Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/323830343a363461383a3a2f33322d3438203d3e20323639343338.roa
File:                     323830343a363461383a3a2f33322d3438203d3e20323639343338.roa (raw, json)
Hash identifier:          /XElOCfotxrAfA874fWxY9L/7Vd2AchzpylBPDNliD4=
Subject key identifier:   4D:5C:0C:26:6D:70:C2:7C:77:12:12:8F:C0:1F:37:63:F7:90:FC:AE
Certificate issuer:       /CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
Certificate serial:       0D2FC079E145302BCF11119C3E1D075E5D308CAB
Authority key identifier: DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/323830343a363461383a3a2f33322d3438203d3e20323639343338.roa
Signing time:             Thu 04 Apr 2024 20:03:17 +0000
ROA not before:           Thu 04 Apr 2024 19:58:17 +0000
ROA not after:            Thu 03 Apr 2025 20:03:17 +0000
asID:                     269438
IP address blocks:        2804:64a8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl
                          rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 05:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:2f:c0:79:e1:45:30:2b:cf:11:11:9c:3e:1d:07:5e:5d:30:8c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
        Validity
            Not Before: Apr  4 19:58:17 2024 GMT
            Not After : Apr  3 20:03:17 2025 GMT
        Subject: CN=4D5C0C266D70C27C7712128FC01F3763F790FCAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:78:7c:11:27:1e:05:62:00:34:a6:c9:b3:7f:
                    19:ec:42:38:cf:fc:34:b5:47:8e:11:d1:07:12:3d:
                    9b:93:c9:20:77:0f:f4:6c:8d:ae:a1:fd:8b:21:d4:
                    8c:10:6e:3a:3a:91:40:14:09:14:98:aa:e9:7a:38:
                    d4:d6:0e:a7:95:86:bc:86:62:24:7e:d2:bd:42:34:
                    05:f4:e6:94:79:b2:03:f7:06:ec:c5:e9:9f:9c:8b:
                    91:a4:0f:ec:83:b0:ef:d2:01:cd:62:1b:81:ef:aa:
                    a1:73:af:dc:71:04:7a:ec:dd:51:64:19:7a:07:58:
                    73:50:6b:ef:9c:6a:84:01:ca:e9:d6:0c:74:97:8b:
                    40:16:e0:2c:f9:52:ba:54:af:6b:2b:8e:db:fb:7d:
                    a1:34:76:09:3a:7a:fc:79:ff:9a:fc:54:c7:ef:c7:
                    3a:06:db:99:63:ba:24:22:32:9b:af:22:2c:aa:7b:
                    0f:02:13:a8:7d:bb:a6:53:b5:3d:97:3d:19:46:3f:
                    6a:88:33:0d:99:70:f1:32:5f:85:86:68:18:48:38:
                    01:bd:23:07:29:4e:7f:2f:39:d8:c8:74:a4:79:27:
                    e1:6a:24:b8:cc:9f:d2:d8:25:9e:59:a8:97:24:a0:
                    1b:bf:b7:a6:a2:d3:20:ff:78:74:00:bf:8b:f0:77:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5C:0C:26:6D:70:C2:7C:77:12:12:8F:C0:1F:37:63:F7:90:FC:AE
            X509v3 Authority Key Identifier:
                keyid:DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/323830343a363461383a3a2f33322d3438203d3e20323639343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:2d:e5:5b:1e:6a:dc:c9:f0:84:4d:87:9d:f8:5c:2f:3d:19:
         6f:3b:e2:9b:b8:79:c2:ec:91:f4:a0:a7:a8:55:d2:7d:10:0f:
         82:49:80:d6:76:6f:2a:93:f6:eb:d8:d7:34:80:04:bb:21:b7:
         3f:0b:75:f2:ad:43:1f:2f:3a:70:a5:b6:70:35:f1:e8:75:02:
         48:43:ec:a3:f5:64:26:f8:21:3c:08:6c:31:de:af:0e:bb:51:
         c3:fe:e0:37:c6:94:4a:f1:9a:51:92:b8:b7:31:6d:bb:df:1a:
         43:7f:bf:b3:59:aa:62:20:3a:d8:80:e6:cd:70:d5:a9:af:2d:
         f0:b2:84:52:42:3c:d5:80:2a:f7:4c:c1:22:06:09:4a:0c:45:
         35:18:0a:ff:2b:a0:71:af:8d:47:ff:6b:e2:d8:52:7d:e7:50:
         f0:34:70:29:43:33:8e:ef:ee:3e:5a:8a:8a:35:28:af:4c:7a:
         cf:54:ce:14:0a:08:6c:8d:2f:7c:87:19:e1:55:cd:5c:ac:54:
         46:85:4b:1d:9b:0f:0b:70:d0:6b:cd:6f:b7:72:31:b0:bc:8f:
         c0:de:89:6f:43:bb:a3:a7:8f:b1:65:51:ae:21:2f:d1:cf:ee:
         92:69:cc:d9:fb:b5:58:ba:47:dc:29:2f:45:00:18:03:8d:9d:
         f2:8d:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:56 2024 by rpki-client on console-fra.rpki-client.org