Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d3334203d3e20323634313737.roa
File:                     323830343a323361633a3a2f33322d3334203d3e20323634313737.roa (raw, json)
Hash identifier:          ZhpqUle+ARoKSpXbD3RNfdxlYOS5TvUbjbiKBBHkPPM=
Subject key identifier:   8E:B3:3C:C0:2B:5F:A6:0D:F4:8C:41:0E:A6:82:53:C2:90:BC:6C:25
Certificate issuer:       /CN=482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA
Certificate serial:       0F6811E72C2EE3920F1CB3CA814280E7009E97C5
Authority key identifier: 48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d3334203d3e20323634313737.roa
Signing time:             Thu 08 Aug 2024 13:14:28 +0000
ROA not before:           Thu 08 Aug 2024 13:09:28 +0000
ROA not after:            Thu 07 Aug 2025 13:14:28 +0000
asID:                     264177
IP address blocks:        2804:23ac::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.crl
                          rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:68:11:e7:2c:2e:e3:92:0f:1c:b3:ca:81:42:80:e7:00:9e:97:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA
        Validity
            Not Before: Aug  8 13:09:28 2024 GMT
            Not After : Aug  7 13:14:28 2025 GMT
        Subject: CN=8EB33CC02B5FA60DF48C410EA68253C290BC6C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6c:8d:6a:d9:d8:05:b6:98:c9:80:a7:27:14:
                    fb:ea:75:84:2f:f6:d2:a9:d5:cb:b6:c6:50:df:e9:
                    3e:ea:b2:e1:45:f7:9e:01:39:6d:28:c8:db:9e:67:
                    96:f5:44:11:ac:35:48:d3:ab:47:3c:ea:5e:87:a6:
                    16:a7:90:ca:1b:2c:6d:c5:10:f5:3d:fc:b6:fb:03:
                    ca:8d:75:3e:86:81:55:25:2b:ba:b5:ab:8b:e8:d7:
                    e5:1b:68:0e:5b:61:d7:44:a9:81:80:fd:12:f3:d6:
                    de:64:c0:85:d3:ed:3a:ce:58:7a:89:be:f2:f6:ae:
                    07:0a:2a:18:ed:2b:e4:a9:1e:f8:02:c4:78:e9:98:
                    49:c7:08:03:a2:65:02:7a:1b:69:67:a7:da:c2:76:
                    f3:43:3e:86:7f:89:42:6e:9c:dc:4b:12:15:1d:bc:
                    83:77:33:e6:38:4d:47:29:68:f7:95:d7:93:2c:75:
                    57:0f:c0:5e:38:d4:27:20:14:8d:53:6f:ba:50:36:
                    c0:a6:0b:6f:95:a8:44:8b:8c:5e:16:88:c0:61:0f:
                    97:de:15:3a:09:d3:6e:b5:53:09:35:22:34:aa:75:
                    5d:28:8d:37:cf:4c:24:31:2e:6f:cf:0c:9f:a6:8c:
                    b6:5f:05:18:9b:55:ec:90:57:31:d3:71:00:5d:30:
                    80:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B3:3C:C0:2B:5F:A6:0D:F4:8C:41:0E:A6:82:53:C2:90:BC:6C:25
            X509v3 Authority Key Identifier:
                keyid:48:2D:CF:F0:F8:B4:5D:D8:B0:4E:33:F6:96:42:72:3E:6D:DA:7D:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482DCFF0F8B45DD8B04E33F69642723E6DDA7DCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84MQVLSyZXZjMY8Pjh4giMtvB7jGbtuYbyKpHMHZFuYs/0/323830343a323361633a3a2f33322d3334203d3e20323634313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:1c:27:9b:4b:e3:37:e5:78:fa:17:76:78:d9:a4:65:ea:
         c9:ac:95:f8:26:4f:03:f9:bf:ef:95:45:1a:a4:7b:ea:87:2f:
         4d:a0:33:1f:ed:03:51:e0:41:d5:e6:05:8c:a1:07:bf:27:50:
         60:f6:76:d9:9d:91:84:0f:ce:9a:f0:da:1f:c5:89:da:52:59:
         9e:72:14:18:ca:d3:4a:fe:c5:60:89:b1:62:c7:2e:50:0f:9f:
         d6:d3:50:24:b7:e2:9e:03:3d:6c:9c:cc:03:db:ac:fb:98:54:
         02:c7:3a:1c:e9:2e:bb:67:55:bf:22:dd:ee:31:1d:70:72:b9:
         9f:c7:ae:e2:94:86:9d:98:c3:be:53:c0:08:ee:d2:bc:13:6c:
         32:89:76:3c:b7:1b:28:4d:19:b8:66:48:0c:25:95:6c:59:86:
         f5:d2:c8:71:d3:e0:2b:8a:6d:37:74:15:50:1b:07:09:da:a1:
         c3:75:92:e4:9c:70:50:a9:2e:6b:51:8f:2a:94:7a:2a:f4:c6:
         08:6e:62:85:e3:d5:ae:ac:68:b2:76:28:ba:f2:2b:ca:50:52:
         8b:78:d5:04:87:29:4b:dd:8d:3e:01:8c:35:f5:90:e9:96:9c:
         64:14:d0:fa:a2:4d:ad:dc:95:a6:9e:34:71:a3:74:25:59:96:
         65:e3:ad:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 08:42:01 2024 by rpki-client on console-fra.rpki-client.org