Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa
File:                     323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa (raw, json)
Hash identifier:          8h/Hf4XEAwgo/hUeHBsO9ZXqdCsbXeCs2Zl3+iOmPvc=
Subject key identifier:   E5:2D:ED:85:01:3F:D0:48:FB:EC:10:87:0E:5F:13:4F:5F:32:FB:5C
Certificate issuer:       /CN=4765DF83369720EE1AF514C7CA6660A475D18592
Certificate serial:       0810F11E908966DD10734EE9AED3E3E68F5A0CC4
Authority key identifier: 47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa
Signing time:             Thu 04 Apr 2024 04:00:41 +0000
ROA not before:           Thu 04 Apr 2024 03:55:41 +0000
ROA not after:            Thu 03 Apr 2025 04:00:41 +0000
asID:                     52858
IP address blocks:        2804:774:8000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl
                          rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 11:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:10:f1:1e:90:89:66:dd:10:73:4e:e9:ae:d3:e3:e6:8f:5a:0c:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4765DF83369720EE1AF514C7CA6660A475D18592
        Validity
            Not Before: Apr  4 03:55:41 2024 GMT
            Not After : Apr  3 04:00:41 2025 GMT
        Subject: CN=E52DED85013FD048FBEC10870E5F134F5F32FB5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9c:00:14:cd:8c:7d:e7:52:4a:f9:8b:e3:e7:
                    85:b6:f8:ee:d7:0e:8f:78:6c:4c:62:e2:6a:50:79:
                    13:9c:8c:33:16:6c:83:04:4a:f8:61:28:c9:d1:31:
                    30:bc:54:30:45:7f:88:58:63:43:f6:ba:45:b8:26:
                    d6:c2:18:07:33:67:58:ea:53:bf:31:2d:60:9f:cf:
                    a8:44:3a:41:c3:73:84:b9:9b:1b:11:18:cb:71:43:
                    40:b7:01:d9:fa:38:85:30:07:e4:71:47:30:f9:c6:
                    a3:5d:3a:ac:1b:3e:d4:75:02:8b:9a:aa:11:17:63:
                    d4:21:5c:9c:f8:96:2e:c0:44:1c:9f:73:e5:ec:e3:
                    b1:6c:72:fa:f5:64:e7:b6:9e:8b:70:ba:2c:2b:74:
                    d1:dd:35:58:81:d5:15:28:5c:e5:6f:31:d6:8a:c8:
                    07:cd:dc:25:cc:b9:d9:7d:82:a2:83:39:33:6a:a1:
                    00:2b:8c:ee:2e:a6:dc:a6:c8:c2:41:05:45:b3:80:
                    13:ee:2c:cb:a8:82:b1:f0:67:20:42:b6:fc:8b:15:
                    a8:7c:39:25:50:f7:b7:96:a0:36:9a:74:29:56:a5:
                    55:1a:44:46:27:4c:91:b4:69:24:42:34:38:eb:54:
                    14:d7:38:76:b7:ce:80:ed:cf:d4:ef:c1:0b:53:34:
                    b6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2D:ED:85:01:3F:D0:48:FB:EC:10:87:0E:5F:13:4F:5F:32:FB:5C
            X509v3 Authority Key Identifier:
                keyid:47:65:DF:83:36:97:20:EE:1A:F5:14:C7:CA:66:60:A4:75:D1:85:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/4765DF83369720EE1AF514C7CA6660A475D18592.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4765DF83369720EE1AF514C7CA6660A475D18592.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6BpkhkJmtUfYAuvbymTJP9Q3U4eKfEpEHJiCqwMTSdDC/1/323830343a3737343a383030303a3a2f34302d3430203d3e203532383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:a4:28:e5:79:2a:03:55:08:97:5c:94:55:4d:60:13:f0:ee:
         f5:c2:ae:3d:64:91:aa:35:6a:3a:dd:1a:74:d1:93:cc:91:d3:
         d6:d6:2b:10:2b:ff:0b:dc:35:a9:22:d9:8f:c2:fc:56:b0:12:
         b3:e0:57:de:06:3b:33:27:12:95:6a:fc:5b:b1:d7:9d:5e:21:
         bb:26:72:ed:96:8d:5a:ef:96:b7:43:e6:6b:2a:ab:f4:b3:36:
         f6:d7:8c:a4:f9:fe:46:4e:9f:44:65:7e:cc:b7:91:98:dd:0b:
         d0:40:d0:fd:88:c7:42:ed:b8:b6:08:18:8e:09:6c:da:74:23:
         fe:69:27:5a:00:30:eb:71:59:ef:dc:8d:73:f5:08:85:2c:53:
         ab:95:fa:dd:a5:5c:d9:2e:84:77:48:bb:69:e3:72:07:33:e0:
         56:4c:46:12:c7:60:d0:35:c2:67:37:5d:5e:e0:a8:9a:b8:81:
         28:36:8a:8c:e9:d4:08:57:7d:2e:f7:00:d3:ac:a5:5f:cd:3b:
         ea:89:81:11:c3:17:f1:df:74:e0:bf:bb:cb:1d:b5:81:a1:75:
         20:e1:c3:c4:da:dc:a0:92:dc:cc:e0:00:c6:d9:6e:8e:ea:35:
         f8:52:21:0c:a1:ac:a5:4d:81:1b:14:32:5f:d1:98:ed:e9:e0:
         e7:75:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:19 2024 by rpki-client on console-ams.rpki-client.org