Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323033.roa
File:                     323830343a6439303a3a2f33322d3536203d3e20323033.roa (raw, json)
Hash identifier:          QNFSmCud9ESuU9Qq0IbyzJ/FAVrlDDi+pQgSw9GKe1I=
Subject key identifier:   EE:D9:1D:14:60:9C:80:F2:39:09:BB:9F:3A:F2:6E:50:49:D7:41:8B
Certificate issuer:       /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial:       78C9508729A1CC0D0E9C02A71EFAD4745A4A9E2F
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323033.roa
Signing time:             Thu 04 Apr 2024 00:30:18 +0000
ROA not before:           Thu 04 Apr 2024 00:25:18 +0000
ROA not after:            Thu 03 Apr 2025 00:30:18 +0000
asID:                     203
IP address blocks:        2804:d90::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
                          rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 22:30:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:c9:50:87:29:a1:cc:0d:0e:9c:02:a7:1e:fa:d4:74:5a:4a:9e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
        Validity
            Not Before: Apr  4 00:25:18 2024 GMT
            Not After : Apr  3 00:30:18 2025 GMT
        Subject: CN=EED91D14609C80F23909BB9F3AF26E5049D7418B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:4c:48:5f:23:5c:33:19:0a:d9:e7:a7:95:
                    bd:f1:41:24:b5:aa:93:37:a6:ea:08:e3:eb:bf:af:
                    01:01:43:34:10:8b:66:fb:cb:d0:73:61:01:40:d9:
                    77:bd:0a:6c:bd:d2:0d:27:96:49:9d:53:13:5f:6a:
                    6c:a0:3a:64:f5:fa:55:7b:b6:92:4f:e8:56:e7:a1:
                    53:51:3f:05:e7:9d:b8:b0:cf:f0:15:30:7a:72:12:
                    c8:ee:07:6d:65:24:c7:af:fd:9b:bc:ec:58:19:73:
                    f4:9c:ca:af:4b:46:c6:5c:61:9c:41:fd:26:89:6b:
                    cc:4e:b3:b2:9e:aa:f0:30:c8:ba:24:bd:67:33:9b:
                    c4:94:e4:43:93:cf:53:3a:39:79:29:42:fe:04:a9:
                    b7:2f:15:39:63:b7:a7:4e:e0:9a:35:1f:30:c0:c0:
                    fd:d3:6e:6d:e5:0b:04:0a:06:57:ca:60:3a:cf:40:
                    fe:2f:d9:01:ba:f9:6a:4c:27:d6:02:68:4d:d2:77:
                    5a:be:41:7e:47:f7:63:ad:96:97:55:60:d9:3c:6c:
                    9d:04:2c:6e:ff:a7:c3:86:14:63:d3:47:42:0c:89:
                    8e:d4:e2:33:8e:a1:31:6b:ef:2e:a4:de:8f:13:da:
                    20:5a:c5:c4:75:73:cc:57:83:a9:3e:bf:83:5f:07:
                    b9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D9:1D:14:60:9C:80:F2:39:09:BB:9F:3A:F2:6E:50:49:D7:41:8B
            X509v3 Authority Key Identifier:
                keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:6b:47:d1:95:4e:3f:aa:19:91:14:f5:b8:05:88:57:4e:48:
         17:6c:4e:4a:ba:c6:a6:dc:3e:0c:58:87:dd:32:0c:87:71:5c:
         63:da:9b:66:c2:2a:72:8e:8c:fd:02:5d:a1:c7:4b:f8:c1:37:
         70:00:8a:09:69:d6:24:c5:df:50:3e:81:47:cf:6f:d1:4d:59:
         0e:78:13:c4:5c:10:25:0f:1b:7e:a8:8b:aa:59:74:1b:57:e8:
         f8:c2:c5:24:57:6e:81:22:41:5d:bf:f3:75:83:f8:85:0d:fc:
         63:10:a4:fa:af:ae:bd:05:b6:d5:c3:1b:d3:ea:a3:f7:2b:a3:
         74:b8:47:1a:58:26:ad:10:88:94:db:d2:df:2b:99:53:82:2b:
         05:5a:67:fd:17:01:62:51:f7:cb:72:ff:5d:49:48:42:6a:71:
         b0:fa:44:aa:3f:cc:eb:44:8c:be:a3:80:86:d8:a6:d0:7f:f4:
         77:d3:4b:77:e2:65:f4:8c:0a:14:82:1d:a8:68:c3:93:6e:c8:
         43:f3:41:29:86:c1:66:dc:9f:e6:25:4c:b3:a2:0f:0a:34:31:
         0c:aa:9a:4f:3b:9d:b6:f6:6f:22:62:20:8d:b0:8a:16:5a:ca:
         f3:e7:bf:41:49:f1:99:eb:88:c4:17:8c:3f:e3:6c:b3:e3:55:
         cc:aa:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:12 2024 by rpki-client on console-fra.rpki-client.org