Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/323830343a3561343a3a2f33322d3430203d3e20323632353331.roa
File:                     323830343a3561343a3a2f33322d3430203d3e20323632353331.roa (raw, json)
Hash identifier:          UVGj8XMlqsKSzTbVFY4MEy4yScUjh2pcyODuvtMk6i8=
Subject key identifier:   F3:C1:65:AE:D7:19:88:07:48:D9:86:8D:8C:20:DC:9A:84:DD:D1:91
Certificate issuer:       /CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
Certificate serial:       7D9FB54BD323317650A26C55C16E7AB1F2C9B9A0
Authority key identifier: 31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/323830343a3561343a3a2f33322d3430203d3e20323632353331.roa
Signing time:             Thu 04 Apr 2024 01:00:39 +0000
ROA not before:           Thu 04 Apr 2024 00:55:39 +0000
ROA not after:            Thu 03 Apr 2025 01:00:39 +0000
asID:                     262531
IP address blocks:        2804:5a4::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl
                          rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:9f:b5:4b:d3:23:31:76:50:a2:6c:55:c1:6e:7a:b1:f2:c9:b9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314A8609354C2E3C1725893D521D35CC5FC4AFDB
        Validity
            Not Before: Apr  4 00:55:39 2024 GMT
            Not After : Apr  3 01:00:39 2025 GMT
        Subject: CN=F3C165AED719880748D9868D8C20DC9A84DDD191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:41:60:8d:13:98:b8:07:49:8a:ee:75:63:96:
                    6f:57:a0:b9:62:6a:2a:61:9d:10:bf:00:d3:69:82:
                    6b:0b:d2:5d:e3:2d:b9:e0:2d:50:47:35:02:cb:53:
                    7e:d5:b3:5e:9b:0b:06:8e:9f:01:89:a1:c7:aa:0f:
                    35:13:ea:13:94:81:bb:2e:ee:8d:46:92:81:22:29:
                    52:75:c5:30:23:d6:6c:a1:bd:1c:ec:e2:0c:f0:39:
                    60:7e:11:54:0e:6a:f9:74:68:42:d3:d1:a2:03:ca:
                    25:ed:de:c3:a8:24:08:1a:5d:4f:92:bf:d1:18:50:
                    77:23:e1:90:88:8a:c2:34:e3:29:87:f2:14:95:6a:
                    26:d1:5a:c2:37:13:63:0b:4e:1b:16:4e:c1:fd:fa:
                    88:10:e0:dd:27:93:ee:ba:ed:f2:2c:26:98:08:61:
                    9c:48:91:d6:60:5f:ae:06:42:ed:83:9d:df:f9:b7:
                    3e:67:ea:60:88:27:7e:95:0b:10:8e:3a:63:c9:70:
                    ab:e8:1c:b6:21:f8:30:d2:db:9a:57:39:9a:fb:06:
                    68:91:fd:9b:ac:3a:ad:f5:0d:d8:0b:c5:8b:6e:ac:
                    7a:ea:85:75:1c:9a:d3:ff:5c:8b:bb:90:e2:bb:75:
                    83:74:cb:dc:f9:95:9c:c8:62:5c:ed:98:19:c0:af:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C1:65:AE:D7:19:88:07:48:D9:86:8D:8C:20:DC:9A:84:DD:D1:91
            X509v3 Authority Key Identifier:
                keyid:31:4A:86:09:35:4C:2E:3C:17:25:89:3D:52:1D:35:CC:5F:C4:AF:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/314A8609354C2E3C1725893D521D35CC5FC4AFDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uMJQphfXda8F8Mm4rK6Tsozgjd8LgXn6Ac37sZbLXKm/1/323830343a3561343a3a2f33322d3430203d3e20323632353331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:c3:28:19:53:59:cb:21:e4:4a:d1:3f:02:01:b1:c2:5d:4b:
         59:fd:c0:14:37:75:a4:c9:d2:8f:8e:cd:9d:d1:11:14:8d:48:
         00:a6:41:8d:10:61:6f:46:26:9d:01:6b:16:7c:4d:fe:1d:58:
         ad:43:48:2b:6a:41:0e:69:bf:45:85:84:4c:06:e7:c6:89:2e:
         66:17:1c:c0:be:eb:0a:a5:af:82:ed:66:d4:5c:bc:10:ef:d5:
         1e:07:9b:de:56:ae:00:2e:04:25:38:42:35:39:c0:0f:8a:ac:
         4b:00:63:f8:1e:df:e3:40:31:0c:c6:1e:0a:1a:f7:6f:c3:e0:
         13:50:e0:d7:7a:4a:77:a4:1b:15:39:4c:06:f8:60:c0:62:11:
         65:38:60:bf:c7:fc:07:d1:63:04:20:ae:4f:6d:38:83:9a:b0:
         2d:97:b1:4e:d2:85:70:71:85:15:c1:b9:a5:8f:4f:43:e7:f4:
         84:66:b6:fc:c8:40:2b:0c:89:5c:00:86:80:75:97:fc:80:e4:
         db:6a:e3:10:91:95:4d:fb:ae:55:b4:3f:79:fc:fe:74:01:9f:
         51:3e:7d:60:3b:60:08:f1:35:a5:12:7e:7d:c1:10:58:6f:8a:
         1b:43:f3:ec:1b:55:11:fa:df:a2:56:1c:4a:a0:c0:06:f5:23:
         ee:23:23:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:35 2024 by rpki-client on console-ams.rpki-client.org