Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
File:                     323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (raw, json)
Hash identifier:          QExSczG77rM6Jzqz9t4t0Zx+qETXFMD2QgmpGyI57y0=
Subject key identifier:   A7:C7:DD:FE:CF:11:F0:C8:46:AE:E5:3D:C9:BD:1D:9A:23:9F:C5:97
Certificate issuer:       /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial:       333D02AB90C8657DD612EBFD0FDC4F129A4B7EA3
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
Signing time:             Thu 04 Apr 2024 06:28:08 +0000
ROA not before:           Thu 04 Apr 2024 06:23:08 +0000
ROA not after:            Thu 03 Apr 2025 06:28:08 +0000
asID:                     268874
IP address blocks:        2804:5be0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
                          rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:08:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:3d:02:ab:90:c8:65:7d:d6:12:eb:fd:0f:dc:4f:12:9a:4b:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
        Validity
            Not Before: Apr  4 06:23:08 2024 GMT
            Not After : Apr  3 06:28:08 2025 GMT
        Subject: CN=A7C7DDFECF11F0C846AEE53DC9BD1D9A239FC597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:84:c4:67:88:f9:f6:a9:1c:ad:24:7a:a8:b6:
                    95:97:db:60:29:f4:e9:da:cc:80:1a:af:64:35:7a:
                    72:cf:87:a8:27:20:e9:60:21:19:aa:ff:fb:9b:7e:
                    67:1c:2b:42:bb:d6:3b:20:d9:29:f1:53:a4:19:19:
                    1d:62:e6:5e:fd:15:8a:5c:47:1a:a9:e1:86:2b:99:
                    73:10:05:61:d4:41:4c:dd:28:1f:31:48:a7:10:36:
                    52:12:fe:31:5b:ea:72:58:f3:e6:21:2f:3b:bb:d1:
                    2e:dd:49:36:ab:9e:01:1f:bd:57:0e:2c:5c:bf:0f:
                    d8:be:09:76:7b:00:d6:7f:70:8b:1a:93:a0:61:81:
                    36:56:81:98:a7:ea:fb:c1:69:b8:0a:0e:e9:68:4c:
                    c1:76:c5:e6:0a:f3:08:b0:c3:42:50:d1:df:28:91:
                    fe:7a:fe:6a:2c:d9:9d:5e:ff:63:f1:99:1c:49:a0:
                    38:d5:e2:ee:fc:12:70:d4:86:f1:47:12:3d:7d:43:
                    42:60:c5:67:82:57:9d:a0:92:c0:e1:cf:25:45:e2:
                    bc:00:e5:31:4f:d8:d3:72:de:df:fe:30:48:28:47:
                    8c:c4:58:d8:75:25:82:51:9f:14:d7:c3:e4:6d:f2:
                    7d:22:10:9b:a2:42:22:51:84:3e:bc:da:e5:dd:0d:
                    d2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:DD:FE:CF:11:F0:C8:46:AE:E5:3D:C9:BD:1D:9A:23:9F:C5:97
            X509v3 Authority Key Identifier:
                keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:7f:fe:a9:c9:1c:2a:f1:fd:d7:d6:99:74:d2:d6:d0:9a:
         b5:ad:97:de:9f:2a:66:77:99:66:23:95:d1:c3:a2:72:2e:56:
         36:00:e3:8b:c7:86:e1:6e:15:28:d7:30:d3:c4:d6:2d:e5:d4:
         34:55:c7:e9:25:05:20:97:77:c2:6b:fa:96:21:2c:be:78:21:
         7b:0b:30:8a:32:52:95:7c:5f:e4:6a:d7:31:f0:83:db:29:2b:
         77:5a:b4:f1:12:9e:cf:db:c4:b6:32:0e:53:ef:00:08:79:8a:
         88:4f:f4:a4:5c:de:d9:48:25:fa:40:bd:5e:fd:15:96:e6:35:
         61:25:42:3f:df:90:a1:02:51:f1:ed:e0:0e:a4:e9:ad:d3:15:
         12:11:27:d1:b7:56:4d:25:ca:37:f3:97:df:33:13:a1:0c:57:
         9a:72:12:e0:a1:b0:c5:b6:fa:3f:0d:ca:21:38:92:31:aa:00:
         48:27:ea:23:97:c5:e3:e7:5a:01:7c:ee:ac:b5:c1:0a:62:43:
         64:d7:b1:13:8d:0d:03:25:bb:d6:11:86:95:ac:ca:2c:c7:f5:
         e9:14:c4:fe:6f:47:b2:0a:26:c3:7a:a8:5f:3d:f9:d4:9a:7d:
         0b:81:32:db:c9:0f:e4:70:f7:56:b6:3e:24:79:e8:b5:28:32:
         f8:e0:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org