Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
File:                     323830343a6630383a3a2f33322d3332203d3e20323633353633.roa (raw, json)
Hash identifier:          v3KpC89mAVz/ttNsx08IH0U36s6BlSgeISOqqwltiK4=
Subject key identifier:   35:8D:32:AD:AD:89:25:55:28:65:8B:98:77:4A:3B:D3:E4:66:B2:0C
Certificate issuer:       /CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
Certificate serial:       24AB41F32B03CDF245981C276E59755948026445
Authority key identifier: 8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa
Signing time:             Thu 04 Apr 2024 13:58:04 +0000
ROA not before:           Thu 04 Apr 2024 13:53:04 +0000
ROA not after:            Thu 03 Apr 2025 13:58:04 +0000
asID:                     263563
IP address blocks:        2804:f08::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl
                          rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ab:41:f3:2b:03:cd:f2:45:98:1c:27:6e:59:75:59:48:02:64:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7
        Validity
            Not Before: Apr  4 13:53:04 2024 GMT
            Not After : Apr  3 13:58:04 2025 GMT
        Subject: CN=358D32ADAD89255528658B98774A3BD3E466B20C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:9d:a3:61:47:51:91:03:3e:9a:a8:9e:5d:
                    52:2e:50:8c:53:e9:ba:0f:4d:05:19:11:a4:3d:46:
                    19:09:5d:b4:3f:32:1c:e7:ab:8d:c1:71:4b:28:aa:
                    b3:fa:57:9f:b3:32:8c:7b:44:32:8b:80:59:8c:38:
                    9e:45:37:d1:ab:62:b2:39:d2:ce:07:d8:72:63:5f:
                    f9:87:5f:a0:a5:9f:46:6b:a6:34:03:24:51:ee:8e:
                    ca:9a:31:0f:8d:86:ec:a6:d5:e2:79:ab:af:39:ca:
                    a3:a7:b8:81:2a:26:43:16:1b:e8:81:7e:cf:c1:91:
                    47:a7:03:5b:3c:4f:35:31:09:ee:a7:4a:e8:3f:b0:
                    e7:64:42:77:e3:80:3a:e4:12:df:d2:95:8f:86:e0:
                    9b:6d:2e:7c:80:d9:d3:37:45:23:6b:4f:b4:6b:23:
                    61:75:a5:db:9a:00:1b:ba:57:5f:dd:4d:e9:6a:cf:
                    3e:48:0f:a9:31:ee:3c:85:5e:46:f4:ff:6e:45:e2:
                    f1:b1:a1:ec:76:9a:76:06:b4:f0:4d:cf:e6:22:f1:
                    c0:54:6e:6c:86:9e:bb:2f:55:3f:6c:b5:40:ab:48:
                    2a:06:fe:b8:4d:d0:2c:a4:e8:70:2f:5e:5e:b0:23:
                    75:e1:25:18:7e:2f:bc:bb:35:36:30:d1:fd:1e:75:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8D:32:AD:AD:89:25:55:28:65:8B:98:77:4A:3B:D3:E4:66:B2:0C
            X509v3 Authority Key Identifier:
                keyid:8E:AE:8D:1A:E6:A6:86:9C:FE:54:E3:74:20:1A:54:F2:E0:93:4E:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EAE8D1AE6A6869CFE54E374201A54F2E0934EC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4SMvmsq1aev8C13vrn5dU1pLzGp1wGFBnzgmNJj8sW6J/1/323830343a6630383a3a2f33322d3332203d3e20323633353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f08::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:6b:32:df:34:71:41:b6:4a:29:a5:f4:fd:ea:15:4b:a1:f3:
         88:9c:8b:70:b0:a2:2c:78:dc:02:a5:ce:a3:2b:6e:98:09:ed:
         52:97:b0:72:b5:96:88:8e:d3:1f:c1:57:e4:1d:af:fb:12:5f:
         3d:5d:26:7e:78:d0:41:6d:f4:f1:e7:4a:4f:36:71:ed:c6:0d:
         9a:6b:f8:5f:53:8a:75:8b:1c:41:c3:65:c3:8c:dd:e3:93:fb:
         df:cd:03:bd:21:d1:e4:a9:e0:a4:27:be:47:9d:58:cf:bf:9d:
         bb:b3:d1:78:5a:7c:30:f7:00:50:b5:85:48:ed:ea:cb:5d:e4:
         03:d2:a4:1c:df:2f:d5:85:00:2f:22:51:df:00:f8:6d:61:1d:
         be:60:8b:38:c5:db:09:90:73:01:d1:39:7b:31:f3:73:46:cb:
         a8:c8:33:99:60:3b:ed:e4:4e:24:25:4b:65:f9:cb:bc:97:aa:
         2e:f0:6b:e9:5b:24:29:f9:20:23:1b:68:ed:cf:59:27:ab:f5:
         a9:67:54:c2:20:74:a2:b9:92:ed:6a:4b:74:cf:2a:82:aa:c0:
         71:27:54:bb:9a:53:e3:bc:5c:53:75:5e:74:0b:33:c0:10:6a:
         63:ce:b2:df:22:89:e1:1f:2b:df:30:2b:1e:25:bd:ae:a8:8a:
         81:0d:a9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:57 2024 by rpki-client on console-ams.rpki-client.org