Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa
File:                     323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (raw, json)
Hash identifier:          WCiQ7npwxvYwjEsVAoL/1atR/WFxgA7ucHp2xf6/lvs=
Subject key identifier:   14:20:FB:E0:B6:B5:6F:3F:CF:52:E7:E4:A2:96:14:D6:5E:49:A2:03
Certificate issuer:       /CN=0E88601104C6C43AC785175C29585EFD06974620
Certificate serial:       54ADE9CB3E9CA49530F740F6A71C63951B978B00
Authority key identifier: 0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa
Signing time:             Thu 04 Apr 2024 08:02:39 +0000
ROA not before:           Thu 04 Apr 2024 07:57:39 +0000
ROA not after:            Thu 03 Apr 2025 08:02:39 +0000
asID:                     264589
IP address blocks:        2804:2210::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl
                          rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:18:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ad:e9:cb:3e:9c:a4:95:30:f7:40:f6:a7:1c:63:95:1b:97:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E88601104C6C43AC785175C29585EFD06974620
        Validity
            Not Before: Apr  4 07:57:39 2024 GMT
            Not After : Apr  3 08:02:39 2025 GMT
        Subject: CN=1420FBE0B6B56F3FCF52E7E4A29614D65E49A203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:4e:1c:51:a0:98:93:ac:2b:bc:b3:80:7e:
                    d2:3b:65:b8:5a:a0:06:79:61:6b:41:5e:a5:cf:9b:
                    64:40:42:b5:d9:f7:ca:ad:09:91:3f:0b:a4:57:9b:
                    b6:4f:47:4e:f2:a2:2d:6b:3a:cb:89:ab:5b:6c:aa:
                    cf:74:2c:28:d0:ea:41:a3:1c:ab:be:24:8f:50:b8:
                    b7:1f:0a:dc:a5:1a:32:a8:4e:ab:d2:94:78:04:18:
                    86:95:df:3a:18:e2:ab:cc:27:82:2e:08:6b:29:0a:
                    ee:38:41:34:a4:ad:b7:2f:b2:32:09:65:7f:5c:27:
                    28:e4:52:21:21:04:35:ab:d7:be:4a:ae:fd:85:7e:
                    cd:38:ca:f8:9b:2a:1b:02:b3:44:53:96:6f:78:56:
                    a2:5b:a2:ed:83:7a:29:24:db:d1:ad:9e:ec:df:d9:
                    17:b2:e2:4d:47:4f:43:a1:71:78:96:84:1c:d3:17:
                    8d:6a:d5:72:5c:a7:59:37:ad:f7:3b:d6:6b:68:fc:
                    2d:50:1d:41:71:c6:62:81:0e:ff:8c:c9:2b:bb:49:
                    71:f3:d9:ce:3f:73:25:fb:b7:4d:ad:a5:b1:43:c4:
                    5b:87:b1:46:77:42:dd:25:7c:5f:d0:aa:1d:24:30:
                    b2:85:2d:a8:43:af:e8:71:e1:8d:0d:b0:78:aa:b7:
                    1b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:20:FB:E0:B6:B5:6F:3F:CF:52:E7:E4:A2:96:14:D6:5E:49:A2:03
            X509v3 Authority Key Identifier:
                keyid:0E:88:60:11:04:C6:C4:3A:C7:85:17:5C:29:58:5E:FD:06:97:46:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/0E88601104C6C43AC785175C29585EFD06974620.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E88601104C6C43AC785175C29585EFD06974620.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/1/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:13:2e:94:29:db:02:bc:69:f5:95:be:ea:03:ec:09:4c:12:
         92:04:68:a6:ec:7b:d4:05:99:cc:27:e7:97:46:12:14:15:67:
         4f:a2:ce:08:df:97:7a:73:66:b6:1f:47:77:56:39:54:7d:4b:
         98:33:84:e1:6b:eb:bb:10:ed:36:22:6b:8a:90:11:70:35:8c:
         c2:d3:2b:f2:e7:74:0f:a8:40:b2:66:5c:4f:83:5e:a4:44:d0:
         ca:83:b2:41:29:5c:2c:cb:da:84:d1:a7:4b:63:1a:74:17:cc:
         66:18:45:45:88:63:21:3f:62:ba:53:b4:c8:89:4c:02:5b:d3:
         a3:25:b7:78:24:0c:81:b9:49:62:b8:c9:6d:28:c9:da:fc:d1:
         df:1e:ff:7c:7d:95:92:3a:15:16:4f:ec:5b:cb:bd:56:d7:ab:
         7c:09:b4:18:26:29:15:7b:de:0f:d2:91:26:af:c1:ad:01:73:
         92:37:fc:a9:d9:f1:a2:74:9f:47:bf:02:89:04:39:bd:90:a8:
         db:91:54:1c:97:75:ec:8e:7c:e1:e7:55:6a:a7:a3:41:ef:6b:
         c2:9e:96:b9:3e:76:33:bd:45:ed:3e:83:e5:c9:9e:a1:72:65:
         3d:8c:24:e2:9f:25:44:09:2d:17:75:74:c3:21:12:74:14:8b:
         d1:c5:72:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:58 2024 by rpki-client on console-ams.rpki-client.org