Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a3a2f33322d3332203d3e20323632333534.roa
File:                     323830343a3832383a3a2f33322d3332203d3e20323632333534.roa (raw, json)
Hash identifier:          bAVsxOfZGqR6LGB/Zg3ylGzJq5odkLzSQVsLNkI8rUQ=
Subject key identifier:   02:48:52:07:F1:9C:E9:49:09:01:98:E4:05:0B:60:A9:97:56:6F:4A
Certificate issuer:       /CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
Certificate serial:       5D1B4C598C5CA68A7ACB1D0DC03B91541544A181
Authority key identifier: 21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a3a2f33322d3332203d3e20323632333534.roa
Signing time:             Thu 04 Apr 2024 07:48:34 +0000
ROA not before:           Thu 04 Apr 2024 07:43:34 +0000
ROA not after:            Thu 03 Apr 2025 07:48:34 +0000
asID:                     262354
IP address blocks:        2804:828::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl
                          rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1b:4c:59:8c:5c:a6:8a:7a:cb:1d:0d:c0:3b:91:54:15:44:a1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217AAC1E0D7B6D92662F103316D5D4E67033B9F7
        Validity
            Not Before: Apr  4 07:43:34 2024 GMT
            Not After : Apr  3 07:48:34 2025 GMT
        Subject: CN=02485207F19CE949090198E4050B60A997566F4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:15:7f:09:59:4a:90:5d:35:b4:b0:62:06:
                    77:c3:a3:f7:c2:65:2c:e4:e5:6e:59:4a:da:fc:b9:
                    31:3a:9d:1b:a2:73:79:ca:f9:0b:16:65:62:44:56:
                    0a:98:80:20:11:68:42:25:b8:05:30:5e:87:2b:42:
                    4b:cf:20:27:a2:82:c9:26:ad:4f:ab:c2:d7:05:f2:
                    aa:c4:14:fa:ee:62:f6:86:a1:33:3e:30:8e:89:6a:
                    c2:46:8a:36:96:7f:8d:a0:34:26:52:d2:98:58:74:
                    fa:ef:cf:16:87:b3:f2:56:8a:1c:ce:2e:41:da:60:
                    d1:2c:bf:84:d9:07:a1:a2:f1:77:cc:73:08:d1:30:
                    81:88:5b:4b:c1:44:36:e6:90:ad:31:69:21:fe:91:
                    dc:97:44:7d:86:ee:a2:17:99:5f:2f:0e:cb:7e:e5:
                    df:db:51:c8:aa:3e:c9:95:0a:d6:c1:eb:cc:22:45:
                    23:6a:06:c6:c6:9a:55:3c:c4:02:3a:53:9a:dd:2a:
                    16:ed:49:d2:c8:11:c1:f3:88:f7:99:ad:48:da:ab:
                    1b:62:c5:64:ec:47:93:5f:56:a9:22:da:18:35:33:
                    f5:a3:f2:95:13:8c:54:4c:18:8d:20:03:a1:52:65:
                    ca:68:8b:58:51:70:ff:11:ae:ef:93:9d:fd:bd:28:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:48:52:07:F1:9C:E9:49:09:01:98:E4:05:0B:60:A9:97:56:6F:4A
            X509v3 Authority Key Identifier:
                keyid:21:7A:AC:1E:0D:7B:6D:92:66:2F:10:33:16:D5:D4:E6:70:33:B9:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/217AAC1E0D7B6D92662F103316D5D4E67033B9F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/63KG4mP1Qn4cWZXSwuA2m3WEa8JXUVNFYBG3HzKcFHmY/1/323830343a3832383a3a2f33322d3332203d3e20323632333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:828::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:28:ed:2e:f6:fd:dc:0f:17:81:82:24:7e:54:89:20:50:f8:
         eb:83:3d:83:1c:bf:65:06:13:64:59:de:a6:1b:eb:88:dc:34:
         21:1f:3a:7f:7d:4c:cb:1a:b9:7b:6b:7e:47:ac:e8:18:7f:47:
         bd:f1:0a:08:ab:80:fd:7d:c8:55:97:41:84:92:d6:89:e2:4b:
         22:62:3d:1a:23:9c:37:1a:7d:9f:79:cf:a7:48:24:ee:64:17:
         8c:39:9c:01:c0:87:8e:a4:27:3a:85:b8:7a:68:7b:ed:4f:9c:
         be:9c:23:6e:7f:73:58:7e:a9:25:c2:47:0a:1e:e5:64:8d:90:
         c6:2c:f3:f3:5c:b7:1d:1e:7d:d2:e9:62:49:58:28:69:2e:dd:
         5e:83:db:dd:4f:e5:a5:e0:a5:36:22:8a:86:30:73:d3:32:1a:
         f7:18:63:f5:7b:64:93:80:94:74:9a:4c:7a:3c:19:6b:f0:39:
         c5:da:19:78:91:0e:5e:1f:39:89:27:d8:12:53:e5:fa:87:2c:
         a8:f1:ba:32:0a:ca:37:44:a9:16:61:08:25:9b:ca:fa:06:9d:
         c1:96:97:10:c2:91:27:0e:65:13:ee:a3:99:81:b8:de:49:6d:
         e7:f4:cb:9d:46:37:0f:8b:7b:6f:d7:4a:e4:39:cf:94:6c:9d:
         77:ed:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org