Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa
File:                     323830343a333865343a3a2f33322d3438203d3e20323636353038.roa (raw, json)
Hash identifier:          MHAi/U/CeRi95ZEYcdxT8DL2akmH6g1xcnsoFCV1NiQ=
Subject key identifier:   52:A3:93:9D:EA:0F:DA:63:3E:C7:D4:A3:54:24:44:8E:4D:41:60:4E
Certificate issuer:       /CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
Certificate serial:       6E613F5E93926C07E1702A30EAD63D51487F7249
Authority key identifier: 10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa
Signing time:             Thu 04 Apr 2024 16:22:00 +0000
ROA not before:           Thu 04 Apr 2024 16:17:00 +0000
ROA not after:            Thu 03 Apr 2025 16:22:00 +0000
asID:                     266508
IP address blocks:        2804:38e4::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl
                          rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 01:05:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:61:3f:5e:93:92:6c:07:e1:70:2a:30:ea:d6:3d:51:48:7f:72:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F
        Validity
            Not Before: Apr  4 16:17:00 2024 GMT
            Not After : Apr  3 16:22:00 2025 GMT
        Subject: CN=52A3939DEA0FDA633EC7D4A35424448E4D41604E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d3:82:df:3d:e9:e1:be:02:68:7e:7d:1c:3a:
                    73:da:23:8f:68:dd:b3:ca:9c:39:7b:38:d7:df:51:
                    fe:a6:4d:c6:b1:40:99:84:bc:bf:93:59:57:e2:15:
                    19:6d:a8:ab:7e:92:bc:8b:14:a0:8b:0f:6f:e8:a5:
                    f1:af:17:7c:c3:ff:67:fb:f1:c0:11:fa:a8:77:b0:
                    55:2b:77:39:4a:44:be:fb:92:db:ad:4b:8b:ae:1c:
                    64:14:61:95:4b:8c:9b:7c:50:b0:8f:7a:c0:e2:1b:
                    66:f4:0f:ea:00:63:bb:02:5d:92:01:02:1b:07:2e:
                    88:cf:5d:30:78:e2:14:ff:aa:9e:db:ac:ff:63:60:
                    d5:04:e0:8f:7e:c3:5e:28:85:f7:f8:12:65:ec:a7:
                    85:40:e2:c4:35:68:c1:fd:46:05:af:6e:74:63:d5:
                    72:1f:05:09:9d:8d:2d:9f:9b:36:75:fa:94:8a:da:
                    60:9c:3b:d6:cc:72:1f:48:98:09:89:e6:64:0c:16:
                    76:72:2a:db:ad:8d:48:76:81:80:6b:be:dd:6c:d9:
                    34:26:d0:e1:10:3f:a9:13:b8:69:ce:32:cb:17:36:
                    fb:ff:84:aa:5d:1f:11:49:84:e2:45:73:ed:77:4d:
                    d2:f2:23:48:26:50:2e:fb:bf:23:ed:6f:ed:5b:fb:
                    78:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:93:9D:EA:0F:DA:63:3E:C7:D4:A3:54:24:44:8E:4D:41:60:4E
            X509v3 Authority Key Identifier:
                keyid:10:CC:3E:D3:0E:D2:B9:E1:9A:7E:D0:8E:B0:6D:68:83:FE:4A:22:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/10CC3ED30ED2B9E19A7ED08EB06D6883FE4A221F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NUV4XA6H6viQcv4eLX8rtGynudHw2rvd3WfKE2ffELb/1/323830343a333865343a3a2f33322d3438203d3e20323636353038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:5c:a3:40:4b:9a:25:22:9f:9c:26:42:1c:75:ef:cb:76:cf:
         17:c8:66:8f:4a:a8:88:2c:45:e0:7a:ba:db:dd:90:b9:f3:b0:
         3a:f9:e9:af:27:d9:d4:ec:6c:76:6b:6b:7f:4b:e4:d3:30:b9:
         45:cf:13:15:e8:35:d7:a5:2c:fc:92:eb:a0:ec:1f:78:63:cd:
         bb:79:ea:08:4a:6c:9a:c1:ec:76:80:04:d0:54:be:87:8b:3f:
         27:1e:eb:54:ba:65:6e:7a:9e:96:35:77:65:f5:e1:6b:af:01:
         d0:60:a5:f6:dc:e4:49:e0:cd:b5:d2:8c:b5:d9:60:8c:00:aa:
         ec:3a:24:ae:95:c0:7b:8a:50:65:08:cf:c7:72:a9:55:a2:5e:
         37:0f:30:ab:17:1b:99:d9:e0:f0:d8:2c:24:1e:80:ee:f1:45:
         06:f9:4c:fb:11:c5:a9:0d:53:38:2e:70:37:42:e0:6a:f3:03:
         7e:17:fb:39:18:6b:2b:15:a8:c7:60:fb:f3:9c:60:5d:72:be:
         58:c8:11:d6:c0:f0:ca:90:4e:ee:90:5e:7d:65:b7:78:dd:0f:
         0b:87:55:45:6f:3c:1f:79:2d:49:51:fa:e1:2f:3b:dc:29:e8:
         b2:ee:71:db:25:df:cc:4a:c3:e2:32:e5:5d:3b:86:f3:f2:f3:
         49:2b:ca:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:33 2024 by rpki-client on console-fra.rpki-client.org