Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
File:                     323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (raw, json)
Hash identifier:          APpYZh1bOsyUsTgN56ABlu9jHRKo/ALFTxeFdy83+wY=
Subject key identifier:   80:E7:23:B3:5C:D1:E0:F5:3A:77:45:76:B1:68:B1:AE:2C:BF:67:1C
Certificate issuer:       /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial:       022D0CD32FC3320806C1D6C7C87B1C77BFF32A1A
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
Signing time:             Thu 04 Apr 2024 20:53:31 +0000
ROA not before:           Thu 04 Apr 2024 20:48:31 +0000
ROA not after:            Thu 03 Apr 2025 20:53:31 +0000
asID:                     267589
IP address blocks:        2804:43c8::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
                          rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 09:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:2d:0c:d3:2f:c3:32:08:06:c1:d6:c7:c8:7b:1c:77:bf:f3:2a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
        Validity
            Not Before: Apr  4 20:48:31 2024 GMT
            Not After : Apr  3 20:53:31 2025 GMT
        Subject: CN=80E723B35CD1E0F53A774576B168B1AE2CBF671C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:79:2c:58:cb:1c:1a:bc:52:33:e1:5e:37:26:
                    68:d7:3b:e5:54:cf:d9:41:ce:1e:68:2c:ee:32:de:
                    89:c7:6f:df:32:fa:e1:3a:a2:eb:a2:31:b9:d2:eb:
                    95:e4:58:1d:bd:6f:57:04:da:09:98:1f:a1:ab:e4:
                    7d:f0:18:0b:15:27:cf:e0:c6:c1:eb:f1:14:16:20:
                    ab:44:1c:12:45:cb:01:16:53:9c:34:8b:e2:82:e5:
                    58:10:6d:fa:f3:6c:a1:60:60:c7:f6:8c:d2:cc:8b:
                    c5:dd:10:fd:4a:a4:fa:a7:bb:6c:ed:27:89:90:4c:
                    0a:75:7a:e3:d0:8b:b3:55:35:83:01:6e:fd:82:7b:
                    f2:85:0d:79:93:3f:22:e5:48:ba:d7:8d:c7:bc:46:
                    e3:dd:14:6f:23:f2:cc:d6:db:11:25:e0:af:92:fa:
                    d6:2e:c6:e7:cf:52:02:75:91:59:af:ee:f0:8c:a5:
                    7d:24:b0:3c:f1:79:ef:a4:06:a3:63:30:a7:94:cc:
                    cc:58:cf:d5:7d:29:f1:66:98:20:8a:54:34:d3:2f:
                    51:35:a6:a8:29:d9:6f:68:53:f0:e6:0d:f0:80:c2:
                    67:1f:2e:81:b9:49:56:0a:d2:d3:0c:7b:38:da:94:
                    fe:fa:45:4c:43:96:23:bc:e8:ab:cd:bc:5f:26:e5:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E7:23:B3:5C:D1:E0:F5:3A:77:45:76:B1:68:B1:AE:2C:BF:67:1C
            X509v3 Authority Key Identifier:
                keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:8d:90:ae:12:85:9b:2e:f2:e3:a3:8e:cb:58:6d:c0:bf:
         38:ef:c4:2f:52:ae:32:4b:2e:37:17:69:78:f9:06:74:8e:ec:
         50:a8:dd:57:ac:98:86:7a:07:19:72:9f:57:80:1c:93:06:1a:
         64:a0:f6:0e:4d:6b:39:65:1f:67:73:82:58:82:dd:d6:2b:8e:
         7a:f8:bf:b7:47:92:88:5e:91:23:8a:94:fa:0c:aa:e4:e0:43:
         85:1b:fc:3b:c2:39:aa:e2:85:82:ae:da:23:1d:d5:4e:b8:7b:
         c3:de:4c:e6:5f:71:b2:42:3d:3a:0b:87:a2:53:75:f2:23:e6:
         10:cc:2e:b5:33:fa:ee:7a:53:a4:20:8b:72:78:66:82:2f:4a:
         11:09:58:63:b1:56:0b:bb:4c:63:ae:cf:8d:cb:f2:9b:7f:c7:
         3b:22:5f:74:54:3e:b1:03:28:99:9b:0e:d8:ba:81:bf:57:c5:
         82:d4:cf:51:6a:2a:48:fc:6a:32:ba:80:0f:37:1e:fd:af:1e:
         6c:09:80:89:46:67:c2:06:31:56:f4:62:f6:26:97:04:e3:c4:
         8f:80:d3:41:ad:bf:8e:a5:b1:32:1d:67:e5:ac:8d:d3:5e:fe:
         3a:4f:24:6f:4e:ee:0b:3e:a5:4c:54:32:f4:ad:50:e5:01:42:
         56:39:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:20 2024 by rpki-client on console-ams.rpki-client.org