Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/323830343a346239343a3a2f33322d313238203d3e20323637333136.roa
File:                     323830343a346239343a3a2f33322d313238203d3e20323637333136.roa (raw, json)
Hash identifier:          5Ks4NXVxnjqFCrrDausj6dx+xv1aZnDfemlXBX5QMtI=
Subject key identifier:   2B:62:5C:00:2B:70:D7:7F:F3:A0:1E:22:EB:C9:B7:8B:21:EE:12:B0
Certificate issuer:       /CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
Certificate serial:       3E2AC45E9217FA497193441EEE85AFB261791F02
Authority key identifier: 4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/323830343a346239343a3a2f33322d313238203d3e20323637333136.roa
Signing time:             Mon 02 Sep 2024 18:23:23 +0000
ROA not before:           Mon 02 Sep 2024 18:18:23 +0000
ROA not after:            Mon 01 Sep 2025 18:23:23 +0000
asID:                     267316
IP address blocks:        2804:4b94::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl
                          rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 17 Feb 2025 20:49:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2a:c4:5e:92:17:fa:49:71:93:44:1e:ee:85:af:b2:61:79:1f:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AF555507F76387C67C13DE0BC2B700D6D33121B
        Validity
            Not Before: Sep  2 18:18:23 2024 GMT
            Not After : Sep  1 18:23:23 2025 GMT
        Subject: CN=2B625C002B70D77FF3A01E22EBC9B78B21EE12B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:31:bd:f5:9b:3f:f4:cf:06:21:b5:67:a3:
                    64:7b:12:dd:0f:a9:93:ee:56:56:0e:c4:82:8a:da:
                    b9:02:c1:36:fb:4e:8e:38:2d:28:1b:c1:e1:8e:7c:
                    17:e0:06:f1:5c:7c:4a:1f:8e:fc:26:f9:0e:88:ce:
                    46:ee:7b:bf:9e:e6:d0:a9:ec:ef:bc:b9:1d:5f:61:
                    93:02:b4:9e:77:78:ed:d7:69:be:36:a2:c2:aa:6c:
                    b0:fe:1a:7f:b6:3e:0e:87:9a:12:d3:b6:6d:ae:0c:
                    3f:1d:a7:00:89:90:f0:10:35:a4:a1:27:9b:46:9e:
                    1e:ff:4f:cb:8f:83:f0:ed:78:34:b8:d4:03:ab:90:
                    d0:6c:2c:19:81:41:df:d2:47:eb:b6:21:be:6f:84:
                    af:c7:40:ae:37:e1:54:c0:02:06:65:93:cc:ff:cc:
                    a1:a7:1c:b1:ef:18:92:c2:0b:a1:82:56:05:34:05:
                    36:da:2e:27:18:70:61:15:51:99:5d:65:f9:02:b5:
                    f7:1d:e7:92:07:28:6c:e0:6f:13:81:0b:22:43:76:
                    b0:47:d3:81:f8:c6:0d:ee:6d:dc:40:fb:c4:56:9d:
                    a2:55:27:0a:50:ef:65:1c:0e:09:2e:45:c1:64:ce:
                    4c:2f:1f:af:98:72:7f:55:bd:63:2d:f6:71:6a:16:
                    22:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:5C:00:2B:70:D7:7F:F3:A0:1E:22:EB:C9:B7:8B:21:EE:12:B0
            X509v3 Authority Key Identifier:
                keyid:4A:F5:55:50:7F:76:38:7C:67:C1:3D:E0:BC:2B:70:0D:6D:33:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/4AF555507F76387C67C13DE0BC2B700D6D33121B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AF555507F76387C67C13DE0BC2B700D6D33121B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5demt9N3CBU7Q7d8ANB41shVk9fD3PUB8paAUbDrWA2/0/323830343a346239343a3a2f33322d313238203d3e20323637333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b94::/32

    Signature Algorithm: sha256WithRSAEncryption
         c8:99:0e:80:d5:76:b1:a5:1a:a0:6e:25:00:da:9d:af:b7:a4:
         c1:2c:a1:08:b6:94:77:e6:7b:5f:66:3e:6a:b2:37:b0:9c:e0:
         0a:da:59:ed:20:c0:6b:d2:72:4d:77:7a:a9:85:10:c6:7e:15:
         98:ea:dd:4f:2f:df:18:f3:65:77:23:07:fd:05:18:b1:ff:25:
         74:7e:42:48:77:ad:e4:75:63:33:66:55:dd:37:46:53:83:5e:
         d6:e2:b7:99:46:82:6b:b0:c6:26:ea:37:6c:7b:cc:43:13:cc:
         aa:06:ca:bd:56:2a:48:ea:3c:ea:f1:8d:9e:fa:90:af:fd:3e:
         b9:ab:c0:bd:b2:15:d2:90:d9:d1:f3:75:31:66:9e:f3:53:a8:
         74:84:3e:dc:ac:22:90:78:d8:39:0f:86:90:42:f4:cf:f6:ff:
         dc:07:5e:13:99:2a:d5:49:cc:19:0b:c5:87:27:09:6f:e2:80:
         21:21:da:a3:41:46:07:77:85:4e:fe:c7:81:e0:4d:d7:38:0c:
         35:01:3c:9c:2d:d5:e5:ef:0a:61:a9:c9:13:33:1f:e8:d9:66:
         20:2a:1f:62:22:bb:df:2a:4d:00:2c:40:67:3d:22:65:20:f9:
         46:ef:33:00:a2:47:50:0d:04:b5:6f:f9:41:9f:ac:24:ef:aa:
         22:ab:2b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:49 2025 by rpki-client