Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34312d3431203d3e20323732323138.roa
File:                     323830343a383363343a316530303a3a2f34312d3431203d3e20323732323138.roa (raw, json)
Hash identifier:          IZ6l3vDUijYHprLD6TDGyEah8R/axc1G1dsHCning+4=
Subject key identifier:   25:0C:61:BB:F3:56:48:34:9A:EE:3C:54:5E:F7:0C:D5:D2:85:A5:02
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       520A9B84664D6D9A1171FF20B45101C371435B53
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34312d3431203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:30:50 +0000
ROA not before:           Mon 23 Sep 2024 19:25:50 +0000
ROA not after:            Mon 22 Sep 2025 19:30:50 +0000
asID:                     272218
IP address blocks:        2804:83c4:1e00::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:0a:9b:84:66:4d:6d:9a:11:71:ff:20:b4:51:01:c3:71:43:5b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:25:50 2024 GMT
            Not After : Sep 22 19:30:50 2025 GMT
        Subject: CN=250C61BBF35648349AEE3C545EF70CD5D285A502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:e9:81:a4:a4:2e:f0:22:1a:d7:33:42:37:
                    23:fb:7b:56:98:81:cd:af:3f:a5:32:d4:13:7d:af:
                    9c:cb:3f:34:ff:bf:3d:e6:58:71:c3:ea:df:ae:9e:
                    49:0c:f6:d8:69:57:ef:cd:00:49:ee:8d:8d:cd:d9:
                    aa:89:04:aa:6f:c7:b3:95:bf:b0:e2:54:81:1c:b4:
                    fa:be:c3:92:f4:52:38:54:48:4a:e3:7d:c7:20:3d:
                    06:c6:71:ff:0c:82:17:d7:ae:bd:1b:ec:ad:13:af:
                    7a:30:7c:1f:e0:e3:82:4f:16:46:d8:5b:ef:36:c3:
                    14:62:53:58:08:8c:9e:b2:e9:52:7e:4d:ec:1f:fa:
                    b0:d8:6a:5d:52:f0:04:16:fc:55:dc:04:fd:5e:eb:
                    44:42:38:9f:0a:a3:1e:78:d1:df:31:13:47:68:f0:
                    6e:44:30:f7:96:00:59:0c:85:37:fe:3a:b4:45:5d:
                    a9:bd:93:d3:c0:e4:b6:85:14:99:e2:d9:23:9e:f1:
                    42:7d:17:c0:6d:01:7f:cb:98:ad:51:fa:7a:3b:76:
                    19:3f:92:24:45:d4:ca:52:cc:7d:2a:9c:6a:26:e2:
                    28:0d:64:49:09:a8:03:a2:46:7b:ba:5a:7e:c7:b1:
                    0d:3d:21:bf:3e:28:02:b7:be:90:3a:f8:65:fa:a3:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:0C:61:BB:F3:56:48:34:9A:EE:3C:54:5E:F7:0C:D5:D2:85:A5:02
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a316530303a3a2f34312d3431203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:1e00::/41

    Signature Algorithm: sha256WithRSAEncryption
         ba:f8:46:92:a7:5e:44:57:30:9e:29:22:6f:d5:e3:e9:e8:17:
         fe:d0:cc:d3:53:71:b6:45:5b:78:a3:40:fe:d1:3e:bf:c6:7c:
         2d:6c:22:02:2b:94:00:a1:3a:6c:44:91:8b:1d:65:03:5e:29:
         89:b1:90:4d:c3:62:eb:de:66:65:ca:ec:49:41:5d:74:7b:98:
         0f:da:29:65:af:1b:0c:35:ab:da:e5:d6:e0:80:12:82:d0:87:
         4b:99:26:93:04:20:90:94:08:12:2b:a5:d7:a8:08:52:be:28:
         f4:fb:5e:2f:8d:71:77:9f:4a:cc:be:5f:4d:2d:75:d8:40:69:
         36:77:ca:da:04:f4:31:a9:2e:43:21:36:50:d8:dd:6a:2f:38:
         e6:8d:86:c0:23:d8:0e:41:6c:7c:52:80:27:3f:d6:a2:af:f0:
         be:37:34:95:90:c3:a4:d7:09:b5:21:ff:21:f1:5a:91:4d:2f:
         66:5f:92:30:f1:ce:cf:a3:2b:ab:2a:b2:de:b7:33:49:cd:43:
         e0:59:36:de:ea:7e:96:32:9d:3d:38:76:08:8f:be:01:a5:bc:
         ef:1e:cb:04:09:5d:e1:3f:ac:e0:1f:a0:e8:f1:ca:0b:f0:0f:
         5a:24:08:f2:fa:ac:b3:cc:3d:ef:21:70:35:45:09:b9:7b:ff:
         b4:e6:56:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org