Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/323830343a343834343a3a2f33322d3438203d3e20323637313038.roa
File:                     323830343a343834343a3a2f33322d3438203d3e20323637313038.roa (raw, json)
Hash identifier:          uB9XNssySZfHGUw7w1zGYWwfDVilZH1iH3knd3okjTk=
Subject key identifier:   6F:AC:F7:31:84:13:46:6E:74:7F:DB:F1:B4:9D:7B:84:79:D5:23:BF
Certificate issuer:       /CN=ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72
Certificate serial:       257B64814FE859EFF76C687E57BAB361E505B847
Authority key identifier: AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/323830343a343834343a3a2f33322d3438203d3e20323637313038.roa
Signing time:             Fri 25 Oct 2024 13:43:06 +0000
ROA not before:           Fri 25 Oct 2024 13:38:06 +0000
ROA not after:            Fri 24 Oct 2025 13:43:06 +0000
asID:                     267108
IP address blocks:        2804:4844::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.crl
                          rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7b:64:81:4f:e8:59:ef:f7:6c:68:7e:57:ba:b3:61:e5:05:b8:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72
        Validity
            Not Before: Oct 25 13:38:06 2024 GMT
            Not After : Oct 24 13:43:06 2025 GMT
        Subject: CN=6FACF7318413466E747FDBF1B49D7B8479D523BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:03:6a:e5:7a:90:64:b7:75:d6:c9:59:8a:
                    43:21:e2:e1:28:76:b9:75:81:ec:f8:f0:e1:3e:cb:
                    3f:c3:b9:47:c2:4e:14:93:c8:28:f0:8c:8c:75:e1:
                    ff:aa:26:27:22:96:05:1b:4b:f3:09:8f:48:c7:10:
                    66:a3:b1:77:6a:a4:b7:1b:44:62:d2:f3:50:11:0f:
                    d6:0e:10:ad:11:fb:c0:c0:d5:3f:68:bf:c1:c2:0d:
                    36:38:37:07:63:06:61:14:16:e8:c6:da:22:fb:c0:
                    fe:ce:37:ab:d1:f3:88:75:42:6d:18:e4:88:99:98:
                    11:23:45:48:e3:fa:e7:3f:3c:82:48:04:ee:e8:42:
                    b9:c0:21:66:19:11:82:d7:b4:d3:17:96:68:ca:47:
                    34:b5:25:8c:25:69:4f:5c:f5:59:1d:e1:02:4f:0e:
                    10:fc:a6:a2:55:87:89:6d:01:68:79:58:b5:fe:8d:
                    7a:77:93:84:9c:2a:fe:8c:b1:13:e3:79:ed:64:61:
                    25:44:b9:ac:5d:23:df:4a:ad:8f:cd:8f:5b:eb:12:
                    c3:89:f5:e3:b7:c5:73:e9:b6:41:30:34:c7:5d:ae:
                    99:76:6d:7a:ce:6a:dd:20:d1:1a:f2:11:ca:9d:a8:
                    22:1b:ec:38:dd:85:51:df:22:97:c5:95:75:bf:e6:
                    95:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:AC:F7:31:84:13:46:6E:74:7F:DB:F1:B4:9D:7B:84:79:D5:23:BF
            X509v3 Authority Key Identifier:
                keyid:AB:A0:0F:C5:B6:DB:63:AD:D2:ED:5D:33:5E:AE:47:AE:23:48:FD:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ABA00FC5B6DB63ADD2ED5D335EAE47AE2348FD72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jvtHdDLVBbuSMf2Cwta8k2nu2FE4ZxRhNSXRzQEXHsg/0/323830343a343834343a3a2f33322d3438203d3e20323637313038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4844::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:d2:6c:dd:b4:e8:8a:93:a0:43:9a:fc:d1:62:49:96:66:18:
         0c:83:12:0e:b6:e6:a6:c2:8c:72:eb:56:19:52:05:8e:78:15:
         c6:49:65:1c:7c:ae:13:4b:41:78:3e:e6:d0:18:0b:27:31:f0:
         c8:1a:25:6a:a0:af:31:2c:bd:37:34:80:a6:8d:69:2c:42:72:
         09:c0:d6:87:92:9a:fe:8c:53:9f:be:05:75:2e:b9:33:26:39:
         32:44:b7:09:31:5c:cc:38:9a:f3:d4:1a:5a:71:63:16:12:c2:
         a6:c9:be:6c:95:19:1f:b1:fd:a0:01:c7:40:7a:01:f4:51:32:
         c0:19:07:ca:03:b2:8c:cb:44:c1:bf:6a:e9:43:49:2a:ee:63:
         2d:44:fb:3f:46:e4:a1:a5:ff:3f:53:08:28:cb:78:a2:e5:3c:
         87:3b:5c:02:a8:33:d2:69:94:71:fb:30:68:fc:1c:9f:9c:51:
         b8:dc:84:bd:2a:44:71:b9:d3:8d:ad:18:5a:30:5a:66:f1:b6:
         1d:d3:ca:f7:80:e8:2f:5b:c5:9b:55:94:95:8b:2a:2e:52:ea:
         a6:cc:bd:1f:7b:17:88:6c:0a:76:44:eb:b7:62:40:8a:88:c5:
         74:47:ef:d3:aa:fe:59:2e:e9:9e:1c:e3:00:33:68:91:80:40:
         b8:1c:c1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:28 2024 by rpki-client on console-ams.rpki-client.org