Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa
File:                     323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa (raw, json)
Hash identifier:          ZXads/aFey/3XQmK268sFPHejKJLCSiwk8VypKgVkeA=
Subject key identifier:   C8:7E:E4:95:F1:E7:C1:A2:8F:27:2B:8C:96:EB:1F:F5:C8:45:B6:F8
Certificate issuer:       /CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
Certificate serial:       6183A1B8BFFE9ACDEC256CB4E28DF0099D0A9809
Authority key identifier: E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa
Signing time:             Thu 04 Apr 2024 03:38:28 +0000
ROA not before:           Thu 04 Apr 2024 03:33:28 +0000
ROA not after:            Thu 03 Apr 2025 03:38:28 +0000
asID:                     268513
IP address blocks:        2804:525c:9080::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl
                          rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 00:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:83:a1:b8:bf:fe:9a:cd:ec:25:6c:b4:e2:8d:f0:09:9d:0a:98:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D8CCD977C22C786BC1F173FC4E7792E8A4420A
        Validity
            Not Before: Apr  4 03:33:28 2024 GMT
            Not After : Apr  3 03:38:28 2025 GMT
        Subject: CN=C87EE495F1E7C1A28F272B8C96EB1FF5C845B6F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fa:32:d6:7c:3c:12:4e:e6:d0:2a:52:a9:a1:
                    8e:78:9f:c7:48:2d:c1:17:9e:b5:b8:02:f7:3d:3a:
                    65:0b:af:aa:a0:de:48:7f:86:3e:f2:a5:ef:35:9c:
                    fa:88:fb:03:d3:5d:bc:3d:bd:35:1c:f1:ed:96:1a:
                    7b:a6:48:e2:3b:3f:e4:ad:39:e0:20:ac:ff:d1:16:
                    d9:0e:06:bf:2c:6a:33:86:48:4f:9a:3d:72:cf:4d:
                    ab:7e:5f:09:6c:2d:54:db:98:0c:92:e6:eb:61:5a:
                    13:6b:ac:1a:22:30:92:ff:d2:0d:6b:2d:90:87:2a:
                    2b:98:61:f5:84:9d:68:25:a9:41:f0:ac:0a:3b:b2:
                    ba:c0:63:d5:16:8f:c1:a1:99:84:b0:4b:97:74:90:
                    eb:58:aa:c3:d8:36:4c:8c:b8:e0:c6:72:fe:68:e8:
                    b6:6a:a1:aa:1e:ce:7c:74:bc:10:b5:97:5c:0f:4d:
                    ad:1e:97:e9:ff:3b:46:13:66:5e:ec:7f:c3:fd:28:
                    22:9b:f6:82:5f:2a:cd:82:49:41:fc:89:49:d2:c2:
                    67:64:78:d4:a6:4d:52:20:23:c6:99:53:26:c2:30:
                    77:51:f1:29:4c:c3:e3:8f:24:fa:bf:e9:e1:7c:c8:
                    92:9c:b0:68:5d:bd:c8:7a:c9:5d:20:f9:b3:73:f3:
                    d8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7E:E4:95:F1:E7:C1:A2:8F:27:2B:8C:96:EB:1F:F5:C8:45:B6:F8
            X509v3 Authority Key Identifier:
                keyid:E4:D8:CC:D9:77:C2:2C:78:6B:C1:F1:73:FC:4E:77:92:E8:A4:42:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D8CCD977C22C786BC1F173FC4E7792E8A4420A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/1/323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:525c:9080::/41

    Signature Algorithm: sha256WithRSAEncryption
         52:b6:92:af:87:78:a6:e9:5e:59:93:a8:91:b8:3a:fb:47:0e:
         09:6e:76:a3:75:fd:80:7b:b2:55:24:c6:43:3c:6c:d3:38:0a:
         fe:d7:38:e6:0c:61:fd:2e:56:25:77:c8:58:39:d8:e5:ed:4d:
         dd:a5:8a:1c:3a:88:12:4a:d1:5e:d2:43:2b:3c:17:89:2a:e7:
         86:56:43:ba:06:9b:f4:c8:da:d0:40:16:af:7e:fd:e5:56:1c:
         90:3e:02:77:12:4a:36:26:bf:bf:74:33:97:85:0b:60:61:10:
         08:37:54:0c:8f:b5:7c:5a:4a:71:40:d6:9a:8f:94:91:ad:5c:
         68:4c:3e:3a:99:fd:5f:d7:19:f9:a9:06:4e:72:8b:15:e4:cb:
         c4:f7:4b:3d:6e:1c:51:d2:dd:0a:6c:da:cc:ee:64:0e:72:14:
         11:7a:3b:58:7f:16:d5:ea:5a:4f:9b:c9:13:f9:d6:01:f7:48:
         45:ce:54:22:8d:4a:bd:8d:43:cd:47:0b:22:18:85:d9:4c:46:
         e0:26:4e:9b:06:9c:58:9d:ee:62:19:51:41:eb:74:35:e5:31:
         f2:a3:ce:22:52:6a:dc:73:c9:21:c8:21:d9:2e:93:89:e6:7c:
         ca:15:3e:67:57:2f:3e:22:b3:80:28:07:fe:c0:f4:66:11:e8:
         4f:d1:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:07 2024 by rpki-client on console-ams.rpki-client.org