Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a343030303a3a2f33342d3334203d3e20323733353134.roa
File:                     323830343a386664303a343030303a3a2f33342d3334203d3e20323733353134.roa (raw, json)
Hash identifier:          40Ta1sE1+Z++DLfW5L4+r0QNtgTeIOeHlhFuPJ7KNOI=
Subject key identifier:   1A:12:05:3D:BB:6A:4A:52:5A:29:E1:6E:71:C0:6A:E5:2A:85:49:41
Certificate issuer:       /CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
Certificate serial:       2F4CBBC263D931C1E1FD7A9926A649603F57B326
Authority key identifier: E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a343030303a3a2f33342d3334203d3e20323733353134.roa
Signing time:             Sat 05 Oct 2024 16:42:58 +0000
ROA not before:           Sat 05 Oct 2024 16:37:58 +0000
ROA not after:            Sat 04 Oct 2025 16:42:58 +0000
asID:                     273514
IP address blocks:        2804:8fd0:4000::/34 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl
                          rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4c:bb:c2:63:d9:31:c1:e1:fd:7a:99:26:a6:49:60:3f:57:b3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E43FC22F53F1011D8D213F6EB00C5A472E9235D9
        Validity
            Not Before: Oct  5 16:37:58 2024 GMT
            Not After : Oct  4 16:42:58 2025 GMT
        Subject: CN=1A12053DBB6A4A525A29E16E71C06AE52A854941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:54:1a:88:71:71:e2:43:76:ae:93:3f:f7:
                    86:57:12:db:d3:0a:41:cd:e5:07:ff:eb:2d:4f:6b:
                    af:22:85:3a:27:c8:fd:3b:35:f7:a8:56:c9:87:af:
                    b6:45:47:a5:39:d6:b9:13:bf:d3:4d:c6:8d:29:c3:
                    f8:17:5e:dc:5f:8a:db:53:d3:61:59:c5:44:b1:e6:
                    81:d6:db:51:1b:f7:c2:52:27:cb:55:49:71:3e:84:
                    13:2a:76:68:62:a9:5d:6d:e7:bd:8a:c0:f2:81:29:
                    a5:67:05:e0:d4:e3:e0:b1:2a:af:fc:51:b4:26:97:
                    e1:1e:ef:af:de:16:9c:47:61:a0:c7:88:48:f9:57:
                    7e:f1:e2:0e:03:fb:4c:82:27:32:72:89:aa:03:77:
                    30:e9:71:48:16:bf:de:ad:51:41:8b:a6:a4:fd:94:
                    22:84:47:61:98:86:72:b3:ef:ac:5f:98:27:d2:ee:
                    27:0e:e3:6a:ed:85:5f:82:07:01:e6:0e:51:3f:50:
                    36:17:6b:8d:93:30:d1:b6:5c:d7:96:d1:ba:02:d6:
                    48:ee:cb:48:b3:a8:ef:85:ec:a6:c3:62:72:9a:d9:
                    4a:7e:81:a3:d1:1e:89:81:34:22:31:ad:3c:24:f8:
                    21:59:ba:24:3c:cf:56:c4:43:fc:a5:5a:8d:10:12:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:12:05:3D:BB:6A:4A:52:5A:29:E1:6E:71:C0:6A:E5:2A:85:49:41
            X509v3 Authority Key Identifier:
                keyid:E4:3F:C2:2F:53:F1:01:1D:8D:21:3F:6E:B0:0C:5A:47:2E:92:35:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E43FC22F53F1011D8D213F6EB00C5A472E9235D9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51GJZoQNBVGZEsco76LGi9MkpjMB9DViSQfvG4fpRid/0/323830343a386664303a343030303a3a2f33342d3334203d3e20323733353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8fd0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3a:da:6e:a7:33:8e:b6:f1:86:a4:f5:c3:4b:ff:1e:0e:93:18:
         86:e2:e3:50:01:b5:68:82:fb:46:34:1d:8d:28:0b:b8:c0:32:
         d5:29:45:1c:64:d5:d6:f8:95:2a:c7:73:8b:2e:6e:b7:7e:f6:
         b4:48:e0:5a:e4:13:a1:d8:ba:07:e2:d1:1f:6b:6f:f3:2e:7c:
         9a:0a:13:e7:7e:95:9d:86:ee:2b:f3:f0:6d:7c:c4:6a:37:13:
         1f:a5:e5:56:ec:92:68:39:72:fa:03:6a:fc:38:da:4c:47:da:
         d5:f3:0b:ca:6a:8a:54:5b:cf:b2:ce:33:ae:e1:c4:a7:9a:3b:
         b3:7e:1d:07:a3:eb:e4:e3:c6:32:b9:37:85:44:81:74:cf:2a:
         3c:c2:58:95:b3:a5:c2:6d:bd:17:24:87:44:b5:e6:bb:93:8e:
         fe:ec:ef:10:bf:49:74:52:61:f7:bf:51:4f:cf:6b:7a:81:12:
         6b:d3:73:76:a6:71:97:43:31:e7:ce:bb:e2:47:1f:0b:98:88:
         d2:88:5c:33:db:79:cc:f5:87:0d:53:c2:c2:5e:5c:b8:a6:df:
         07:f7:98:6e:bc:18:1d:ae:9d:71:84:c1:90:76:a5:c8:f1:27:
         fd:d4:56:20:85:78:f7:76:a5:3b:42:8b:67:ad:68:4a:e5:f7:
         d0:80:18:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:25:32 2024 by rpki-client on console-ams.rpki-client.org