Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/323830343a3433633a3a2f33322d3430203d3e20323632343232.roa
File:                     323830343a3433633a3a2f33322d3430203d3e20323632343232.roa (raw, json)
Hash identifier:          rVRSjRi50GYBSMiq+nwd+8tFAta8Uq638KLdLTAsXlA=
Subject key identifier:   5D:AB:78:EA:C2:30:C2:22:A8:08:4C:AA:42:A8:AD:E5:BC:1F:10:82
Certificate issuer:       /CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
Certificate serial:       5155A301AE137D01FB14372499587512EFEF2171
Authority key identifier: 24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/323830343a3433633a3a2f33322d3430203d3e20323632343232.roa
Signing time:             Wed 03 Apr 2024 19:23:31 +0000
ROA not before:           Wed 03 Apr 2024 19:18:31 +0000
ROA not after:            Wed 02 Apr 2025 19:23:31 +0000
asID:                     262422
IP address blocks:        2804:43c::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl
                          rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:55:a3:01:ae:13:7d:01:fb:14:37:24:99:58:75:12:ef:ef:21:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=244388DDFE9A99D71CEB27CDB6C76637D22CAB8F
        Validity
            Not Before: Apr  3 19:18:31 2024 GMT
            Not After : Apr  2 19:23:31 2025 GMT
        Subject: CN=5DAB78EAC230C222A8084CAA42A8ADE5BC1F1082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:08:b2:ee:cc:fb:9c:be:a3:d4:57:0c:7c:30:
                    33:3b:a0:9b:af:cd:e5:d6:1c:30:5a:9c:2b:d6:55:
                    91:8e:a3:57:d3:d4:df:32:bc:87:15:ad:cb:c6:d3:
                    2b:1e:9f:df:e8:18:20:04:64:9a:a8:f2:d9:a1:5b:
                    f1:09:5c:c5:7b:6c:f8:cd:5d:91:63:71:49:f3:de:
                    bd:a4:c9:0c:5c:72:fd:ac:95:81:b2:ce:47:f2:bb:
                    e5:61:bc:40:f9:b8:53:8b:69:25:bc:78:19:b0:71:
                    92:2a:13:ae:47:72:13:7e:60:1f:7f:6c:16:fb:15:
                    dd:75:79:a3:76:4e:41:81:61:5d:51:a8:ef:3d:31:
                    6f:12:d6:fe:47:dc:07:73:95:e5:34:3f:58:5c:88:
                    4f:26:90:0d:fd:2d:da:92:55:99:96:18:00:02:6c:
                    34:9c:b6:c1:8d:9e:f7:24:e0:f3:55:f9:d7:86:08:
                    85:d4:2b:82:d5:9b:c0:df:3d:76:83:29:e5:86:eb:
                    36:8b:89:9f:32:22:4f:f1:fd:65:f8:e4:94:53:95:
                    f5:55:b5:74:4b:4c:ef:4a:fe:24:90:dd:70:17:24:
                    e3:33:b8:8c:d1:eb:a7:f9:d7:48:89:8c:dd:3f:2f:
                    7a:20:58:4d:b8:c9:4f:d7:af:df:00:ad:04:69:e4:
                    e9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AB:78:EA:C2:30:C2:22:A8:08:4C:AA:42:A8:AD:E5:BC:1F:10:82
            X509v3 Authority Key Identifier:
                keyid:24:43:88:DD:FE:9A:99:D7:1C:EB:27:CD:B6:C7:66:37:D2:2C:AB:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/244388DDFE9A99D71CEB27CDB6C76637D22CAB8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ekoAqQeXzNKEAXqGMdwqZf9Tg7NdJQrbSaehx1dKgmg/1/323830343a3433633a3a2f33322d3430203d3e20323632343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:43:0c:6b:41:0c:2d:17:d6:fb:d4:41:38:45:14:12:e6:f7:
         63:f5:65:53:e8:e1:15:d0:08:ed:63:e8:34:c3:f0:07:b5:6c:
         62:92:ef:71:65:dc:2d:a1:2b:9b:83:fe:48:9e:20:2b:89:7e:
         bb:9c:72:58:34:1a:cd:a7:3c:4f:6a:86:3e:75:fa:54:34:41:
         29:da:86:d1:30:9c:12:a0:3a:bf:47:18:d5:64:c1:a8:dd:56:
         bd:98:fa:14:ae:83:4d:4f:45:c8:6b:55:2b:62:8c:e8:9a:48:
         e3:a8:d4:6e:c8:18:9f:6e:b4:ec:e8:84:66:c3:a6:2d:56:ec:
         eb:df:b5:33:c8:26:6c:7e:cc:11:4c:9b:42:44:47:8e:96:8d:
         a0:b6:bd:54:56:c5:82:16:72:10:c4:84:83:7f:e4:0d:68:18:
         20:8e:d4:c9:b3:c4:07:d4:67:e7:9f:23:ca:a0:00:0a:20:26:
         f3:24:41:56:94:ff:c8:e4:73:cb:9e:cd:7e:ad:e1:8d:fd:79:
         13:88:fd:71:d4:26:52:f0:c4:3b:c4:be:12:10:6c:a3:99:cc:
         66:14:d3:f3:93:66:39:fc:9b:a9:0c:e8:4d:33:75:34:00:16:
         b4:65:df:8f:7f:7e:b4:81:b3:35:ba:8d:f0:fe:da:d6:cd:ee:
         7b:b5:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:16 2024 by rpki-client on console-fra.rpki-client.org