Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/323830343a326234303a3a2f33322d3438203d3e20323635313433.roa
File:                     323830343a326234303a3a2f33322d3438203d3e20323635313433.roa (raw, json)
Hash identifier:          mjJshAmIWrskSHLzzfzIP3uFiwq6mdt9BQkonSg2kvQ=
Subject key identifier:   E5:6B:B8:0E:B8:30:F3:01:C0:9E:B0:D1:87:CF:E2:15:9A:84:29:97
Certificate issuer:       /CN=9C94842B2928FAED319D3BB427B8BDD7D2B246FF
Certificate serial:       2982A53AD4FAFF1A704B31536DD83DBF57926999
Authority key identifier: 9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/323830343a326234303a3a2f33322d3438203d3e20323635313433.roa
Signing time:             Thu 04 Apr 2024 10:38:39 +0000
ROA not before:           Thu 04 Apr 2024 10:33:39 +0000
ROA not after:            Thu 03 Apr 2025 10:38:39 +0000
asID:                     265143
IP address blocks:        2804:2b40::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.crl
                          rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:82:a5:3a:d4:fa:ff:1a:70:4b:31:53:6d:d8:3d:bf:57:92:69:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C94842B2928FAED319D3BB427B8BDD7D2B246FF
        Validity
            Not Before: Apr  4 10:33:39 2024 GMT
            Not After : Apr  3 10:38:39 2025 GMT
        Subject: CN=E56BB80EB830F301C09EB0D187CFE2159A842997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:c4:54:03:03:a9:f9:3c:60:41:47:67:80:
                    69:82:54:9b:a7:02:5c:55:66:60:18:69:d7:38:87:
                    47:6a:18:b1:76:a0:4c:33:67:99:7a:c2:5f:a9:2a:
                    19:e4:3e:f8:60:f0:19:10:a4:24:b2:70:d9:0a:49:
                    94:12:0b:c1:78:94:7e:93:32:40:91:cd:cf:76:17:
                    d7:52:9a:05:b3:71:25:ad:eb:54:c1:12:f0:94:40:
                    0b:95:0d:ee:92:30:de:df:08:55:0f:b3:a5:6d:b9:
                    1d:de:77:25:be:71:e2:9b:64:1d:ad:05:2f:23:bc:
                    39:8f:b7:55:19:a0:63:1f:43:e6:96:c0:9b:a1:23:
                    8c:f3:99:b0:cb:79:92:c3:ac:fd:32:e1:e4:45:7d:
                    89:0c:a0:59:ac:7e:5e:12:32:99:06:fb:45:8b:7b:
                    cc:bc:54:0a:6d:98:29:5b:9f:eb:bd:46:1d:b5:71:
                    1c:58:06:ec:de:45:41:a2:8e:06:85:2b:47:65:64:
                    ed:7e:bd:49:44:97:65:57:4c:c8:e4:ea:a8:d7:83:
                    61:f2:54:98:cd:19:71:5c:37:3c:5f:53:0d:8e:ab:
                    73:aa:5e:3d:10:2c:57:ae:0f:77:2a:d8:54:08:db:
                    ef:34:71:c1:c1:5b:54:84:46:d9:c7:c4:1a:92:47:
                    16:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6B:B8:0E:B8:30:F3:01:C0:9E:B0:D1:87:CF:E2:15:9A:84:29:97
            X509v3 Authority Key Identifier:
                keyid:9C:94:84:2B:29:28:FA:ED:31:9D:3B:B4:27:B8:BD:D7:D2:B2:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C94842B2928FAED319D3BB427B8BDD7D2B246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8EW7ZSjATcw9bmam2hB5kM5bGtv7jWVzwPh5FdnWKxpu/1/323830343a326234303a3a2f33322d3438203d3e20323635313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         d9:52:2d:1e:ab:21:47:a6:f2:7d:18:b8:eb:e5:6e:a4:a6:aa:
         bf:fe:09:49:fa:8e:33:5e:84:a9:a4:6d:56:28:4d:e3:18:2b:
         39:7d:ea:48:53:7c:de:14:c1:de:c0:fa:4f:2f:e5:b6:44:d2:
         9b:fd:48:66:52:8f:8c:4d:a9:38:ce:1d:03:57:4e:e7:cc:b7:
         06:aa:35:c2:48:ca:35:ea:93:32:7f:72:cc:42:b4:5f:b2:89:
         b3:6b:91:5f:34:9a:b6:fc:c1:5c:76:91:a2:89:30:13:c7:d8:
         1d:25:37:52:4f:ab:10:ae:7b:9f:b8:b5:7a:4b:48:fb:3a:3a:
         50:22:f1:b5:4a:59:b9:2d:c0:41:f0:d8:c3:94:66:0c:e4:b3:
         c8:cc:19:8c:36:29:f5:24:55:a1:a1:0b:2c:2c:56:0d:07:bf:
         12:7a:6e:d2:c7:5f:01:ea:87:e3:27:29:64:c7:42:59:c4:52:
         89:3f:5c:41:18:4c:4b:75:a3:c9:cf:34:6b:18:4f:75:a9:4a:
         a7:2f:8f:78:92:4a:3a:83:a7:89:93:bd:a5:c9:79:a1:b3:89:
         2e:78:93:18:0d:b3:8a:e5:8c:17:11:98:b7:a8:dd:b0:90:11:
         84:fe:09:1d:c6:23:7c:fc:c7:b2:18:d4:1c:91:59:9c:3a:ad:
         c5:51:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org