Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/323830343a373234633a3a2f33322d313238203d3e20323730383435.roa
File:                     323830343a373234633a3a2f33322d313238203d3e20323730383435.roa (raw, json)
Hash identifier:          mlCtO7LdV2idfGCAizAplfGbVIKsfMQac4fUh8Bzq4c=
Subject key identifier:   47:B1:64:0B:90:8C:A6:8D:20:E5:C5:A4:15:21:AE:B5:A7:69:4B:8F
Certificate issuer:       /CN=44D163BB7C285498620FF487902FE788F88F4349
Certificate serial:       7C197AF0EA3C0B573674C120CF5923E3BD9D9D36
Authority key identifier: 44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/323830343a373234633a3a2f33322d313238203d3e20323730383435.roa
Signing time:             Thu 04 Apr 2024 17:43:04 +0000
ROA not before:           Thu 04 Apr 2024 17:38:04 +0000
ROA not after:            Thu 03 Apr 2025 17:43:04 +0000
asID:                     270845
IP address blocks:        2804:724c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl
                          rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 16:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:19:7a:f0:ea:3c:0b:57:36:74:c1:20:cf:59:23:e3:bd:9d:9d:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44D163BB7C285498620FF487902FE788F88F4349
        Validity
            Not Before: Apr  4 17:38:04 2024 GMT
            Not After : Apr  3 17:43:04 2025 GMT
        Subject: CN=47B1640B908CA68D20E5C5A41521AEB5A7694B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:b0:27:f3:ad:f0:f3:6e:63:3c:b2:74:0f:
                    a9:38:9b:a7:0b:93:88:d2:5e:e2:df:c4:d9:79:99:
                    c1:3f:08:35:19:99:a2:e9:9d:38:ea:da:4f:6d:61:
                    c0:ea:e3:8e:bf:83:c6:a5:a9:e2:54:d8:84:62:ac:
                    e1:c3:82:61:37:8d:7a:70:56:78:33:b8:1e:b7:48:
                    50:69:68:78:53:2c:a8:04:9f:36:7a:3a:ce:89:b3:
                    85:c7:c1:47:b6:ea:53:4d:7d:02:3e:ea:88:5e:c3:
                    d2:be:90:a7:3c:a0:9a:00:e0:0e:94:a7:9c:dc:fb:
                    ef:d3:84:52:68:ed:81:db:88:3c:ca:b8:da:2f:60:
                    26:e9:d7:89:4c:df:bc:83:de:a9:7e:97:f1:2d:35:
                    47:2b:c2:b9:33:d5:d9:54:f1:e5:08:2a:f4:51:01:
                    ca:ec:77:5b:14:b8:10:96:aa:0e:67:a9:c1:f1:d0:
                    2f:57:ee:84:fb:cf:73:0f:11:f6:21:13:28:8e:fd:
                    ad:70:7c:e7:4d:f8:1d:8b:0c:06:30:8b:ff:a0:ac:
                    ba:6c:7a:e1:16:9a:cd:65:e4:33:b1:5d:fe:4f:d2:
                    4e:36:5a:73:af:b8:7b:d7:a2:7e:6f:d3:5f:21:86:
                    bc:4a:7d:ce:bb:5f:57:e1:dc:73:d8:2e:0e:a2:69:
                    10:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B1:64:0B:90:8C:A6:8D:20:E5:C5:A4:15:21:AE:B5:A7:69:4B:8F
            X509v3 Authority Key Identifier:
                keyid:44:D1:63:BB:7C:28:54:98:62:0F:F4:87:90:2F:E7:88:F8:8F:43:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/44D163BB7C285498620FF487902FE788F88F4349.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44D163BB7C285498620FF487902FE788F88F4349.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/1/323830343a373234633a3a2f33322d313238203d3e20323730383435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:724c::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:2b:89:54:dc:7b:0d:fc:a1:00:73:51:36:5d:12:4b:6b:bf:
         84:f5:1a:76:09:33:ee:d3:dd:ae:b3:e1:b8:7e:bd:9e:63:81:
         66:4f:4f:8e:99:f1:30:0e:dd:1c:a1:60:3e:ff:28:f2:29:4a:
         87:67:65:cd:5d:d5:95:25:d1:39:32:03:2b:16:25:a5:3f:b4:
         b6:9b:8d:e5:61:4b:23:72:b0:e7:41:16:7a:82:bf:46:3e:d0:
         ec:78:df:bd:48:82:73:50:d4:43:c4:92:35:1e:68:45:60:39:
         6d:8d:4b:1e:2e:99:a0:18:90:88:c5:2d:7a:a3:a6:d2:3a:4d:
         ae:16:11:cb:6c:e2:19:21:9c:36:7c:72:2e:85:db:29:51:fb:
         48:0c:31:65:c6:81:c0:5f:6b:6c:85:24:91:7e:3b:af:83:6d:
         69:78:fa:0d:12:b3:87:54:8b:ae:2d:6b:e5:d1:cf:84:8d:08:
         58:b8:69:b8:6e:c0:13:93:49:fc:a7:b2:d8:5c:c4:09:4e:a4:
         27:90:f9:7d:eb:62:c6:2d:e7:7b:f2:66:6c:3c:2c:21:3b:51:
         c0:9b:f9:a3:62:cd:e9:5f:92:81:36:63:2d:c2:b7:0e:61:a4:
         1e:b3:58:e0:e7:b0:d7:b2:00:01:2e:b6:03:8e:bc:96:53:f3:
         53:93:41:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 19:18:02 2024 by rpki-client on console-fra.rpki-client.org