Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          iWLG69VjuimKCqQtARoEMT/w3qk1aCm3+UxV+etboHY=
Subject key identifier:   E7:1D:F0:40:F3:77:D9:7F:1C:9B:2D:22:7B:BC:3E:6D:AD:18:B3:83
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       7F9F33646D0153B66D1B33F04432460126C364B2
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:31:03 +0000
ROA not before:           Mon 23 Sep 2024 19:26:03 +0000
ROA not after:            Mon 22 Sep 2025 19:31:03 +0000
asID:                     272218
IP address blocks:        2804:83c4:8000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:9f:33:64:6d:01:53:b6:6d:1b:33:f0:44:32:46:01:26:c3:64:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:26:03 2024 GMT
            Not After : Sep 22 19:31:03 2025 GMT
        Subject: CN=E71DF040F377D97F1C9B2D227BBC3E6DAD18B383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:61:b0:94:87:96:f3:f8:1d:c6:de:9d:63:
                    cc:8e:fc:20:7d:20:a4:82:b5:e8:96:41:d0:9d:f3:
                    99:aa:88:10:08:93:6c:1d:fa:a8:85:13:7b:0e:a6:
                    0d:c5:61:54:fd:06:20:81:5f:1c:83:02:24:c1:af:
                    31:3e:b9:12:52:25:50:a9:f1:62:82:bc:5b:da:af:
                    b3:1c:96:48:18:79:29:d2:b7:56:2a:eb:67:c0:16:
                    7e:4c:12:bb:55:0f:b6:fc:60:65:ec:ba:30:c1:c6:
                    ea:98:b7:80:f6:8b:97:e8:a4:bf:04:a7:66:38:80:
                    86:84:ce:43:6f:ef:2f:1c:85:fb:c4:f5:68:3c:5c:
                    e5:bd:15:12:16:71:fc:a9:b0:92:32:3c:76:3c:c4:
                    ff:76:fb:10:4e:5a:4c:9e:e2:6c:30:07:ff:92:ca:
                    a4:95:31:84:3e:a1:f6:72:f0:ce:9e:b6:7b:4e:a3:
                    7a:39:25:8f:01:df:36:f4:7e:ad:94:00:7f:c0:64:
                    f6:96:44:d6:a9:ee:0a:2d:fc:08:2f:90:3e:9a:00:
                    26:69:85:96:57:91:d0:80:1f:2e:92:28:ea:c3:34:
                    51:e0:d3:71:70:a2:1f:30:ae:bf:e3:e6:44:c1:c7:
                    07:7d:20:58:e2:0e:8c:dc:b9:54:91:e8:da:46:d0:
                    74:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:1D:F0:40:F3:77:D9:7F:1C:9B:2D:22:7B:BC:3E:6D:AD:18:B3:83
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030303a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:3b:90:e7:d4:56:52:57:6a:07:0f:d8:0b:37:37:72:a8:a9:
         5b:c2:dd:b2:82:f4:34:1e:a8:d3:9b:38:0b:06:b9:c6:fa:20:
         0a:fc:66:02:71:24:f4:d6:19:a3:5e:30:f7:a3:47:74:fe:36:
         3a:75:04:34:f1:d9:e7:6e:f4:bb:41:5e:f4:6c:66:f3:98:c1:
         5f:94:19:73:0e:91:cc:60:16:3a:6a:03:6e:0e:45:56:3b:38:
         e7:c7:a6:d5:e5:20:3b:ad:df:7d:fa:8a:3b:6f:4d:72:c0:6c:
         cb:f4:0d:af:a7:37:e2:37:33:79:75:cd:24:8a:7a:8f:10:cc:
         18:ea:cb:4c:38:3f:e5:f2:2f:fb:e5:cb:d4:5c:e7:53:5d:90:
         e8:b7:14:4c:45:37:f0:3c:74:28:80:84:5d:df:71:c4:95:11:
         98:27:45:15:11:46:d8:cb:14:e1:44:62:3d:e4:d4:06:bb:06:
         54:fc:56:a7:3a:9c:f3:d4:8f:53:95:a0:0e:a2:7b:bf:c1:71:
         7b:aa:1a:c3:5f:a5:0a:3a:b6:c6:72:48:75:d8:f9:26:34:b3:
         78:d8:7f:27:8e:93:a5:c5:b6:43:9a:4b:d7:f0:19:b4:3a:73:
         5b:58:e0:66:b8:e8:82:9d:19:1e:8c:1b:8d:4c:dd:61:4a:ee:
         52:49:cc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org