Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3430203d3e20323637363534.roa
File:                     323830343a343463633a3a2f33322d3430203d3e20323637363534.roa (raw, json)
Hash identifier:          1N4F1xfCCC+yUmpZ/BaO/3KtcKDi2XYyW6hfT6qTYKQ=
Subject key identifier:   41:83:1E:CD:AD:B9:B2:F0:90:A4:E5:31:7F:44:8C:95:8D:05:AB:32
Certificate issuer:       /CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
Certificate serial:       4F4DDFF32090D1F971BA22237B2AEDCAD418C6D8
Authority key identifier: 1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3430203d3e20323637363534.roa
Signing time:             Sat 27 Apr 2024 03:45:23 +0000
ROA not before:           Sat 27 Apr 2024 03:40:23 +0000
ROA not after:            Sat 26 Apr 2025 03:45:23 +0000
asID:                     267654
IP address blocks:        2804:44cc::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl
                          rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 18:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4d:df:f3:20:90:d1:f9:71:ba:22:23:7b:2a:ed:ca:d4:18:c6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE004C88CDEB73610FC82758B90B130EB9F7D38
        Validity
            Not Before: Apr 27 03:40:23 2024 GMT
            Not After : Apr 26 03:45:23 2025 GMT
        Subject: CN=41831ECDADB9B2F090A4E5317F448C958D05AB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:39:69:16:3d:17:f1:2d:5f:0e:bf:33:0a:
                    83:0c:7d:d2:8d:71:f8:19:71:4c:a7:78:b5:5e:c2:
                    6e:db:4d:63:fd:29:aa:6f:72:0a:dc:d5:29:d6:04:
                    03:3a:da:3a:5d:bd:9a:75:22:d9:55:45:c5:c3:ad:
                    1c:7d:60:25:fe:d0:48:8c:3e:2c:ce:43:7a:47:87:
                    43:e4:14:6a:ec:83:1e:30:ac:bc:75:0d:f4:60:0a:
                    06:8f:df:26:c2:54:ce:11:7c:c3:8e:70:5d:74:ff:
                    8f:10:8d:73:5b:c7:40:78:8e:f3:f8:22:93:2a:8f:
                    32:6b:68:f3:04:b6:69:db:e8:47:f1:74:7b:16:da:
                    9f:d7:e9:16:bf:af:f7:ec:f7:50:b6:b8:3f:fe:f4:
                    1d:3f:60:28:38:96:9b:3b:1e:f8:a7:5f:64:54:60:
                    c8:0f:1f:6c:ba:e6:4c:2a:6c:cb:18:1c:a9:5f:eb:
                    8b:8f:6a:7c:d0:53:f6:32:08:ae:18:d6:21:d3:49:
                    39:87:3b:53:12:d0:46:43:d2:ab:5e:cd:19:d7:fe:
                    2a:54:e1:bc:4f:ff:95:a3:13:a3:79:fd:fc:e4:f3:
                    80:27:a3:71:5a:2e:79:37:96:b4:c8:8b:91:02:ce:
                    31:91:9c:8a:75:e7:68:02:b4:d0:3a:83:42:84:c7:
                    86:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:83:1E:CD:AD:B9:B2:F0:90:A4:E5:31:7F:44:8C:95:8D:05:AB:32
            X509v3 Authority Key Identifier:
                keyid:1B:E0:04:C8:8C:DE:B7:36:10:FC:82:75:8B:90:B1:30:EB:9F:7D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/1BE004C88CDEB73610FC82758B90B130EB9F7D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE004C88CDEB73610FC82758B90B130EB9F7D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qBB5DvwmRDJZ6zk8KBP5NfN3ttWiajHhKt8hJqYmaqe/0/323830343a343463633a3a2f33322d3430203d3e20323637363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:44cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:49:bc:73:d5:90:9c:77:6b:e1:54:dc:49:ea:06:37:f3:d4:
         59:b6:2a:2e:c6:40:e0:5e:48:ba:b5:3f:22:b4:73:ca:8f:a6:
         ce:ed:b6:2b:d2:89:89:42:32:53:88:79:5a:35:f1:ca:16:2a:
         33:ae:e3:9b:ec:50:ff:a0:57:f4:10:1c:d9:45:4d:9e:29:84:
         26:6d:99:4a:46:e0:4d:c6:91:1d:84:91:7f:74:0a:c8:ca:2e:
         41:a7:75:79:ca:bc:1d:05:dc:99:31:6b:63:43:11:1f:c8:35:
         7a:52:ad:a2:00:32:5c:77:da:49:c5:1b:5b:ea:0b:7c:46:b8:
         a6:62:24:42:ba:f9:d6:f7:a7:56:a0:8d:33:8f:d6:0a:94:d9:
         63:bf:8c:00:18:33:6f:ae:22:81:df:78:b4:96:ef:01:64:a1:
         20:8e:0a:aa:85:39:f7:5f:84:9f:ee:31:8c:82:65:94:0c:00:
         83:7b:9c:78:18:0f:94:57:ce:1c:9a:74:2a:a6:69:3e:fa:15:
         df:bc:4c:8a:61:46:48:cd:51:d1:10:3e:07:f2:a9:15:be:45:
         43:df:c7:d0:20:17:79:1c:68:ec:30:a8:2a:a5:6b:a9:0f:6e:
         38:a7:31:6f:ed:16:26:e4:ec:74:eb:07:c6:c8:6c:03:a3:a0:
         ee:55:bf:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:31:49 2024 by rpki-client on console-fra.rpki-client.org