Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
File:                     323830343a346162303a3a2f33322d3438203d3e20323637323537.roa (raw, json)
Hash identifier:          D0/VUaAFHtdAcNQdhuU4czfRGVOo/WHc6nmZtHwPWJ8=
Subject key identifier:   46:8F:74:60:CB:73:AA:5B:17:7C:15:0B:C6:3A:3C:6C:A7:03:DA:D2
Certificate issuer:       /CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
Certificate serial:       5606B1B09A5BE3943B27F95EABF90CD1BE18B10E
Authority key identifier: A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa
Signing time:             Wed 03 Apr 2024 18:31:39 +0000
ROA not before:           Wed 03 Apr 2024 18:26:39 +0000
ROA not after:            Wed 02 Apr 2025 18:31:39 +0000
asID:                     267257
IP address blocks:        2804:4ab0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl
                          rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:06:b1:b0:9a:5b:e3:94:3b:27:f9:5e:ab:f9:0c:d1:be:18:b1:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01
        Validity
            Not Before: Apr  3 18:26:39 2024 GMT
            Not After : Apr  2 18:31:39 2025 GMT
        Subject: CN=468F7460CB73AA5B177C150BC63A3C6CA703DAD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e7:ca:1b:68:0a:a7:91:07:74:0e:bb:3a:ba:
                    ee:09:d6:e2:ad:fe:a1:4e:00:03:07:ff:f7:38:c3:
                    34:65:ab:1b:93:17:8f:65:12:13:94:f7:16:5c:79:
                    f5:49:d7:48:b0:23:77:ee:23:45:82:d7:9e:c4:02:
                    68:e7:26:81:5c:38:d4:60:3f:b1:8c:7e:46:b5:fd:
                    4b:58:01:69:2f:fb:6c:3f:43:75:3d:72:76:43:3a:
                    19:2d:ee:d0:b0:f1:a2:4b:78:29:05:f4:d4:05:fd:
                    11:28:55:fb:9f:44:b4:29:50:ea:cc:32:4a:4a:6a:
                    91:e6:e4:95:fd:30:ff:18:9d:0e:d2:0e:7e:7f:54:
                    55:dd:fd:b0:83:f7:00:ee:b7:c9:cc:d8:e4:6d:32:
                    32:85:b5:ad:7d:cd:66:84:0b:57:e6:c6:61:e3:80:
                    5c:76:af:b0:ce:4f:2e:6c:d6:84:79:aa:d6:34:88:
                    dd:43:e9:20:b0:b0:fc:24:77:b2:5e:75:3d:d3:32:
                    23:c4:c9:63:62:de:45:4b:0e:64:a1:1b:87:5e:8f:
                    0b:c9:dc:59:99:17:45:ef:61:f8:f7:d1:b7:18:63:
                    e2:55:b9:54:a5:42:00:88:d4:d3:4e:a5:57:c8:c4:
                    b5:94:08:35:1e:bd:51:33:1e:a6:ae:e9:8d:30:4e:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:74:60:CB:73:AA:5B:17:7C:15:0B:C6:3A:3C:6C:A7:03:DA:D2
            X509v3 Authority Key Identifier:
                keyid:A4:7E:65:FD:C3:D0:52:38:EF:E2:B4:D8:DC:22:C5:B7:DE:FE:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47E65FDC3D05238EFE2B4D8DC22C5B7DEFE7D01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Xisv41zTWXfbSifBEvEUQR1G2d4dY6TsLYQqzuQJvEs/2/323830343a346162303a3a2f33322d3438203d3e20323637323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:be:cd:45:cf:94:47:68:2d:e4:25:4d:f7:bc:14:30:db:cb:
         b4:d8:3a:02:85:ae:1e:4d:a5:66:f9:9b:55:bb:e7:c4:1d:bc:
         dc:e5:c5:68:dc:84:2c:1b:86:5e:06:c1:81:e2:4e:c4:75:21:
         dd:6f:14:6c:59:e7:22:8e:c7:af:6c:f6:1c:04:ed:07:1d:6a:
         bc:2e:29:44:67:f0:40:6e:ef:cf:ab:d0:5a:f4:87:66:99:09:
         c4:77:ea:b7:27:9e:d4:0d:e0:ab:73:d1:0e:3f:af:18:a0:8a:
         d2:78:ec:8e:a1:e9:42:6c:e9:79:1e:5d:42:5d:a8:69:39:85:
         db:c8:73:6c:a1:31:da:ac:f0:7d:c9:60:42:67:e1:0c:af:0a:
         7e:9b:d1:5a:f1:e1:40:36:a2:4d:b8:11:74:5d:e0:db:23:1a:
         e4:40:a3:da:19:4c:d4:42:b3:69:a7:09:ab:c3:f6:91:b5:de:
         07:f6:01:8a:46:ae:62:00:73:5c:7c:b4:6a:c0:73:24:df:73:
         96:2f:ec:8c:f5:40:4e:4e:51:a0:52:2a:55:6c:4e:0b:88:b0:
         da:c7:4d:35:0a:d6:60:02:e0:d8:e0:5f:72:e1:f9:ea:be:6a:
         1c:b7:df:98:9e:8a:16:13:7f:9b:58:a5:0a:8d:a6:68:d7:61:
         a7:0a:09:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:09:20 2024 by rpki-client on console-ams.rpki-client.org