Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33332d3333203d3e20323639343935.roa
File:                     323830343a363538303a3a2f33332d3333203d3e20323639343935.roa (raw, json)
Hash identifier:          aqC1mImCem30TzAillV3SXhItdnAqStrUfufxjwCbmg=
Subject key identifier:   A0:DD:E6:F5:18:AC:08:82:48:A6:4F:D2:74:DB:D1:0D:5A:E9:81:03
Certificate issuer:       /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial:       243FE0CC22C38BB14C497E3CED6C7B0D7D684DEB
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33332d3333203d3e20323639343935.roa
Signing time:             Wed 03 Apr 2024 19:13:50 +0000
ROA not before:           Wed 03 Apr 2024 19:08:50 +0000
ROA not after:            Wed 02 Apr 2025 19:13:50 +0000
asID:                     269495
IP address blocks:        2804:6580::/33 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
                          rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3f:e0:cc:22:c3:8b:b1:4c:49:7e:3c:ed:6c:7b:0d:7d:68:4d:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
        Validity
            Not Before: Apr  3 19:08:50 2024 GMT
            Not After : Apr  2 19:13:50 2025 GMT
        Subject: CN=A0DDE6F518AC088248A64FD274DBD10D5AE98103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:40:d7:21:e7:0c:76:55:55:44:c5:41:5a:43:
                    1a:2b:ba:14:ae:e2:19:31:6d:7c:9b:70:b6:68:19:
                    02:9e:2e:a6:df:c2:2b:23:95:2d:52:38:6f:78:d0:
                    2f:93:1b:74:f7:94:d6:0b:7d:ff:8a:b6:74:4d:59:
                    4d:44:18:45:81:29:38:91:43:0e:6c:76:79:65:87:
                    2b:5b:4a:59:74:c9:72:c8:8e:2b:cd:d3:02:cf:b6:
                    69:4b:2a:4a:33:1a:48:a6:a5:af:ed:9e:d2:11:e6:
                    f4:54:f6:95:c6:7e:d5:4c:9a:2e:71:85:5e:5d:05:
                    57:51:c0:48:89:d7:0c:d5:58:eb:b7:eb:65:a2:63:
                    71:2b:79:94:5c:25:89:68:88:58:f3:19:61:14:d4:
                    91:8f:c2:8e:1a:62:77:69:0f:9c:74:d3:ce:3a:02:
                    cb:a8:4a:21:f4:39:b1:00:bc:3e:30:d5:e0:e8:3a:
                    54:2f:7e:cd:bf:2e:bb:6f:b6:21:6e:74:bd:cd:c8:
                    89:bd:00:15:aa:34:d4:99:32:12:13:c1:6a:49:d6:
                    5d:22:43:57:a3:d2:bb:30:11:fa:96:64:c7:b7:d0:
                    49:bc:a6:43:f2:5c:aa:a9:e1:07:98:4e:e0:47:c2:
                    8c:ae:14:b4:0a:af:95:b9:c2:e8:85:da:b2:1f:0d:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DD:E6:F5:18:AC:08:82:48:A6:4F:D2:74:DB:D1:0D:5A:E9:81:03
            X509v3 Authority Key Identifier:
                keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33332d3333203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6580::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:47:49:25:3a:bd:db:ba:78:c4:30:42:70:75:f3:c0:19:d8:
         f6:72:0a:67:99:67:61:91:11:e2:9e:25:c7:6f:78:d8:50:5d:
         b0:44:bd:9c:ed:3c:e1:82:dd:b0:ab:19:76:87:51:78:fb:24:
         6e:d4:3f:86:0c:69:d3:74:ee:2a:a4:a0:21:ac:f9:38:5c:58:
         d2:f2:a9:46:3c:ef:5e:6c:ec:b6:21:b9:3c:f6:c9:a5:1c:56:
         33:f1:2a:5b:6e:7b:64:6e:46:04:6e:dc:7f:23:8b:fe:c3:b6:
         c3:e7:4b:49:41:4d:f1:f1:85:a0:ae:83:a2:94:0b:98:87:78:
         e5:07:d6:4c:d9:a5:9b:56:99:7c:19:c7:09:46:e0:c3:5f:19:
         32:d2:98:72:1c:37:70:34:f0:e2:55:9a:c0:63:01:5b:83:f2:
         3c:3a:29:0c:6e:ed:da:35:ee:70:bb:6e:af:f9:71:24:af:de:
         18:d5:86:a4:36:d7:08:a6:0d:9e:38:1c:9e:46:d9:74:71:f2:
         35:fb:ff:ae:e5:3a:dd:f0:57:71:3e:88:17:5e:ae:c1:7b:b8:
         b1:7e:64:3a:34:1e:c0:0e:0d:07:f7:41:e4:87:22:3d:06:60:
         4e:0b:ef:d7:2d:18:b9:24:e1:d0:37:8d:d6:5c:f4:9a:53:23:
         2a:0d:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:37 2024 by rpki-client on console-fra.rpki-client.org