Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3a2f33322d3430203d3e20323732323138.roa
File:                     323830343a383363343a3a2f33322d3430203d3e20323732323138.roa (raw, json)
Hash identifier:          imqE8DSmRbwh1IGaJw1lZJnI2po+fwzdHi3UL2gW1vE=
Subject key identifier:   B1:9B:70:A4:E1:9B:B3:76:AA:85:15:D2:92:97:E3:A1:B6:92:08:A0
Certificate issuer:       /CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
Certificate serial:       3B8A589F9F8C4264BA2E8E7E3CA150DEFE798543
Authority key identifier: 2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3a2f33322d3430203d3e20323732323138.roa
Signing time:             Mon 23 Sep 2024 19:30:25 +0000
ROA not before:           Mon 23 Sep 2024 19:25:25 +0000
ROA not after:            Mon 22 Sep 2025 19:30:25 +0000
asID:                     272218
IP address blocks:        2804:83c4::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl
                          rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8a:58:9f:9f:8c:42:64:ba:2e:8e:7e:3c:a1:50:de:fe:79:85:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E942F9BEFD986A23E83BF16A19EA921E59F0467
        Validity
            Not Before: Sep 23 19:25:25 2024 GMT
            Not After : Sep 22 19:30:25 2025 GMT
        Subject: CN=B19B70A4E19BB376AA8515D29297E3A1B69208A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:66:b0:59:34:78:e4:b0:a5:97:d6:01:d1:d3:
                    99:5f:6b:49:86:72:64:70:f4:ac:55:d6:37:7c:2b:
                    69:27:43:fb:8c:1d:19:44:bc:1e:6f:83:83:07:c0:
                    a9:b9:45:b2:4f:9a:c8:ca:2e:68:0a:08:4a:45:c0:
                    ec:c0:ca:75:0c:3e:f5:8c:57:f4:26:9f:01:a4:51:
                    80:68:6b:90:56:ba:21:8b:e7:1d:ec:e6:04:68:5e:
                    27:dd:84:d6:fb:02:5e:40:8a:24:5b:c2:9f:b4:73:
                    3b:9e:11:5c:26:f3:c1:c0:cb:d2:06:9c:ef:71:aa:
                    00:03:b4:84:fc:ae:51:e6:ec:ec:7d:cc:fd:c5:26:
                    ad:68:fc:57:60:e4:99:32:5e:35:35:24:7e:b7:a3:
                    d9:92:5c:31:39:5c:0d:73:90:8a:e2:eb:7a:20:14:
                    b4:f3:26:49:34:4d:b0:98:18:75:63:f9:cb:c0:80:
                    c6:de:9c:26:32:27:e9:d5:3a:44:2d:29:e5:01:3e:
                    9f:2b:db:ce:16:cb:35:19:6f:a1:9b:56:73:b1:a7:
                    71:70:d2:c3:1a:d6:7b:b9:dc:b2:b6:ac:44:58:a3:
                    9f:b9:26:d4:ab:7f:5c:a0:8d:38:50:e5:31:c1:a0:
                    cc:90:8f:2f:fd:a9:57:06:30:6a:2d:78:07:6d:1e:
                    89:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9B:70:A4:E1:9B:B3:76:AA:85:15:D2:92:97:E3:A1:B6:92:08:A0
            X509v3 Authority Key Identifier:
                keyid:2E:94:2F:9B:EF:D9:86:A2:3E:83:BF:16:A1:9E:A9:21:E5:9F:04:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/2E942F9BEFD986A23E83BF16A19EA921E59F0467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E942F9BEFD986A23E83BF16A19EA921E59F0467.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mXnUMUqwEGPRrxZLtUHBJDkRA9cMUfYi8RbqRuTsSxh/0/323830343a383363343a3a2f33322d3430203d3e20323732323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:83c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:30:86:54:f5:a5:64:0a:45:3b:94:bc:17:69:25:bb:fd:25:
         44:2a:05:60:89:75:c6:8b:90:1f:10:8d:36:90:ef:d5:f3:98:
         fa:4b:d7:e3:09:48:cf:e6:63:ef:9b:e0:e9:f4:80:6f:3d:94:
         c8:a4:c8:5b:14:91:fa:42:f3:29:0e:fa:e7:86:f6:77:0e:30:
         f9:ee:7c:26:fc:ae:a7:06:cc:e0:89:fa:ca:1c:73:7a:1b:c6:
         a2:19:2c:6d:4d:c2:6e:36:76:b3:77:45:85:78:35:06:e3:5e:
         c7:62:cb:22:5c:65:ac:57:cb:38:1a:c3:d9:04:ac:53:3a:70:
         2b:ec:94:f8:6c:d8:89:a9:be:d5:c1:a8:82:4e:f5:66:e0:dc:
         07:34:6b:86:7e:93:74:ab:e5:38:b2:1a:7a:45:64:0f:62:52:
         9f:26:f4:2e:42:c8:ec:fb:05:b6:ce:62:87:87:a0:b4:d7:11:
         98:8b:28:53:f2:11:1e:c8:a0:24:79:bd:81:85:77:c4:e9:4e:
         40:7a:12:13:ba:b3:6b:19:80:4d:53:bb:a0:51:4d:6c:4c:67:
         c2:5d:1d:60:cd:08:a9:7d:34:9d:51:e8:7d:38:88:9b:22:d3:
         19:1c:05:80:fb:d9:44:78:5f:95:70:c2:81:23:91:c9:e7:e5:
         33:41:39:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:12:16 2024 by rpki-client on console-fra.rpki-client.org