Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa
File:                     323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa (raw, json)
Hash identifier:          94W0FhWhlcWjhoEtQ1yfS4v9opYX5R4aRIoTzqDoV64=
Subject key identifier:   04:E2:EA:8B:5A:05:06:AD:D9:92:FD:7C:5A:AB:94:CD:1C:F0:11:87
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       53614833AFB142B86C0D8569898DA0A4DABCE015
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:31:40 +0000
ROA not before:           Mon 23 Sep 2024 19:26:40 +0000
ROA not after:            Mon 22 Sep 2025 19:31:40 +0000
asID:                     272218
IP address blocks:        2804:83c4:801b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:61:48:33:af:b1:42:b8:6c:0d:85:69:89:8d:a0:a4:da:bc:e0:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:26:40 2024 GMT
            Not After : Sep 22 19:31:40 2025 GMT
        Subject: CN=04E2EA8B5A0506ADD992FD7C5AAB94CD1CF01187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:19:43:d3:48:9a:98:33:4e:19:e8:12:f4:
                    81:63:27:c2:ae:49:99:b3:e0:2e:b4:e4:cb:a5:bf:
                    56:0a:56:1e:4c:ea:42:b4:04:de:75:81:cc:2b:33:
                    43:10:48:4c:49:9c:9e:34:a7:ce:7d:2d:ef:e2:cb:
                    a9:0a:d5:51:6e:16:94:62:09:c3:b8:be:78:2d:31:
                    fb:0f:34:fe:3a:45:99:c0:ca:3c:3d:90:c9:7d:5a:
                    0a:0a:85:47:c0:08:88:f6:4e:c9:56:d7:ae:77:58:
                    1e:51:89:eb:d5:b1:73:24:3b:18:2b:78:d4:bf:14:
                    cb:2f:a9:62:4c:6b:25:02:07:5a:73:4d:0f:1a:55:
                    fd:1f:29:3c:d0:e6:07:de:59:9f:0a:85:b8:38:49:
                    8d:f6:e7:9b:33:bf:ac:d1:19:15:dc:ba:57:78:b9:
                    f0:d6:94:bf:5b:e9:1f:bb:af:23:a7:b3:aa:45:f9:
                    55:56:85:25:d7:32:ec:26:83:86:69:75:25:5e:19:
                    9b:00:71:91:bb:81:6a:6d:e2:67:2b:5a:e9:06:25:
                    57:dd:ec:89:d6:e6:28:5d:96:29:b6:94:79:09:15:
                    48:a8:aa:2b:fd:ba:37:2f:49:87:e8:78:73:b1:51:
                    bd:b7:e2:02:60:cf:bb:ae:6b:f3:90:4a:8c:59:04:
                    4c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E2:EA:8B:5A:05:06:AD:D9:92:FD:7C:5A:AB:94:CD:1C:F0:11:87
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a383031623a3a2f34382d3438203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4:801b::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:72:17:de:d1:f3:cc:fa:0d:06:6f:c0:09:f1:b2:3a:dd:03:
         91:3f:46:06:e9:40:85:00:3e:be:41:33:3d:1f:ea:70:e7:9e:
         2a:dc:d2:f5:78:91:bb:e7:9c:24:e3:79:03:45:21:ac:09:3c:
         47:c4:a7:c5:8c:3f:ee:47:31:10:26:e8:6b:e6:0d:81:c2:3f:
         b7:b1:dc:27:56:d6:fa:b7:8c:3f:2c:43:3b:35:7b:dd:8d:84:
         b3:3b:32:b8:aa:bf:57:63:62:3a:f2:6a:29:2e:57:2f:ac:f5:
         09:2c:82:fc:62:8d:f1:f5:7d:75:e8:7a:a6:ca:d0:bc:43:6c:
         ee:7a:cb:eb:51:bc:e4:45:65:83:65:21:07:4e:18:ed:5d:ac:
         90:39:56:ac:f3:8d:ec:61:a3:d4:7c:e5:4d:8c:ae:ed:15:b0:
         58:4a:be:0b:59:31:5e:60:43:f8:aa:29:b9:36:d8:12:f1:4d:
         b1:8d:fc:84:46:81:68:60:f9:bc:ca:fb:5a:59:5f:da:91:7b:
         78:96:9a:11:fa:d3:0d:6c:70:44:73:67:f1:0f:21:42:14:ee:
         17:4d:f4:fc:82:6f:e5:68:29:91:dd:9f:d1:20:dd:55:6e:0f:
         90:51:c1:d9:93:7e:0a:5f:34:ff:cf:42:3b:06:0c:ad:cd:db:
         c5:9b:c1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:16 2024 by rpki-client on console-fra.rpki-client.org