Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/323830343a333963303a3a2f33322d3332203d3e20323636303438.roa
File:                     323830343a333963303a3a2f33322d3332203d3e20323636303438.roa (raw, json)
Hash identifier:          12uMKHcsrXuwhWP4dj6dAWjUQzA2hxucFdMATLxIhK4=
Subject key identifier:   61:63:4B:6E:82:40:8C:5C:B2:49:A0:E7:9A:1E:C6:4F:32:7A:C0:DA
Certificate issuer:       /CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
Certificate serial:       7B4D4B63BCFD4E3F6B6005D6F45C1C17C9441A0E
Authority key identifier: 31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/323830343a333963303a3a2f33322d3332203d3e20323636303438.roa
Signing time:             Wed 03 Apr 2024 19:30:49 +0000
ROA not before:           Wed 03 Apr 2024 19:25:49 +0000
ROA not after:            Wed 02 Apr 2025 19:30:49 +0000
asID:                     266048
IP address blocks:        2804:39c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl
                          rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4d:4b:63:bc:fd:4e:3f:6b:60:05:d6:f4:5c:1c:17:c9:44:1a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BAD9808DE804903AA6C65BBE33CBEE1C991D9A
        Validity
            Not Before: Apr  3 19:25:49 2024 GMT
            Not After : Apr  2 19:30:49 2025 GMT
        Subject: CN=61634B6E82408C5CB249A0E79A1EC64F327AC0DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:62:e7:13:80:28:10:35:82:8e:d6:57:92:
                    37:13:b5:61:a0:19:fd:ac:67:a2:9e:d0:f2:4c:85:
                    2a:89:30:5d:ab:cd:6d:b4:ae:1d:38:ea:74:72:af:
                    42:5b:bb:d5:b0:93:9b:48:48:f4:3f:9f:b4:56:db:
                    cd:93:4d:b3:8b:ad:65:af:1b:28:f5:31:ba:56:85:
                    76:02:14:68:1f:1a:7b:de:18:9c:b3:c5:50:bd:ed:
                    cd:47:74:0f:74:9b:36:60:6c:84:9b:a9:b2:96:c1:
                    96:da:e9:f8:e0:cd:db:4b:79:57:5c:53:96:54:99:
                    44:f1:5b:79:37:22:f5:0c:57:ff:58:72:d7:95:ba:
                    c4:c4:89:7d:58:c5:42:7a:27:24:2b:f1:09:b7:69:
                    df:38:b0:c5:ab:55:16:0f:14:9d:90:d8:f5:f3:bf:
                    5e:47:f5:2f:10:4b:7d:63:c4:5e:0a:b0:31:42:ff:
                    57:34:5a:c0:97:12:ab:86:96:78:9a:94:fa:42:3b:
                    5e:fb:57:13:38:74:0c:1e:5c:35:a6:f4:c3:1e:f1:
                    c6:91:42:3c:48:a1:7c:0b:0b:b2:c1:12:f7:63:95:
                    87:95:da:e0:ce:94:ff:3f:d6:54:6f:6a:34:94:d2:
                    20:3f:1c:2c:be:7e:49:70:b3:ae:66:f3:08:1b:b1:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:4B:6E:82:40:8C:5C:B2:49:A0:E7:9A:1E:C6:4F:32:7A:C0:DA
            X509v3 Authority Key Identifier:
                keyid:31:BA:D9:80:8D:E8:04:90:3A:A6:C6:5B:BE:33:CB:EE:1C:99:1D:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31BAD9808DE804903AA6C65BBE33CBEE1C991D9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/1/323830343a333963303a3a2f33322d3332203d3e20323636303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:22:51:4a:34:fc:ea:88:d6:88:7c:7f:25:56:a1:b6:01:6d:
         e0:f1:bb:ca:b6:dc:a8:7c:db:91:5b:54:13:a1:c9:8e:f1:b6:
         22:6c:a3:cf:4a:2c:fb:4c:43:fc:e4:5f:0e:8b:41:42:0e:e6:
         9a:68:8a:84:8e:66:e1:48:fc:62:5e:48:58:39:87:d1:8a:62:
         c6:78:18:20:17:8c:30:8e:38:57:a0:c0:f4:6e:0e:9b:b1:b4:
         f8:c8:f9:85:64:fd:62:e3:8a:6b:6d:14:86:69:e3:67:22:ca:
         31:1a:c1:ae:ec:b9:1e:12:83:21:4e:51:23:f3:22:c4:1b:5e:
         ab:b7:39:9a:47:cd:a7:9e:65:05:15:50:32:89:92:53:1b:ab:
         8c:c1:ec:17:ef:7d:4a:96:1f:de:8b:7b:e4:9b:33:ae:5b:96:
         00:33:b7:09:fd:be:e2:a7:b4:ac:d0:23:bc:da:3c:7a:15:6d:
         6d:cc:28:f5:c9:23:2b:ec:b0:25:73:7b:5d:72:77:39:b8:ac:
         74:42:6c:c4:22:c3:7d:ae:c3:41:d2:3f:ed:47:59:7d:92:fa:
         ca:0d:9b:2f:49:10:c9:d8:87:0e:91:bf:f6:ff:21:78:4c:67:
         d3:4b:25:46:75:ef:70:54:0f:ed:26:46:6e:78:93:f7:fd:38:
         3a:ab:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:36 2024 by rpki-client on console-ams.rpki-client.org