Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa
File:                     323830343a3930383a3a2f33322d313238203d3e20323633303437.roa (raw, json)
Hash identifier:          3CevxzrfG8sVSzyggS03OPi3xc4ZjJkjD/Yxis9yGWQ=
Subject key identifier:   C0:37:19:51:4A:93:4A:CB:8F:1C:B1:91:84:B9:B7:77:9D:1A:70:F8
Certificate issuer:       /CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
Certificate serial:       48C9DD0B3576C942219061CFA70D020B808D1146
Authority key identifier: 4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa
Signing time:             Thu 04 Apr 2024 18:15:48 +0000
ROA not before:           Thu 04 Apr 2024 18:10:48 +0000
ROA not after:            Thu 03 Apr 2025 18:15:48 +0000
asID:                     263047
IP address blocks:        2804:908::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl
                          rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c9:dd:0b:35:76:c9:42:21:90:61:cf:a7:0d:02:0b:80:8d:11:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E335352EA63CE855FDA3B777EA08D10359B7B71
        Validity
            Not Before: Apr  4 18:10:48 2024 GMT
            Not After : Apr  3 18:15:48 2025 GMT
        Subject: CN=C03719514A934ACB8F1CB19184B9B7779D1A70F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a1:ab:42:a5:0d:21:7b:24:24:c5:81:64:4d:
                    f3:40:b1:78:5f:e4:b2:5d:38:07:62:d5:6e:c7:c1:
                    73:72:87:39:e4:1b:8d:e8:ce:68:ef:9e:e9:9e:c1:
                    1b:dd:86:e8:41:56:cd:6a:95:e1:d4:f0:75:32:14:
                    03:7b:be:8e:95:59:4b:e4:b7:7c:79:57:cc:67:c6:
                    7c:e1:6d:b7:8e:65:9a:25:f2:e2:e3:7f:52:f0:19:
                    22:a6:a2:05:e8:8b:6c:02:fe:0e:83:30:20:bb:f7:
                    6d:98:77:73:e1:82:ca:22:19:74:8c:16:da:3b:f4:
                    04:10:a5:02:54:c7:1f:1d:d6:af:55:95:3c:4b:4b:
                    40:4f:dd:27:0f:87:46:9c:65:82:9a:93:45:73:dd:
                    7b:fd:bb:a9:0e:e6:84:9e:8f:52:dd:d7:6e:0d:00:
                    f7:54:05:eb:1b:77:13:19:a2:cc:43:dd:df:d1:d0:
                    bb:1b:c4:50:4c:51:84:06:79:36:4c:23:92:4a:5e:
                    4a:a8:29:fc:c9:3e:ee:20:2e:cd:6c:1b:f3:6f:a3:
                    b3:70:ef:5a:52:7a:b1:e9:e8:8f:57:08:13:7f:78:
                    bd:3e:50:0d:77:51:46:48:33:8c:13:17:2a:2f:da:
                    77:1a:62:25:da:3b:47:43:5a:e8:47:3b:e0:b0:8f:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:37:19:51:4A:93:4A:CB:8F:1C:B1:91:84:B9:B7:77:9D:1A:70:F8
            X509v3 Authority Key Identifier:
                keyid:4E:33:53:52:EA:63:CE:85:5F:DA:3B:77:7E:A0:8D:10:35:9B:7B:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E335352EA63CE855FDA3B777EA08D10359B7B71.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/1/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:908::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:e2:07:ef:04:8d:f8:e8:cf:16:c1:36:cc:4f:cd:fd:16:bd:
         55:97:14:51:fa:5c:5c:75:0c:42:e5:87:21:64:70:21:65:78:
         0b:9b:9f:16:49:8a:c2:82:1d:fb:b0:26:86:fe:12:ee:6e:31:
         5f:f4:a5:e1:8d:96:43:4b:d1:14:28:3d:f7:08:2a:61:e1:56:
         9e:95:c1:ff:76:02:76:86:d9:4b:ce:50:0c:15:c0:77:1d:28:
         7c:42:76:27:ec:71:6b:9e:69:3e:58:94:85:ea:54:5c:a1:dd:
         6f:8d:a0:89:ae:31:a3:2f:d2:69:7a:5e:b5:e5:0a:fd:b3:e8:
         97:34:69:97:ea:aa:cc:6d:75:41:9d:bd:da:62:7a:c0:43:64:
         88:b2:0b:0a:f4:7e:34:30:39:51:10:cb:ed:c0:6d:5e:12:59:
         92:59:a2:1d:70:49:e6:38:35:55:4f:93:a9:8a:95:f3:62:bb:
         b6:09:c9:e1:f5:97:e0:59:fe:47:ba:46:fb:3f:ba:64:0a:7a:
         f6:9a:c7:86:6a:2e:9f:db:4a:77:a9:8d:84:9a:e3:e3:d9:b6:
         80:be:94:c6:33:ae:24:99:ae:15:c7:30:0b:92:c4:a9:a1:96:
         9b:f8:f9:47:5b:4d:d6:03:8a:d6:e8:26:c2:7b:24:8d:e7:8e:
         7a:d0:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:48:16 2024 by rpki-client on console-fra.rpki-client.org