Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa
File:                     323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa (raw, json)
Hash identifier:          8NBTAQVp6nGi6qaQQ7ZhbNpOE4nPMmXYQW4RLY9pYzY=
Subject key identifier:   3A:F3:FD:29:08:48:D6:C6:C6:C3:72:42:BD:D3:0B:31:EF:B6:0D:AF
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       36A1758E7AEECB357A22223E2635281E66638269
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:30:34 +0000
ROA not before:           Mon 23 Sep 2024 19:25:34 +0000
ROA not after:            Mon 22 Sep 2025 19:30:34 +0000
asID:                     272218
IP address blocks:        2804:83c4:100::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a1:75:8e:7a:ee:cb:35:7a:22:22:3e:26:35:28:1e:66:63:82:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:25:34 2024 GMT
            Not After : Sep 22 19:30:34 2025 GMT
        Subject: CN=3AF3FD290848D6C6C6C37242BDD30B31EFB60DAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:83:ff:43:46:76:a7:df:b8:2c:08:58:8a:c7:
                    2a:a2:94:97:ac:90:8d:d6:92:5d:72:24:51:44:18:
                    c6:17:25:0c:5f:1f:db:cc:cc:01:a4:ec:71:c9:8a:
                    ed:cf:f0:a5:d2:94:60:36:57:64:df:05:ef:d5:4d:
                    0d:f5:67:07:5a:2c:d7:4c:e4:f0:0a:2f:f6:a0:91:
                    a6:0c:9d:99:dd:a9:6c:da:59:b9:46:c1:50:01:ed:
                    14:ed:3d:82:9d:2e:82:89:eb:b8:e3:6b:01:29:9d:
                    be:9b:e6:71:43:9d:fd:8b:40:6d:94:57:22:1c:2c:
                    75:5b:db:72:93:3f:6e:aa:8b:5e:8c:e7:7e:f3:ca:
                    4b:f6:d8:ba:3e:c6:de:f8:18:8b:b7:30:08:73:20:
                    a4:58:d9:6d:d2:3f:6e:15:37:4f:75:cd:b9:63:b8:
                    4b:15:f3:51:14:1f:0e:50:8b:5b:c8:2e:52:ba:71:
                    5c:49:7f:27:06:d3:0c:9a:c1:b1:45:aa:53:13:bb:
                    54:b3:0f:77:d9:86:99:2e:bd:78:25:53:4f:97:7b:
                    5d:e5:ea:c2:1b:7f:7f:91:40:0c:52:77:14:81:f5:
                    b5:61:15:61:86:57:cb:6b:6c:d7:85:91:29:98:9e:
                    9a:5e:a7:fe:78:35:ca:a4:55:ff:6d:51:76:17:cf:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F3:FD:29:08:48:D6:C6:C6:C3:72:42:BD:D3:0B:31:EF:B6:0D:AF
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3130303a3a2f34342d3434203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:22:70:dd:d3:c8:b0:db:92:8b:2e:87:31:05:78:06:6b:
         e0:40:76:30:94:4a:81:1f:5f:8c:aa:f6:17:10:8f:6e:ea:ea:
         c6:f7:ed:1c:52:21:72:49:85:ba:04:68:d4:7c:c1:89:6c:f1:
         a5:4a:1a:b5:23:c1:7b:00:0d:26:d7:c4:b0:db:f5:09:c1:1b:
         59:de:80:92:10:f2:da:f8:ce:43:83:39:ac:70:a7:de:d6:1c:
         2d:a2:83:79:d8:e7:a4:2f:43:e4:b6:b8:d9:5a:94:2c:84:03:
         fc:d4:76:31:d7:ea:ba:f4:19:c5:df:72:a8:3d:f3:91:0d:49:
         61:ef:4e:a3:7e:80:6b:2f:d0:4d:b4:f4:1c:74:54:cb:6c:26:
         b7:9a:33:33:66:ef:82:e2:ca:c3:cc:69:a9:a3:23:df:d2:97:
         ba:8e:df:4a:7e:be:56:80:fe:5e:87:1d:1a:9f:77:20:7e:04:
         0b:64:fc:56:52:b9:16:da:ae:08:c0:4b:c8:8e:50:5d:17:c2:
         de:8f:25:b3:29:13:1b:81:b6:18:5a:fa:78:a3:90:09:90:47:
         a4:67:8c:b2:9f:cf:e5:53:dd:96:41:3d:70:5d:87:56:83:65:
         d5:a9:4c:14:84:7c:cc:fe:5e:f3:a8:0b:d5:10:66:46:db:29:
         9d:dd:1b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org