Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d313238203d3e20323638343439.roa
File:                     323830343a353136343a3a2f33322d313238203d3e20323638343439.roa (raw, json)
Hash identifier:          reVTz93/QLVxdtmOzew3tMjCAseLIaWt7YyJ9cklvJM=
Subject key identifier:   38:C1:F1:C9:BB:5B:2C:D4:5B:1B:C9:9F:B1:43:6D:27:D5:67:8F:6E
Certificate issuer:       /CN=72D4C5EE34A043798ED938051AE717D10692045C
Certificate serial:       0CCA17E0C157224ECBF0736015689B192FCB6DC1
Authority key identifier: 72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d313238203d3e20323638343439.roa
Signing time:             Mon 23 Sep 2024 18:17:07 +0000
ROA not before:           Mon 23 Sep 2024 18:12:07 +0000
ROA not after:            Mon 22 Sep 2025 18:17:07 +0000
asID:                     268449
IP address blocks:        2804:5164::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl
                          rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ca:17:e0:c1:57:22:4e:cb:f0:73:60:15:68:9b:19:2f:cb:6d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72D4C5EE34A043798ED938051AE717D10692045C
        Validity
            Not Before: Sep 23 18:12:07 2024 GMT
            Not After : Sep 22 18:17:07 2025 GMT
        Subject: CN=38C1F1C9BB5B2CD45B1BC99FB1436D27D5678F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:96:76:f5:e5:c3:46:14:2f:4f:ae:2c:19:73:
                    dc:74:2e:93:13:ca:40:21:55:57:20:50:e3:bb:e7:
                    ee:f2:9f:7d:75:30:94:38:a3:e8:2a:12:af:d3:d8:
                    90:26:63:3a:16:91:f3:a3:81:9f:36:82:69:c6:a8:
                    c6:ad:33:a2:f0:77:76:d4:18:60:78:e3:7b:91:6a:
                    77:de:f3:0e:ab:f2:41:14:95:e3:7b:9a:13:e4:10:
                    c3:28:48:2e:fb:29:7f:3b:db:12:35:09:a6:97:3f:
                    70:38:77:9e:07:a7:c0:7c:ed:39:4e:b4:0d:7b:48:
                    3d:e3:3b:d9:ac:80:a2:87:1f:54:47:ca:be:14:c9:
                    88:99:28:08:5f:18:0e:45:e4:32:d4:97:8b:00:a5:
                    da:c9:e0:d0:2f:28:46:84:35:09:4d:29:ea:c5:b4:
                    fe:1b:12:70:0c:cf:7e:a3:bb:d3:9d:f4:2c:0a:60:
                    af:8a:9e:2c:ea:c2:f5:d8:f9:9f:b9:4a:97:8b:91:
                    12:4f:80:6e:96:3f:c6:58:49:85:a6:26:28:6f:98:
                    cd:43:4a:8a:46:3c:fd:86:6a:9c:a8:12:1f:a4:3a:
                    5b:b0:4d:df:fd:ed:1f:7a:b4:c6:cd:30:41:f2:29:
                    af:5e:7d:e0:2a:2d:09:77:9c:55:76:c5:b4:a9:f2:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:C1:F1:C9:BB:5B:2C:D4:5B:1B:C9:9F:B1:43:6D:27:D5:67:8F:6E
            X509v3 Authority Key Identifier:
                keyid:72:D4:C5:EE:34:A0:43:79:8E:D9:38:05:1A:E7:17:D1:06:92:04:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/72D4C5EE34A043798ED938051AE717D10692045C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/72D4C5EE34A043798ED938051AE717D10692045C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pZCNL1MFqP47XDDrgDvTptkRZSWf7jmuQUeKmckb6ip/0/323830343a353136343a3a2f33322d313238203d3e20323638343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5164::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:bd:fb:83:79:5a:2e:a6:1a:93:81:25:92:27:0c:ef:94:
         e2:d6:92:f3:ac:83:e1:21:44:2f:c6:f4:b2:77:7e:05:f7:a2:
         f6:91:b7:fe:2a:43:29:25:91:11:70:e0:a4:49:fb:74:4c:f5:
         c3:73:d0:c0:a6:e5:f2:53:9c:17:65:7b:61:90:db:7c:32:93:
         37:87:ec:df:7a:ea:5e:5c:28:1c:35:30:74:79:aa:36:9f:2f:
         ca:c3:1f:c3:e5:52:fe:34:64:89:18:ac:92:b9:a5:63:48:18:
         ef:7d:57:d3:bf:1f:1e:ca:2a:31:75:ba:5f:57:8c:55:c4:22:
         69:50:17:db:64:65:02:69:bd:97:e2:68:15:95:a2:6a:3e:52:
         37:1b:d8:40:0a:c8:cb:56:28:56:0b:0b:ac:91:a8:0a:c2:37:
         66:46:b9:fa:84:12:74:de:fd:c4:c4:cc:94:bf:c0:83:49:66:
         ad:a6:fb:28:2c:8f:e3:aa:30:1f:73:8d:34:a6:ed:6c:0e:c7:
         c6:33:46:04:21:ee:d1:d1:41:91:df:d2:be:b3:e5:a7:d9:d8:
         7e:3d:ab:77:9e:92:28:ff:da:cc:83:74:14:1d:40:8a:5b:a9:
         e4:5b:78:b4:5a:eb:3a:a0:11:cf:47:98:3f:0b:47:11:d9:a0:
         a1:9f:9b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:53 2024 by rpki-client on console-fra.rpki-client.org