Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3336203d3e203532383532.roa
File:                     323830343a3833303a3a2f33322d3336203d3e203532383532.roa (raw, json)
Hash identifier:          VybeIuPcj2nL+RGQezYfh7OqJ+jIAqstqlRick3HKTA=
Subject key identifier:   40:11:2F:31:71:59:02:03:21:F2:B8:92:0B:03:83:FE:17:5E:6F:7A
Certificate issuer:       /CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
Certificate serial:       6E0C2B1635C64637BD96EC4AFE5AE84484E9CE76
Authority key identifier: 0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3336203d3e203532383532.roa
Signing time:             Wed 03 Apr 2024 19:47:04 +0000
ROA not before:           Wed 03 Apr 2024 19:42:04 +0000
ROA not after:            Wed 02 Apr 2025 19:47:04 +0000
asID:                     52852
IP address blocks:        2804:830::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl
                          rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 18:18:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0c:2b:16:35:c6:46:37:bd:96:ec:4a:fe:5a:e8:44:84:e9:ce:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D483B0825B3E88C6437693FB9EC26E45EAACF21
        Validity
            Not Before: Apr  3 19:42:04 2024 GMT
            Not After : Apr  2 19:47:04 2025 GMT
        Subject: CN=40112F317159020321F2B8920B0383FE175E6F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a0:a4:db:2e:38:c5:d7:6d:9c:3a:c1:ad:a5:
                    5d:1a:12:a8:83:66:07:92:17:7b:c5:b5:ff:00:96:
                    9a:24:f0:74:de:08:f5:1a:af:59:96:82:24:8f:51:
                    72:53:3e:96:e9:97:2b:3a:ce:8b:59:cf:9f:3e:d5:
                    b7:15:6c:5f:69:23:54:38:c5:57:23:86:96:1c:f7:
                    48:fd:e2:8a:77:4e:67:41:46:c5:4d:bd:71:73:81:
                    ec:7a:c1:4d:d9:0a:52:d9:84:24:f6:9d:df:ca:82:
                    e5:d8:81:3b:ae:6c:9c:c6:d7:22:2c:9c:f9:73:6f:
                    4b:ba:7e:14:96:55:71:ef:74:ed:97:43:c5:c4:39:
                    41:f8:6b:14:0e:7c:1a:64:a3:6d:31:9a:0e:73:e9:
                    1d:3c:cd:92:0c:23:e1:92:97:f6:97:f2:16:79:b8:
                    23:55:61:d6:45:69:6f:61:da:30:4b:15:3f:b9:82:
                    7d:2f:0b:6a:0a:69:ca:95:35:5c:84:29:6f:57:fc:
                    1d:d8:d5:9f:44:16:06:ea:5a:e7:77:15:8d:78:29:
                    25:fd:1f:63:db:f4:43:39:a3:27:3a:6c:fd:7c:18:
                    53:7d:41:e9:6f:cf:ab:54:09:3d:b5:f7:7e:2b:68:
                    16:77:bb:93:7b:38:ca:70:2b:f3:09:df:aa:d2:c0:
                    32:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:11:2F:31:71:59:02:03:21:F2:B8:92:0B:03:83:FE:17:5E:6F:7A
            X509v3 Authority Key Identifier:
                keyid:0D:48:3B:08:25:B3:E8:8C:64:37:69:3F:B9:EC:26:E4:5E:AA:CF:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D483B0825B3E88C6437693FB9EC26E45EAACF21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6McMi2GtJif6JiCTchs3Dw2wzDrQvCcAC1rb2B59XvPN/1/323830343a3833303a3a2f33322d3336203d3e203532383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:830::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:57:75:8b:74:6b:04:02:27:6d:85:99:db:40:18:3e:a3:f2:
         fb:db:05:35:5f:ea:67:76:53:76:33:ae:c3:5b:4f:c2:b0:47:
         1d:51:b2:5a:af:6f:72:74:b9:49:4a:77:9f:7b:75:71:6e:28:
         f5:b7:78:06:51:69:79:0e:fe:9b:7d:70:28:27:a0:18:b9:a0:
         e0:df:7e:89:ed:5b:4c:81:5c:79:da:96:4c:0f:b5:2e:81:b8:
         fb:bd:52:a7:1d:23:5a:8d:29:0b:1d:1a:19:a1:5a:8e:45:bd:
         b5:dd:6f:66:51:1b:6f:ec:5b:96:fc:ad:69:38:7b:66:e1:7d:
         07:31:42:74:fb:00:e4:66:62:d5:b9:4c:f2:29:c8:fc:23:21:
         02:4c:dc:bd:55:62:d1:1c:00:c7:82:bb:6d:c5:7f:05:7c:33:
         c9:e3:99:f7:de:91:54:ad:7f:17:4b:d0:df:e2:b0:16:9c:66:
         28:b7:4b:38:e0:ed:c4:28:01:0d:55:bd:05:7a:9d:68:b8:e6:
         51:0c:0c:d3:87:59:1b:37:1b:38:90:98:f6:b0:37:34:f7:69:
         1c:ec:47:42:17:b9:98:34:c4:fe:56:66:06:d9:29:36:c9:6c:
         b7:5d:03:53:ca:a5:e3:4b:d5:a6:09:ed:8c:08:df:7b:1f:e9:
         70:d8:2f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org