Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33322d3332203d3e20323731303030.roa
File:                     323830343a373462633a3a2f33322d3332203d3e20323731303030.roa (raw, json)
Hash identifier:          wbSrPE2N+T0bGHSBot+W6mmdbkGY4FvQcfGM4KpSJn4=
Subject key identifier:   4F:82:46:D6:07:83:0D:9A:E7:0B:9D:CF:4E:21:8E:C4:24:34:FA:EA
Certificate issuer:       /CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
Certificate serial:       3FCAB5A05B24C35A23BD32CD4DA899792A018DF7
Authority key identifier: 1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33322d3332203d3e20323731303030.roa
Signing time:             Fri 05 Apr 2024 00:25:27 +0000
ROA not before:           Fri 05 Apr 2024 00:20:27 +0000
ROA not after:            Fri 04 Apr 2025 00:25:27 +0000
asID:                     271000
IP address blocks:        2804:74bc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl
                          rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ca:b5:a0:5b:24:c3:5a:23:bd:32:cd:4d:a8:99:79:2a:01:8d:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB
        Validity
            Not Before: Apr  5 00:20:27 2024 GMT
            Not After : Apr  4 00:25:27 2025 GMT
        Subject: CN=4F8246D607830D9AE70B9DCF4E218EC42434FAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:05:fb:f3:e4:6d:ab:36:6e:0d:51:77:0a:53:
                    ab:8c:7c:5a:fc:4d:e1:61:02:b7:af:27:2e:88:0d:
                    5a:40:61:d6:b0:16:d9:bf:ce:98:cf:20:40:30:08:
                    1b:b1:5c:c8:6e:e2:af:ee:c5:b0:f8:d1:af:69:5c:
                    17:9d:41:8e:63:50:bd:22:d6:38:e2:96:09:70:35:
                    e6:04:8c:28:1b:86:67:19:7a:0b:de:4a:30:a5:50:
                    1b:84:33:80:7c:72:79:4b:28:e4:b1:2e:e0:35:de:
                    bb:f1:4c:30:62:0d:8d:47:09:dd:dc:28:5d:f2:52:
                    37:ce:60:a5:13:66:d4:a4:4a:3a:d7:3e:48:d2:78:
                    43:8e:db:04:58:ca:67:44:03:b6:53:a8:6c:71:95:
                    d3:43:a7:ed:ac:4e:f1:75:b8:4d:6d:64:c7:00:44:
                    2e:8d:9c:28:b9:0a:de:28:da:ee:c5:07:14:b0:e6:
                    99:32:a5:97:3c:3c:44:05:75:3c:5c:11:4a:9d:af:
                    6f:75:d0:be:3e:a7:10:b9:1a:e2:ad:9c:06:d0:2d:
                    ee:6d:bd:da:8e:19:03:7d:e7:30:1c:cf:a6:4a:3b:
                    ea:16:72:87:be:d5:ee:e0:5b:09:bb:ba:12:42:4f:
                    76:ce:06:56:2a:bc:04:98:d2:e7:c0:7c:ac:89:a1:
                    72:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:82:46:D6:07:83:0D:9A:E7:0B:9D:CF:4E:21:8E:C4:24:34:FA:EA
            X509v3 Authority Key Identifier:
                keyid:1B:8D:A4:5C:39:C0:DF:6F:B7:4B:06:F0:F8:09:8A:C6:91:68:64:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B8DA45C39C0DF6FB74B06F0F8098AC6916864DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7VVrQboncAdpgcKqhJiXwu4jSRtQemQ3rafzjNFDK5Yg/1/323830343a373462633a3a2f33322d3332203d3e20323731303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:0a:47:0c:1b:2c:1f:96:01:d1:32:23:33:55:91:1d:d6:a0:
         e8:61:6d:c9:03:4d:38:92:79:2c:93:cc:5e:2c:17:b6:62:7b:
         54:ca:fa:6d:55:db:ff:0f:27:59:02:23:5b:52:20:52:00:f3:
         72:26:95:a0:c8:46:3b:3a:61:cd:d3:ae:38:17:d9:23:ca:3b:
         0b:07:0d:ad:0b:6e:5c:e3:6b:13:e7:01:da:ff:71:e1:75:12:
         0c:ef:8d:e2:ec:a8:6c:9f:6e:45:54:af:f0:86:a3:26:ee:8b:
         34:03:4f:c8:85:48:1e:aa:3f:b8:39:c1:6e:9f:cc:64:e2:7a:
         0f:a6:c3:e9:32:d2:b9:0e:a9:42:61:b9:6f:04:07:f0:b4:1b:
         7d:ff:00:70:07:66:88:a4:b4:7d:1b:a3:a4:d5:67:a6:f2:e3:
         97:6b:f6:3b:3e:b0:82:cd:4f:d6:1f:d3:cd:a1:11:69:24:f1:
         af:65:d4:80:a0:d7:7e:f6:c4:31:7e:a6:81:56:df:ba:97:1c:
         d9:86:10:2f:b5:81:1a:c1:92:2e:e9:b0:45:df:df:c5:a5:97:
         e9:3c:d6:df:d9:26:a3:e2:e2:ef:21:e2:11:24:39:91:2c:36:
         fe:49:57:33:33:9e:8c:5b:a5:21:52:13:7d:e0:3d:20:b2:a3:
         94:aa:db:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:11 2024 by rpki-client on console-ams.rpki-client.org