Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/323830343a343531303a3a2f33322d3332203d3e20323637363730.roa
File:                     323830343a343531303a3a2f33322d3332203d3e20323637363730.roa (raw, json)
Hash identifier:          geCVjRorH4qCbyCxA1mfY9n2P/B4VMW8Vn4Jy8B60mg=
Subject key identifier:   CD:EB:EB:2A:65:78:A6:DE:50:CF:EC:E8:C8:AB:D2:9B:F2:55:46:27
Certificate issuer:       /CN=8013DE498C2B907A3EF2E48332493039E7A2F953
Certificate serial:       49299CF750224891FE5897FB1063D44F9B3A3ACD
Authority key identifier: 80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/323830343a343531303a3a2f33322d3332203d3e20323637363730.roa
Signing time:             Wed 03 Apr 2024 23:42:34 +0000
ROA not before:           Wed 03 Apr 2024 23:37:34 +0000
ROA not after:            Wed 02 Apr 2025 23:42:34 +0000
asID:                     267670
IP address blocks:        2804:4510::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl
                          rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:29:9c:f7:50:22:48:91:fe:58:97:fb:10:63:d4:4f:9b:3a:3a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8013DE498C2B907A3EF2E48332493039E7A2F953
        Validity
            Not Before: Apr  3 23:37:34 2024 GMT
            Not After : Apr  2 23:42:34 2025 GMT
        Subject: CN=CDEBEB2A6578A6DE50CFECE8C8ABD29BF2554627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:a7:4e:bf:f4:5f:a5:f7:51:1f:9b:06:a5:
                    f4:dd:8a:23:e4:3b:ba:25:47:32:32:c5:cc:88:d2:
                    d2:24:b9:71:b8:de:07:ae:bf:34:49:d2:1f:22:ad:
                    ec:1e:e1:35:46:f7:d7:c4:b6:21:04:6b:b5:2c:05:
                    00:2a:98:54:73:ad:2c:48:82:a9:9d:55:79:5f:ee:
                    dd:1d:d2:56:2a:10:01:d4:9e:74:b9:8d:9b:e7:a0:
                    23:fc:78:0d:9c:12:66:f5:02:1f:b5:0f:f6:d8:2d:
                    ba:9d:10:f9:85:cb:ca:7f:0a:83:04:0b:43:26:7a:
                    73:f8:9e:be:da:70:2c:f7:ff:62:81:d4:0b:61:03:
                    a8:fb:9d:55:bd:50:ef:77:70:56:bc:e7:43:2c:af:
                    9d:33:4e:13:31:d7:ee:58:bc:98:96:aa:61:75:8d:
                    71:ea:44:9a:44:41:70:8f:a4:98:9c:b9:13:6e:e8:
                    a6:0e:41:a5:43:96:77:07:0d:f5:66:3d:32:69:1c:
                    3e:cb:30:68:28:e6:0c:e6:8b:ee:a5:b5:8a:5a:8d:
                    01:bc:b5:ab:d1:56:37:52:ca:29:90:53:65:8d:51:
                    6b:2f:8d:89:b6:f8:3e:db:ab:9a:98:c5:07:ec:3f:
                    30:92:12:7c:bc:87:ff:2b:4b:f8:8b:7f:02:a9:e2:
                    ca:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EB:EB:2A:65:78:A6:DE:50:CF:EC:E8:C8:AB:D2:9B:F2:55:46:27
            X509v3 Authority Key Identifier:
                keyid:80:13:DE:49:8C:2B:90:7A:3E:F2:E4:83:32:49:30:39:E7:A2:F9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/8013DE498C2B907A3EF2E48332493039E7A2F953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8013DE498C2B907A3EF2E48332493039E7A2F953.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5avtLeAohtMALEcQpqjEmdFgaVei91EhMVhEkzQDsngj/1/323830343a343531303a3a2f33322d3332203d3e20323637363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4510::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:f4:9f:d1:fc:8b:56:17:52:da:76:53:63:72:8a:53:24:a4:
         9f:49:d9:73:5c:e3:a1:f3:bc:68:52:e3:5a:6b:e9:18:fc:18:
         9d:4f:96:9e:af:0d:2a:5f:9e:0b:75:75:8a:13:2a:01:5e:d1:
         b0:e8:35:ce:fe:d0:ee:75:04:9f:3a:85:ad:cb:d4:ee:0f:a2:
         0d:70:15:79:d3:02:f1:3e:e1:36:50:6e:a0:29:84:30:78:92:
         8b:09:50:9b:20:cd:ae:9f:9e:59:12:31:aa:f1:b3:37:92:0f:
         d4:c1:ba:f2:59:4f:d6:e5:41:60:8e:84:5a:e0:6c:4f:09:5a:
         89:0b:54:79:55:34:5a:cd:b7:42:06:47:39:1b:e5:cb:61:cf:
         ee:27:3a:19:6e:6e:98:c1:3e:8a:a0:4c:c1:42:35:fe:98:a8:
         f2:d1:b6:06:e0:dc:1f:9d:5b:c6:87:25:02:38:21:79:48:4d:
         63:bd:33:7a:c6:5d:83:07:09:1c:3a:c9:66:5f:5f:8c:c9:12:
         1b:49:82:31:bb:58:58:42:04:c3:96:f3:a0:ba:94:34:6e:c9:
         58:fe:f6:18:0c:53:12:c5:db:b7:1c:e3:aa:e7:cc:a7:0c:c4:
         15:89:6b:7a:06:e3:b1:48:6b:c7:cf:45:96:d0:a8:ab:ba:51:
         6a:a3:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:07 2024 by rpki-client on console-fra.rpki-client.org