Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a3a2f33322d3336203d3e20323639323838.roa
File:                     323830343a363234383a3a2f33322d3336203d3e20323639323838.roa (raw, json)
Hash identifier:          eTPYkdb2mX37cxm63Xf/O0Dl0paeHsYrWPSKjran+YE=
Subject key identifier:   91:5C:A2:5F:3C:8F:8E:7E:40:34:F3:7E:0A:54:6F:AF:8F:D5:73:33
Certificate issuer:       /CN=41E49D87299166D22055B6ADC5AA3AED91A219F6
Certificate serial:       18DA9C3BAF80C4BC0E677713AE3E4D0F3C497A5C
Authority key identifier: 41:E4:9D:87:29:91:66:D2:20:55:B6:AD:C5:AA:3A:ED:91:A2:19:F6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a3a2f33322d3336203d3e20323639323838.roa
Signing time:             Fri 12 Jul 2024 00:02:22 +0000
ROA not before:           Thu 11 Jul 2024 23:57:22 +0000
ROA not after:            Fri 11 Jul 2025 00:02:22 +0000
asID:                     269288
IP address blocks:        2804:6248::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.crl
                          rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:da:9c:3b:af:80:c4:bc:0e:67:77:13:ae:3e:4d:0f:3c:49:7a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E49D87299166D22055B6ADC5AA3AED91A219F6
        Validity
            Not Before: Jul 11 23:57:22 2024 GMT
            Not After : Jul 11 00:02:22 2025 GMT
        Subject: CN=915CA25F3C8F8E7E4034F37E0A546FAF8FD57333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:c4:b2:ec:fe:fa:38:74:3d:64:2b:0a:fe:
                    e2:a1:4c:91:33:bf:bb:a4:4e:8d:f7:13:e3:1c:63:
                    51:07:aa:7f:56:6b:5f:dd:fa:7e:96:ce:a6:59:36:
                    49:47:2c:5e:c0:df:d1:5b:68:d9:60:ee:9f:42:a3:
                    81:b0:bf:49:d2:40:13:fb:db:b9:8f:c3:57:f3:f0:
                    74:3c:9c:db:2c:d7:18:c6:45:b1:9b:1c:e1:a5:b2:
                    dc:84:a0:ac:5b:2e:29:3c:4f:b6:eb:72:8f:74:93:
                    1f:29:9e:fd:bf:d2:18:31:db:5e:6c:c3:af:83:cf:
                    b2:bf:33:2f:11:ba:44:de:d8:be:38:b1:28:c0:56:
                    74:7b:19:78:58:1e:e5:5e:8b:b7:48:3e:17:25:67:
                    2f:a0:22:ab:fa:d8:b9:61:be:ae:cf:f9:af:af:09:
                    43:0a:54:26:5e:36:f3:96:75:e6:a1:69:9f:e3:cc:
                    c7:a5:10:e1:e4:ec:1c:80:8a:59:c0:7b:90:6d:5f:
                    96:96:bf:84:f8:1a:d8:d3:b6:23:ca:bd:c3:a2:fe:
                    a3:bd:71:db:fc:14:e1:74:50:20:35:31:31:a8:c9:
                    53:d4:20:3c:bc:7e:8f:ed:e7:a2:d2:df:27:2f:3d:
                    33:c8:e4:0a:41:f5:30:05:b1:ba:49:1f:1e:4a:39:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:A2:5F:3C:8F:8E:7E:40:34:F3:7E:0A:54:6F:AF:8F:D5:73:33
            X509v3 Authority Key Identifier:
                keyid:41:E4:9D:87:29:91:66:D2:20:55:B6:AD:C5:AA:3A:ED:91:A2:19:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/41E49D87299166D22055B6ADC5AA3AED91A219F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41E49D87299166D22055B6ADC5AA3AED91A219F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jCG2VqQF64eAyqeqam7y9Spba75DWdar2ZkLCutKMLa/0/323830343a363234383a3a2f33322d3336203d3e20323639323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6248::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:db:cd:6a:68:c4:f7:4e:dd:9f:8e:ad:c3:1d:be:6b:5a:
         f8:1f:be:e7:f4:23:02:4c:2b:cf:4a:a4:35:b5:5a:d5:f4:9b:
         71:08:5c:d6:bf:18:a2:ab:e2:04:43:b9:29:1d:10:b2:d6:20:
         c0:b5:59:54:15:83:0b:8a:ed:d5:68:d2:32:03:c1:eb:0b:46:
         ef:a1:ba:04:a6:19:49:7e:e6:ac:b4:09:2c:cf:fb:fa:21:be:
         d9:9f:92:89:25:7d:e7:b0:2f:5d:2b:6a:f5:66:e5:ed:7a:39:
         77:c5:5a:61:82:4f:d3:1d:03:e2:46:56:76:41:92:c8:34:a2:
         ce:47:65:59:a0:3b:59:92:9c:de:1b:f1:b2:5d:34:2e:84:ac:
         1c:7c:04:ab:c7:d3:24:f2:78:d5:b7:f5:37:0b:ee:6c:8b:45:
         78:d2:7a:7b:e6:ba:4b:d0:7f:a5:6b:59:81:3a:35:91:3e:12:
         30:36:86:63:cf:6f:f3:3c:f8:76:3d:f4:43:55:9d:8e:a5:3f:
         f3:ba:ca:5e:0e:6e:ed:14:a8:cb:35:38:9a:a1:b4:48:b6:4e:
         bf:f1:a1:f0:cb:1b:e2:53:5f:57:61:4d:06:38:06:c9:12:8a:
         d4:d1:f3:6c:62:e0:6b:f4:9a:53:1a:d9:41:91:63:58:75:bc:
         d0:a5:0a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:53:02 2024 by rpki-client on console-ams.rpki-client.org