Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33322d3332203d3e20323635333739.roa
File:                     323830343a333332633a3a2f33322d3332203d3e20323635333739.roa (raw, json)
Hash identifier:          49tfRxwlWRzBC55WnhPOfxV5F64oV/OkB3K9PYULAUE=
Subject key identifier:   B0:C5:15:E5:1C:9E:9C:12:01:86:F0:E9:76:55:87:82:F7:F7:2C:7A
Certificate issuer:       /CN=54204F38B6BA00E08F89389BEA820C255D02514C
Certificate serial:       06EAEF3B27F3550A5E032B8BCD0D12FCC9F03D2B
Authority key identifier: 54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33322d3332203d3e20323635333739.roa
Signing time:             Wed 03 Apr 2024 18:32:07 +0000
ROA not before:           Wed 03 Apr 2024 18:27:07 +0000
ROA not after:            Wed 02 Apr 2025 18:32:07 +0000
asID:                     265379
IP address blocks:        2804:332c::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl
                          rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ea:ef:3b:27:f3:55:0a:5e:03:2b:8b:cd:0d:12:fc:c9:f0:3d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54204F38B6BA00E08F89389BEA820C255D02514C
        Validity
            Not Before: Apr  3 18:27:07 2024 GMT
            Not After : Apr  2 18:32:07 2025 GMT
        Subject: CN=B0C515E51C9E9C120186F0E976558782F7F72C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f6:49:f1:19:4d:45:e1:bc:8e:16:7d:fc:99:
                    1c:3b:7c:26:1e:cf:04:6d:92:3e:57:e1:91:99:b9:
                    b3:50:d1:73:26:98:84:9b:2f:3b:2d:54:03:93:91:
                    94:d0:0b:2e:ba:6b:3c:c9:62:3e:f9:19:d0:f8:9a:
                    27:60:90:91:6c:a5:5b:c0:f6:74:e2:67:6d:d3:70:
                    c5:78:ee:f1:86:68:3a:5e:41:74:2a:67:bb:64:98:
                    67:c0:3a:d7:3c:06:6e:0d:42:a3:7e:23:70:97:36:
                    84:96:95:ce:f9:c3:9e:f9:a1:76:2e:8e:c3:aa:46:
                    cd:6c:83:eb:a6:16:c7:f8:92:60:96:bd:08:13:f5:
                    eb:36:b9:ce:0d:78:25:c4:08:f6:12:ba:61:f1:c8:
                    e9:19:39:57:41:bc:87:9e:f0:09:f2:4f:31:43:e8:
                    cd:85:d2:fe:75:d1:05:4c:41:35:b3:3d:8a:50:24:
                    6e:2b:26:6e:b5:16:9d:67:a0:a6:83:80:b6:77:ed:
                    1c:73:3f:cc:8f:8c:73:b3:75:2c:43:30:75:4f:ab:
                    f9:9d:fd:d8:15:1c:0e:8c:41:e4:96:a6:85:48:bc:
                    f2:5a:63:f2:f1:79:7b:d1:6b:1e:d5:b4:be:f3:f4:
                    64:a7:5f:29:59:26:47:23:dd:cc:82:ee:ca:02:a9:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C5:15:E5:1C:9E:9C:12:01:86:F0:E9:76:55:87:82:F7:F7:2C:7A
            X509v3 Authority Key Identifier:
                keyid:54:20:4F:38:B6:BA:00:E0:8F:89:38:9B:EA:82:0C:25:5D:02:51:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/54204F38B6BA00E08F89389BEA820C255D02514C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54204F38B6BA00E08F89389BEA820C255D02514C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/1/323830343a333332633a3a2f33322d3332203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:332c::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:79:15:5e:31:24:41:c5:1c:eb:13:80:fb:24:a2:50:c7:cd:
         29:ec:d2:2e:05:83:01:8f:a5:ab:fc:55:9b:4e:ea:05:ae:33:
         ca:45:0b:86:63:14:45:ee:87:49:e4:8a:ce:af:23:7a:2e:1c:
         e0:c0:41:9c:4e:34:dc:b0:6b:5d:ac:d9:72:4b:b9:8a:2c:04:
         38:88:2b:2c:22:9b:5e:0e:3b:09:20:f0:a7:5b:fb:00:e5:e2:
         5d:7f:8e:d6:ae:a5:03:be:75:19:86:5f:05:4a:df:0e:00:c8:
         03:b2:ed:9b:6c:ef:6a:35:2d:de:e0:63:43:3f:59:c4:20:c0:
         57:32:0f:22:49:bc:bb:25:88:fa:c3:6b:29:99:9b:69:02:ef:
         19:02:89:5e:87:0d:de:73:ef:e7:12:bb:02:a3:66:93:60:ce:
         47:8b:ff:3b:cf:a3:ed:6f:f5:ec:5d:f9:62:e4:a0:34:64:24:
         c7:63:1d:83:fa:76:b0:b4:71:a2:21:81:78:c9:5e:b1:7d:e8:
         74:a8:3e:79:de:fb:3d:be:71:da:1d:6f:4c:c3:d3:f0:9f:a5:
         ad:8d:b5:0c:2c:02:21:7e:cf:56:84:9f:d1:36:fa:9a:2d:73:
         a4:64:86:bf:94:68:66:1a:bb:9e:ee:0c:58:fa:29:48:09:b7:
         3f:c4:68:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 09:06:07 2024 by rpki-client on console-fra.rpki-client.org