Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/323830343a366263383a3a2f33322d3334203d3e20323730343235.roa
File:                     323830343a366263383a3a2f33322d3334203d3e20323730343235.roa (raw, json)
Hash identifier:          CUd9IOh1nbNknYferJU5xy35+mwaEqcu9gZh03jQCeo=
Subject key identifier:   42:67:07:CF:78:69:F9:55:5D:BC:14:F5:DB:68:5D:A1:A3:14:D0:5E
Certificate issuer:       /CN=A422D440165BAA30AAA7A2F917873160E46205D6
Certificate serial:       4CE5DCDC97A2F18211C7FE7EDF9E0AE606FD9701
Authority key identifier: A4:22:D4:40:16:5B:AA:30:AA:A7:A2:F9:17:87:31:60:E4:62:05:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A422D440165BAA30AAA7A2F917873160E46205D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/323830343a366263383a3a2f33322d3334203d3e20323730343235.roa
Signing time:             Thu 08 Aug 2024 18:24:53 +0000
ROA not before:           Thu 08 Aug 2024 18:19:53 +0000
ROA not after:            Thu 07 Aug 2025 18:24:53 +0000
asID:                     270425
IP address blocks:        2804:6bc8::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.crl
                          rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A422D440165BAA30AAA7A2F917873160E46205D6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 30 Nov 2024 16:35:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e5:dc:dc:97:a2:f1:82:11:c7:fe:7e:df:9e:0a:e6:06:fd:97:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A422D440165BAA30AAA7A2F917873160E46205D6
        Validity
            Not Before: Aug  8 18:19:53 2024 GMT
            Not After : Aug  7 18:24:53 2025 GMT
        Subject: CN=426707CF7869F9555DBC14F5DB685DA1A314D05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e5:e9:f7:15:6e:10:d4:65:dc:dd:8c:57:c4:
                    a7:19:09:73:86:0c:48:03:bd:32:47:1a:7e:d7:fa:
                    3c:31:0a:7f:59:53:cc:9e:b0:6d:24:18:a1:e7:ff:
                    41:15:60:e1:15:4e:d9:dc:64:ac:25:3d:19:50:46:
                    5c:6f:bd:7c:f8:d3:5d:12:79:5a:96:7c:6a:49:ae:
                    fc:27:6c:40:c7:f4:45:17:a7:35:54:48:b3:57:67:
                    56:6f:7c:7c:25:a3:2c:bb:7b:dc:82:72:8f:df:a4:
                    c9:4f:47:57:e5:f0:4f:4a:1a:fa:ba:0f:22:63:05:
                    16:56:97:6f:df:9a:69:cc:db:a9:56:f7:c5:80:f3:
                    25:45:52:3e:a6:03:64:eb:21:c8:da:b5:25:90:8f:
                    94:25:fa:da:50:81:eb:30:c3:51:29:bc:d3:73:3b:
                    c2:db:8d:d2:69:d5:fd:27:b5:52:8e:29:e4:23:47:
                    29:ae:1a:da:c9:19:3f:2e:9a:72:e6:1a:5c:47:fa:
                    de:22:6a:47:bd:26:41:30:5e:24:3d:3b:a1:5b:09:
                    47:2b:f2:08:15:52:69:6a:9a:e4:3f:40:f5:21:a8:
                    51:7d:34:bb:c7:71:4f:ca:29:90:35:e1:10:6b:80:
                    ba:3c:fd:82:6e:69:76:a9:ed:49:bb:ed:1c:a4:59:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:67:07:CF:78:69:F9:55:5D:BC:14:F5:DB:68:5D:A1:A3:14:D0:5E
            X509v3 Authority Key Identifier:
                keyid:A4:22:D4:40:16:5B:AA:30:AA:A7:A2:F9:17:87:31:60:E4:62:05:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/A422D440165BAA30AAA7A2F917873160E46205D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A422D440165BAA30AAA7A2F917873160E46205D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GQN4SmR79uvfNzmMBjHPuWkkQtfyEsznWs8cXsVEmAj/0/323830343a366263383a3a2f33322d3334203d3e20323730343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bc8::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:4b:44:b4:3a:0d:60:34:f2:54:a0:ad:9b:46:66:c8:79:29:
         5d:c9:05:b4:a7:70:b1:b5:c2:64:67:c5:ae:a3:83:1a:75:c2:
         87:8c:d7:55:86:01:59:d2:00:f9:cf:97:2d:5e:75:50:7e:07:
         a8:c7:87:be:ea:50:76:79:83:27:7f:33:ca:07:c9:30:05:5d:
         15:c6:0b:6f:ba:e7:7a:ac:75:5b:20:5a:fb:97:60:55:b3:76:
         9b:d7:49:2f:f2:8c:04:2b:cf:92:7d:69:3f:5f:b3:f1:3e:33:
         af:cb:07:d9:87:34:f4:00:d5:5e:83:1a:a6:22:cd:ac:e7:3c:
         d0:7d:d0:0d:d2:0c:b7:5d:41:db:ff:7a:8f:64:ef:79:b4:bd:
         e7:c6:40:91:b5:3d:e4:7b:21:f6:ad:5f:b6:62:92:4a:b5:4a:
         d4:9e:e3:8e:c3:88:6a:5f:66:98:31:d0:f3:94:08:b9:e1:21:
         be:6d:ce:25:21:39:6a:f3:84:8c:a3:88:62:82:87:38:ae:2a:
         8d:93:5d:05:d8:ff:3d:5a:e9:ef:05:4f:92:38:20:04:65:bc:
         01:2d:91:ff:38:e6:bd:eb:c3:48:83:cc:35:48:2e:dd:04:23:
         9f:c7:b0:05:3b:a1:77:46:5e:b3:7f:41:3b:36:43:f5:92:78:
         70:e0:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 15:30:14 2024 by rpki-client on console-ams.rpki-client.org