Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa
File:                     323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa (raw, json)
Hash identifier:          Amw9jAzoAVIflHx+/362OqomxdOZA2XeR12MLwa4HUM=
Subject key identifier:   88:A9:E2:C1:BC:6A:36:F3:B3:96:10:85:37:D1:C8:CC:93:DC:BB:D1
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       43FA9F2DFA843A0002BE0A66971CC9E6BE336755
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     272549
IP address blocks:        2804:84f8:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:fa:9f:2d:fa:84:3a:00:02:be:0a:66:97:1c:c9:e6:be:33:67:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:fa:c0:55:c3:07:0b:23:ab:8c:59:39:39:
                    ee:49:b8:77:fd:35:58:df:a6:8f:42:d8:a9:7b:b1:
                    0d:53:f9:85:05:13:00:a8:f8:91:cc:84:87:2a:ac:
                    3c:9e:1b:e4:1b:23:b6:21:65:4d:20:d1:ce:92:2b:
                    68:fe:00:ec:4c:f5:61:ff:34:8b:49:63:c6:b2:32:
                    20:69:c3:02:17:48:89:96:5b:3d:84:f5:08:04:db:
                    35:ee:2f:ce:36:8a:7d:c3:b7:ee:ff:5c:06:2d:66:
                    98:08:5b:23:2f:ec:d7:8f:78:37:fd:c0:e9:11:5c:
                    dd:f5:89:10:a1:75:12:fa:de:11:6e:ab:62:22:6c:
                    8f:bf:2c:e9:b8:85:6c:f4:3d:eb:b0:95:f7:44:09:
                    e6:85:30:7e:5f:20:34:ae:60:96:e2:55:d4:0c:67:
                    7f:42:f7:e2:28:fb:de:db:64:66:df:a3:40:a7:1a:
                    f0:95:1e:85:be:b7:96:51:fd:4e:4d:8f:1f:a3:a1:
                    99:c6:a6:97:b6:65:5e:5e:5f:ac:b3:44:c4:82:5c:
                    63:7a:e2:ac:af:ba:27:87:12:57:e4:49:ba:d8:9b:
                    38:21:9e:e1:07:19:4b:ef:34:54:61:01:91:18:05:
                    48:ce:b6:f4:f8:04:2e:28:a6:89:dc:f4:c4:f8:ec:
                    09:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A9:E2:C1:BC:6A:36:F3:B3:96:10:85:37:D1:C8:CC:93:DC:BB:D1
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313030303a3a2f34302d3430203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:4d:fd:ac:94:e7:ea:55:aa:67:11:2c:a4:24:45:21:03:42:
         3f:ad:ff:a0:c9:a5:63:d9:3c:80:d7:10:59:55:d0:06:8c:6a:
         ac:da:3c:8a:97:46:1c:04:26:ad:5c:51:c7:ad:0e:5c:d8:e8:
         9a:5b:08:c1:33:2d:6a:74:fe:00:7b:a1:4c:96:ba:9e:55:ff:
         56:66:f2:46:dc:6b:3f:0b:5b:39:3f:6b:12:32:e0:c6:01:6f:
         dc:2c:41:05:0b:f8:e4:12:92:37:42:fa:18:17:f6:8a:08:25:
         35:42:81:c9:cf:22:0c:41:9f:8b:ed:cc:e9:ab:56:36:a8:93:
         61:81:cd:35:fb:08:b6:94:0e:3a:64:6a:7e:9d:2e:49:07:9b:
         0f:2f:b0:31:05:91:b3:e3:8f:5a:21:01:5b:f3:38:0c:df:79:
         f5:d9:3d:83:37:40:98:49:35:8b:f8:d6:70:dd:8e:de:87:63:
         21:17:3e:ce:e1:57:97:1b:16:9f:16:d5:ed:95:fd:70:5d:5d:
         3a:ea:da:86:8f:cb:ff:a5:4a:c0:ea:f7:77:31:ff:9d:cc:2f:
         b1:08:7a:93:9f:a1:ff:15:c5:ae:f9:68:28:90:79:91:4d:93:
         b2:a2:29:17:e7:89:f1:b3:a2:e0:fc:0c:66:6e:27:ce:4d:c6:
         59:b1:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org