Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          g3s3ZUqRQWPQ4xDHsd6WmQuXdmBxeEu5eTuiGn6Pqe8=
Subject key identifier:   8C:2D:C8:FF:49:0C:98:72:66:3B:D3:08:38:7B:B6:83:B9:4F:81:D7
Certificate issuer:       /CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
Certificate serial:       053BDB06F44CEB0F37417211C3FFDFA5F3E50489
Authority key identifier: 77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Thu 23 May 2024 23:55:57 +0000
ROA not before:           Thu 23 May 2024 23:50:57 +0000
ROA not after:            Thu 22 May 2025 23:55:57 +0000
asID:                     271484
IP address blocks:        2804:7c40:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl
                          rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 21:04:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:3b:db:06:f4:4c:eb:0f:37:41:72:11:c3:ff:df:a5:f3:e5:04:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD
        Validity
            Not Before: May 23 23:50:57 2024 GMT
            Not After : May 22 23:55:57 2025 GMT
        Subject: CN=8C2DC8FF490C9872663BD308387BB683B94F81D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:be:e4:45:ba:38:36:a1:3f:fb:a3:2d:7b:
                    50:4c:d8:4b:ad:73:da:5b:12:98:a5:35:84:75:65:
                    29:d3:00:be:c6:f1:2f:9a:d0:4c:31:60:0a:e8:5d:
                    6b:0c:e9:29:0e:bc:17:a8:35:8f:d8:ad:d4:3f:a4:
                    e8:5a:9f:12:47:fc:42:97:28:e2:63:1a:f9:ff:f2:
                    98:ca:e3:b4:c6:36:f5:86:6d:fc:9d:51:87:4e:85:
                    91:20:05:0c:af:3a:a8:05:cb:d6:78:eb:7e:af:35:
                    43:fc:a6:07:08:3f:7f:e8:9a:73:f3:95:aa:b5:f2:
                    d3:d2:b0:84:35:e8:7a:4f:61:a1:87:71:82:4f:de:
                    fb:53:a8:17:c3:cf:04:82:20:54:27:4e:f2:6b:be:
                    81:e1:97:27:1f:83:ac:80:0a:16:c3:9a:a2:5b:25:
                    7a:11:cb:1c:7c:8d:b3:71:af:ef:ef:85:cf:0a:d8:
                    82:7e:41:36:fa:55:0a:a6:dc:7a:e7:6c:73:3d:27:
                    20:24:d8:1e:45:1b:20:e0:b0:4e:ce:f7:8f:1b:f7:
                    95:8a:02:69:f1:5b:d3:ee:a0:8f:58:2f:6e:bc:89:
                    41:fa:c5:84:fb:7a:ec:28:8f:a2:cc:4a:c2:c9:8b:
                    86:b7:df:a7:17:88:f9:8b:1b:86:c9:cb:ac:8c:f1:
                    22:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2D:C8:FF:49:0C:98:72:66:3B:D3:08:38:7B:B6:83:B9:4F:81:D7
            X509v3 Authority Key Identifier:
                keyid:77:19:B4:6C:C2:C7:4F:9E:A6:E2:46:A3:FF:A5:BB:47:77:EE:08:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7719B46CC2C74F9EA6E246A3FFA5BB4777EE08FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/1/323830343a376334303a3430303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:97:75:ed:11:f5:3f:d4:d7:e9:af:e2:4c:dc:7c:d3:8e:bd:
         ec:28:53:58:03:1a:2f:43:6e:5f:ea:19:95:3a:b5:97:1f:eb:
         b9:e1:49:ff:90:74:43:5b:69:96:7e:a7:18:b4:78:99:e3:14:
         b4:c5:07:4a:47:45:0a:48:e9:ca:e8:52:5b:a4:b3:f7:c1:dd:
         e5:bf:63:00:37:90:bb:7f:24:50:b9:9b:a4:db:53:88:35:cf:
         3c:7f:72:b6:e5:76:fe:de:1f:c7:05:2f:95:1d:8b:7f:48:5e:
         24:93:f1:b5:34:ca:fe:a3:99:3e:a8:f9:1a:db:6c:46:d7:e6:
         de:e2:71:75:6a:ca:c6:e0:68:e1:10:d7:2e:b0:09:ab:c0:10:
         2f:f4:44:4c:f1:e8:82:2a:25:65:3f:a5:4c:2a:69:6f:0b:c8:
         5e:54:62:de:39:aa:23:a7:05:b1:6d:89:6a:2d:80:25:72:2d:
         a7:0d:df:14:1f:4c:75:7b:75:e1:e6:30:09:56:c7:f8:18:0b:
         c5:23:0b:3f:c6:2c:5b:84:d6:a8:49:7c:1e:cc:54:d9:e2:49:
         65:63:28:47:da:c2:f5:b6:92:ba:e0:03:38:28:b1:22:44:28:
         31:dd:5c:d4:35:de:e2:6a:6a:69:0a:89:27:dd:2d:f2:6b:52:
         e6:f7:66:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 21:10:59 2024 by rpki-client on console-ams.rpki-client.org