0e:56:2b:8f:6d:
                    d7:ee:12:fe:71:13:dd:18:34:40:6b:e1:93:28:c4:
                    a8:8e:3b:ea:d9:90:41:47:54:43:5e:92:0b:2a:a5:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:53:E9:BB:D8:AB:70:A5:83:CB:48:D2:26:51:1B:34:85:36:F1:09
            X509v3 Authority Key Identifier:
                keyid:46:6B:B2:56:CC:5A:7F:7C:0E:20:6E:5D:0F:C9:4B:89:4B:48:81:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/466BB256CC5A7F7C0E206E5D0FC94B894B488172.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/466BB256CC5A7F7C0E206E5D0FC94B894B488172.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/323830343a333832383a3a2f33322d3332203d3e20323636343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3828::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:b6:cd:32:cf:cc:11:2a:5a:4f:31:10:75:c2:e3:32:ed:7b:
         1d:d0:84:13:d8:86:2d:fd:92:fd:d2:f3:36:b7:18:2f:41:0f:
         68:18:69:eb:d5:e6:45:09:de:00:12:47:35:b0:84:b4:57:b8:
         c3:96:28:13:bb:f9:5a:3e:43:16:51:d0:21:03:84:34:15:6a:
         44:80:9f:82:84:da:c9:6e:7b:ae:04:1c:12:60:e9:55:31:0f:
         a6:c9:7f:ae:d4:14:d7:05:87:6e:59:d0:1d:19:68:70:6d:3f:
         32:99:7e:f1:c3:85:27:f7:67:88:01:8b:7f:ad:2f:f6:a6:27:
         cc:1e:2d:84:05:fc:d3:cd:d7:c2:92:8d:e9:4c:7b:15:6f:e0:
         db:b8:21:5f:7c:0f:6f:da:ec:eb:15:1f:a2:4b:9e:0b:ed:c6:
         2d:ba:71:34:91:44:7b:3a:8d:ff:40:37:b4:25:8a:59:75:8a:
         81:09:8f:a4:4d:41:53:37:a8:fb:fa:52:a7:e9:fe:ea:75:94:
         d2:d3:42:c2:9c:08:35:53:ca:42:3a:8d:0d:3f:85:09:e9:6a:
         91:d4:ed:93:8f:c6:5a:8f:aa:79:d8:c9:74:ab:76:f7:29:bd:
         15:b6:ed:e8:b2:59:28:70:43:9e:ab:2b:43:2c:4c:ee:79:30:
         fa:f6:83:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 09:15:42 2024 by rpki-client on console-fra.rpki-client.org