Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa
File:                     323830343a343635633a3a2f33322d3334203d3e20323636393835.roa (raw, json)
Hash identifier:          3q7jl88hHlVjHYKcW1sDHv7RLgpsX9Rer0AvtrMdPkk=
Subject key identifier:   28:50:A0:F0:9E:21:2B:A0:16:FC:92:CB:6B:4C:07:74:24:82:79:0F
Certificate issuer:       /CN=704F7944732F98AD0D651DC0C5B89C092F753A92
Certificate serial:       4B829FBE835F511FBA0A1A12B2DAD8C8A50E5260
Authority key identifier: 70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa
Signing time:             Wed 03 Apr 2024 18:38:47 +0000
ROA not before:           Wed 03 Apr 2024 18:33:47 +0000
ROA not after:            Wed 02 Apr 2025 18:38:47 +0000
asID:                     266985
IP address blocks:        2804:465c::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl
                          rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 11:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:82:9f:be:83:5f:51:1f:ba:0a:1a:12:b2:da:d8:c8:a5:0e:52:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704F7944732F98AD0D651DC0C5B89C092F753A92
        Validity
            Not Before: Apr  3 18:33:47 2024 GMT
            Not After : Apr  2 18:38:47 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:5a:46:0c:74:4a:c5:05:f1:99:a2:3f:91:
                    90:65:18:cf:75:75:2b:21:b6:21:08:41:fb:e2:a2:
                    a4:bf:41:aa:ab:14:a1:ef:a3:a0:0d:1c:b0:fa:10:
                    4f:7e:97:b5:a0:f5:47:c9:93:75:40:4c:4b:a3:5f:
                    4c:44:4e:fa:a6:1f:51:00:a9:08:1a:94:35:3a:60:
                    07:13:fa:e9:d0:58:8c:52:dc:c5:92:65:28:df:ad:
                    0a:41:b8:55:6e:ba:b9:8f:a6:62:4f:d3:e3:b7:21:
                    14:b5:39:c9:cd:e1:d9:59:1f:02:5d:e1:c0:db:47:
                    7e:0f:b9:9b:b2:d3:5d:ca:5d:7e:56:cf:14:26:8e:
                    a0:d5:7b:3c:89:59:e6:84:c6:8f:29:e6:8a:77:e0:
                    48:0a:1d:05:53:b9:d5:bd:f5:c3:ef:bc:d9:75:8a:
                    01:8b:9e:9b:80:9b:14:fe:49:3a:d9:cd:01:09:fb:
                    58:36:a0:8b:f6:3f:fc:92:13:98:a5:ca:47:0f:05:
                    91:e2:eb:91:70:61:2a:df:61:81:15:91:0b:9a:20:
                    2b:48:78:a5:de:90:5e:17:70:df:64:91:f3:73:cf:
                    93:bd:db:a4:d1:93:b5:23:3b:ae:f8:d0:43:d3:70:
                    b9:96:f9:38:f2:c2:9b:89:f3:fa:b7:ac:40:95:c5:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:50:A0:F0:9E:21:2B:A0:16:FC:92:CB:6B:4C:07:74:24:82:79:0F
            X509v3 Authority Key Identifier:
                keyid:70:4F:79:44:73:2F:98:AD:0D:65:1D:C0:C5:B8:9C:09:2F:75:3A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/704F7944732F98AD0D651DC0C5B89C092F753A92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/704F7944732F98AD0D651DC0C5B89C092F753A92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YQeN5kXSJ6iqsVQ4YQCmsJe8181UzYwCJshTtneCpsR/2/323830343a343635633a3a2f33322d3334203d3e20323636393835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:465c::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:f8:67:32:a7:e8:90:0c:6d:b5:95:c0:a7:27:03:31:3b:e8:
         84:58:2b:a0:81:60:4e:41:af:10:ab:3e:6d:3c:9d:f9:38:24:
         e6:c7:d2:56:25:49:c8:eb:b4:6f:21:3f:4c:f8:67:1d:53:c6:
         5d:36:b1:35:b0:a5:a4:d1:92:39:d9:85:c4:c9:c1:88:06:fc:
         4c:d0:05:2a:ef:21:2d:d6:e4:e9:d1:b0:1a:7e:a7:44:2a:73:
         11:21:db:cc:c3:1c:8f:63:bf:f8:a8:15:6d:f0:9d:e3:02:46:
         86:f3:f8:ab:9f:2a:57:a8:18:59:cb:7e:4a:98:0d:83:c3:9c:
         6a:9c:05:94:5c:5b:d3:e5:db:55:5d:c7:69:cc:6d:c2:79:39:
         8a:0d:aa:99:9c:f5:80:24:12:24:a6:a8:e2:62:7e:8a:d8:de:
         cc:e0:36:f5:65:85:d4:c4:14:8d:a4:04:94:c4:3a:86:0e:ab:
         2d:c1:f3:30:ec:b2:49:65:f4:51:25:dc:57:0e:9f:29:f4:a8:
         4b:b2:ca:c0:50:5c:14:f5:df:55:1a:f4:fe:00:de:f2:10:84:
         64:4c:a3:d8:53:8b:cf:38:a6:cc:22:47:46:65:5e:eb:4d:68:
         ab:f7:4b:b0:33:68:d9:78:94:ef:43:db:03:58:01:02:1f:99:
         ad:f5:f8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:53 2024 by rpki-client on console-ams.rpki-client.org