Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/323830343a363332303a3a2f33322d3336203d3e20323639333430.roa
File:                     323830343a363332303a3a2f33322d3336203d3e20323639333430.roa (raw, json)
Hash identifier:          JAjdPyUMFovatKS6ERpdn9m/X01Lpb/WT5ZguMKNfyk=
Subject key identifier:   1F:7D:EA:F1:8B:E9:03:D6:37:74:2C:F3:28:38:04:81:4B:36:89:05
Certificate issuer:       /CN=4E865237E426925D454145603E8DE8C3ABC12D0F
Certificate serial:       29A33ECF45C6339493EF40E9F1D38347941C2788
Authority key identifier: 4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/323830343a363332303a3a2f33322d3336203d3e20323639333430.roa
Signing time:             Wed 10 Apr 2024 12:10:09 +0000
ROA not before:           Wed 10 Apr 2024 12:05:09 +0000
ROA not after:            Wed 09 Apr 2025 12:10:09 +0000
asID:                     269340
IP address blocks:        2804:6320::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl
                          rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 04:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a3:3e:cf:45:c6:33:94:93:ef:40:e9:f1:d3:83:47:94:1c:27:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E865237E426925D454145603E8DE8C3ABC12D0F
        Validity
            Not Before: Apr 10 12:05:09 2024 GMT
            Not After : Apr  9 12:10:09 2025 GMT
        Subject: CN=1F7DEAF18BE903D637742CF3283804814B368905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fc:f3:48:25:e8:79:9f:13:24:93:7f:0e:04:
                    2b:9b:ab:da:2f:5d:c0:b0:2e:af:3f:bd:b2:06:a4:
                    a5:ca:a5:08:e3:38:89:d2:ee:73:7c:33:86:c1:4d:
                    f9:cd:c2:f4:d5:cb:61:38:2f:f8:7c:0f:d7:4b:d5:
                    5c:3a:aa:f1:0a:3f:45:56:fe:f4:81:68:67:7c:88:
                    cb:ff:16:30:60:26:b7:d3:e7:cd:d7:aa:6e:67:d7:
                    c5:1a:ea:fc:d2:85:eb:7f:9b:87:5f:95:f0:6c:f5:
                    f2:f0:2f:4b:e1:c6:d3:ce:6c:41:a6:2e:3c:f6:82:
                    62:9f:e8:f4:82:f1:f1:82:82:92:15:a0:0a:e1:1f:
                    de:9f:05:92:af:68:a7:18:51:d5:b4:19:eb:3a:fc:
                    4d:35:6a:51:41:19:fc:02:d5:ad:76:5d:fd:5b:48:
                    26:7e:42:ee:38:bf:de:03:cf:31:64:0d:72:70:5f:
                    56:61:91:e2:e0:39:c5:db:53:c4:3a:bb:6a:f1:32:
                    2e:b8:12:86:af:36:ca:f0:7f:2c:3a:75:0c:ef:33:
                    d7:69:07:58:fc:46:ea:11:0f:5e:11:70:6c:8e:06:
                    a2:0a:96:4a:ff:db:0e:50:22:9b:b0:6b:17:5b:43:
                    47:12:76:ae:d0:93:01:2d:f2:9f:4d:b4:d1:ae:55:
                    4b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7D:EA:F1:8B:E9:03:D6:37:74:2C:F3:28:38:04:81:4B:36:89:05
            X509v3 Authority Key Identifier:
                keyid:4E:86:52:37:E4:26:92:5D:45:41:45:60:3E:8D:E8:C3:AB:C1:2D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/4E865237E426925D454145603E8DE8C3ABC12D0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E865237E426925D454145603E8DE8C3ABC12D0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5jgTf5AbW5PRKiz2YF4pLZ9LGUr6ze3obfjp14qzQKNg/0/323830343a363332303a3a2f33322d3336203d3e20323639333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6320::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:19:81:7b:d5:70:b4:85:76:5e:a6:02:b1:45:67:c3:07:
         a0:8e:25:81:56:77:84:a0:93:41:e0:9d:0e:54:3f:87:a4:e4:
         08:d1:0b:e2:46:34:7c:ae:46:c0:82:2a:68:b2:0d:77:85:c5:
         5e:31:47:81:4c:2b:e4:e0:45:df:f9:b3:bb:fa:31:b6:f5:f3:
         11:f9:69:81:fd:15:f1:e3:f6:f4:45:29:5d:db:00:b2:6a:3d:
         f2:3c:1f:0f:c1:e5:c8:62:6d:95:65:ba:44:c9:10:d9:7d:45:
         6f:4b:aa:40:3b:23:38:17:61:29:0a:cf:e8:66:8f:d8:f7:25:
         60:c5:f2:b9:d5:3f:bd:55:2f:3b:5b:16:82:8c:1a:f4:e7:e6:
         fa:e1:ca:99:60:ed:29:41:37:fd:e0:f5:5f:c9:d0:b3:0d:70:
         aa:01:91:78:31:2f:ed:2f:1b:da:0c:09:a0:6f:4c:3e:91:65:
         3f:34:a1:65:3e:7f:81:4a:01:bd:82:c6:0d:68:de:7b:ff:fc:
         ff:bd:4b:db:0d:dd:5c:a7:17:e3:86:47:6d:ea:c7:f7:1c:13:
         5f:00:0f:b3:0a:b9:fa:c0:60:2c:66:5f:9d:de:4a:e8:54:84:
         fa:0c:ec:7a:9c:66:0a:ad:61:9e:41:ae:ef:76:f9:83:a6:6c:
         d9:39:9e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 06:35:33 2024 by rpki-client on console-ams.rpki-client.org