Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa
File:                     323830343a333433343a3a2f33322d3334203d3e20323635343432.roa (raw, json)
Hash identifier:          uRWaR9g/EDXHcmzgs9USkL16zFDL0SRhPRP55C1FIR4=
Subject key identifier:   AC:95:F4:21:DE:A1:B5:CA:69:FE:2A:62:8F:10:C8:FC:7F:04:6C:37
Certificate issuer:       /CN=7C4E9246B15A5293F06E721B4412675ED1159708
Certificate serial:       0B5C79D5A263D27F169C6991DE81CA17D9A3C7DE
Authority key identifier: 7C:4E:92:46:B1:5A:52:93:F0:6E:72:1B:44:12:67:5E:D1:15:97:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa
Signing time:             Thu 04 Apr 2024 21:50:33 +0000
ROA not before:           Thu 04 Apr 2024 21:45:33 +0000
ROA not after:            Thu 03 Apr 2025 21:50:33 +0000
asID:                     265442
IP address blocks:        2804:3434::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.crl
                          rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 29 Sep 2024 01:50:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5c:79:d5:a2:63:d2:7f:16:9c:69:91:de:81:ca:17:d9:a3:c7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C4E9246B15A5293F06E721B4412675ED1159708
        Validity
            Not Before: Apr  4 21:45:33 2024 GMT
            Not After : Apr  3 21:50:33 2025 GMT
        Subject: CN=AC95F421DEA1B5CA69FE2A628F10C8FC7F046C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:97:4a:b3:c8:92:ae:1b:ce:02:4b:42:b2:
                    9f:35:44:e1:5e:e6:c9:20:d3:47:b2:a4:c7:ab:cb:
                    9e:b1:ec:db:0f:96:4f:63:2b:4a:18:c5:ec:12:00:
                    7d:50:e5:d7:88:55:9a:78:96:05:ce:13:b3:56:0f:
                    23:ba:72:26:4f:0c:b9:65:dd:7c:fe:c8:e5:e4:0c:
                    5a:19:8f:88:0f:9d:be:48:3b:bd:65:c9:2f:72:c3:
                    83:15:a8:d2:3f:25:de:ee:59:17:e2:9b:54:ce:c8:
                    bb:a8:80:66:3f:9d:15:59:0b:f6:ec:8a:32:bc:c2:
                    e4:dc:0b:f3:5f:db:81:6d:cd:3e:a2:c9:ec:14:5b:
                    7c:ef:29:e4:7a:8a:f9:5b:1d:85:78:69:f3:d8:38:
                    e5:75:a7:0c:fd:03:be:1e:b7:91:68:72:11:38:0b:
                    b7:c6:f1:a8:53:8b:cc:f3:00:3d:b7:ba:d9:5f:cb:
                    38:a8:61:a5:dc:16:3b:13:93:d6:4e:d2:21:a4:61:
                    9e:d7:be:4b:67:d1:8b:e3:dc:b0:94:c1:34:f4:e0:
                    55:00:24:c7:81:26:af:c1:ed:f9:65:0e:7e:79:e6:
                    d3:b7:75:a5:12:7a:55:f7:b0:7e:c2:64:b0:bd:c8:
                    66:2e:da:3c:7d:92:cd:b3:4f:16:51:7f:22:42:4a:
                    09:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:95:F4:21:DE:A1:B5:CA:69:FE:2A:62:8F:10:C8:FC:7F:04:6C:37
            X509v3 Authority Key Identifier:
                keyid:7C:4E:92:46:B1:5A:52:93:F0:6E:72:1B:44:12:67:5E:D1:15:97:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/7C4E9246B15A5293F06E721B4412675ED1159708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7C4E9246B15A5293F06E721B4412675ED1159708.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/1/323830343a333433343a3a2f33322d3334203d3e20323635343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3434::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:62:3e:c8:28:f2:48:c3:9a:b0:e5:69:f7:ab:fd:b3:36:
         cf:36:bc:00:10:55:0d:c8:cb:89:06:63:4b:fd:70:61:49:9d:
         82:ca:85:c3:fe:50:ca:5b:26:3d:6b:34:11:73:98:e0:6c:11:
         2f:aa:eb:aa:4d:99:ab:a8:b0:dd:4f:e5:2e:ff:60:d3:fb:26:
         21:32:e7:af:f4:86:40:79:a4:5d:de:78:89:fe:0b:86:ac:d6:
         62:99:db:58:1d:4e:a4:9b:60:e2:c4:ce:d5:41:7a:96:f6:ab:
         07:40:d1:11:51:58:c3:55:55:77:a2:b3:d4:20:0f:03:d2:d9:
         e3:8e:d3:46:37:92:88:8c:a6:d0:37:24:a2:fd:94:fa:85:cd:
         8c:5c:b8:9c:b3:43:db:59:f6:e9:40:09:2f:19:03:5d:2e:49:
         df:7e:ff:f4:ba:8d:13:81:29:41:1a:37:bb:bb:49:d8:5d:b6:
         6d:88:61:e5:ae:4a:c9:dd:94:d0:eb:83:56:8f:52:73:87:cd:
         62:11:76:aa:42:66:f5:4b:51:b3:b4:75:86:16:9b:31:26:e1:
         5f:0b:28:b4:e6:94:56:74:6b:0a:e0:e9:2c:40:ab:d0:d8:1c:
         3e:9e:6f:db:50:f4:fe:4f:44:61:ae:24:b2:c1:6f:d8:dc:a0:
         b6:97:72:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 01:14:45 2024 by rpki-client on console-ams.rpki-client.org