Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          ESQLN5sW34GcCzhiI2poXR/zt6zH8iprf3YXiEfL/gc=
Subject key identifier:   9A:4E:D1:4E:7E:82:32:4D:FE:ED:0C:8D:DE:00:9D:1F:EA:A6:28:D4
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       030AC217BEFB21678F440996A38FD0B07691E569
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:31:14 +0000
ROA not before:           Mon 23 Sep 2024 19:26:14 +0000
ROA not after:            Mon 22 Sep 2025 19:31:14 +0000
asID:                     272218
IP address blocks:        2804:83c4:8008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:0a:c2:17:be:fb:21:67:8f:44:09:96:a3:8f:d0:b0:76:91:e5:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:26:14 2024 GMT
            Not After : Sep 22 19:31:14 2025 GMT
        Subject: CN=9A4ED14E7E82324DFEED0C8DDE009D1FEAA628D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cf:21:7b:69:5f:13:e5:8e:55:00:4d:eb:a8:
                    ac:b4:91:8d:0d:e2:78:9d:ac:37:6a:fc:81:c5:d5:
                    3c:aa:b2:48:05:40:a4:b4:af:e5:90:fc:20:48:a8:
                    e6:cb:f9:0e:fe:94:17:7b:5b:e7:85:98:19:b2:63:
                    79:8d:ab:d9:0a:33:83:20:da:e4:48:48:f2:5f:c4:
                    3d:b9:dc:cf:b3:a5:81:d3:02:28:05:16:45:5f:71:
                    09:d6:2f:99:db:d1:81:e6:b9:02:a0:90:8e:99:cb:
                    af:ff:b6:95:3c:f8:41:61:f2:1e:46:32:25:69:c3:
                    a0:0f:84:41:59:6a:2c:24:ca:38:4a:d9:a3:3b:0c:
                    e8:50:0e:c6:bd:5b:b0:ab:e6:e1:db:4a:bd:27:a5:
                    dc:05:b9:70:86:bd:32:39:54:2e:94:9a:a1:99:f9:
                    af:c7:c1:16:31:ac:a4:c0:7c:98:bb:0f:95:38:24:
                    69:12:0d:0f:cb:96:c2:b2:64:d9:40:5c:4d:f5:96:
                    37:16:d1:93:3f:2c:54:f4:ed:51:3c:8f:a0:e9:52:
                    6c:77:d2:ce:fc:66:70:69:dc:ce:0c:db:9b:32:a2:
                    9b:13:47:f0:c3:a9:b5:c3:97:86:c2:ff:e7:61:2e:
                    7f:17:8f:03:42:71:95:55:3a:c3:e1:b1:77:88:62:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4E:D1:4E:7E:82:32:4D:FE:ED:0C:8D:DE:00:9D:1F:EA:A6:28:D4
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383030383a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:8008::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:5a:fd:f7:e8:8b:80:f3:50:bd:4b:aa:56:e5:bb:11:f7:4f:
         44:91:50:88:33:a6:c6:e3:48:51:4c:93:a4:2b:2b:34:6a:75:
         37:34:a8:51:b4:e4:c7:85:01:4c:59:75:59:74:e5:9f:1a:b4:
         b2:6c:14:36:93:01:c8:51:28:5a:18:ba:88:06:af:03:d2:d1:
         51:6d:e8:60:a7:9d:92:30:76:f4:5a:e7:5e:ef:03:c7:e9:56:
         00:2c:59:f2:97:6a:54:f2:9c:64:a6:99:26:9a:51:3e:4c:ea:
         6b:6e:56:81:b6:e5:2d:e6:a1:e9:71:95:f6:ff:a6:77:8a:27:
         cd:74:89:2b:41:b9:d2:be:81:77:e9:30:2a:bb:fc:df:89:52:
         c9:9e:df:6b:c0:5d:6e:99:17:dc:bc:49:04:96:8a:1e:57:bf:
         de:f6:07:d1:eb:65:0a:99:4c:fc:02:59:81:d9:99:fb:8c:91:
         96:66:1e:8c:b6:fb:48:06:c6:8d:37:75:3a:42:7b:bf:5f:2c:
         60:9c:dc:23:b7:44:58:eb:7e:26:95:94:39:d4:52:2b:b9:71:
         ea:28:ab:30:54:ef:cd:a3:55:53:f0:d3:26:62:59:15:82:c4:
         b7:c7:84:e1:ee:df:13:07:8a:69:20:f6:da:1b:7d:72:ea:dd:
         4c:b1:b6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:31 2024 by rpki-client on console-ams.rpki-client.org