Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
File:                     323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa (raw, json)
Hash identifier:          rqsKnvd8bgzEYUKCfoJ/48LRnrtc3AvFza7W+nOykRY=
Subject key identifier:   D8:17:55:1E:0C:FD:76:ED:B2:E5:22:F5:8A:CB:ED:19:26:17:D9:C2
Certificate issuer:       /CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
Certificate serial:       617FDE3F80575E39AD9F45B332B2F44F5453DBD3
Authority key identifier: 2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa
Signing time:             Wed 03 Apr 2024 18:31:51 +0000
ROA not before:           Wed 03 Apr 2024 18:26:51 +0000
ROA not after:            Wed 02 Apr 2025 18:31:51 +0000
asID:                     272549
IP address blocks:        2804:84f8:1100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl
                          rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 08:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7f:de:3f:80:57:5e:39:ad:9f:45:b3:32:b2:f4:4f:54:53:db:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C425257AE7B63529EB88108AC7DEA60648B43E5
        Validity
            Not Before: Apr  3 18:26:51 2024 GMT
            Not After : Apr  2 18:31:51 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:46:cb:59:61:5d:84:d3:41:34:e8:78:8f:25:
                    1b:76:25:3a:1f:ad:b0:9e:7b:7e:4c:06:5f:9a:83:
                    e4:84:16:45:5d:b2:15:b8:a7:89:f9:a6:b5:4c:df:
                    11:1a:e9:ab:10:f3:d3:4e:e8:ce:64:7b:5f:de:11:
                    a5:ab:ed:7f:0d:67:b0:c4:37:aa:db:43:4b:29:48:
                    e0:b2:14:9c:b5:42:16:89:0b:6b:f7:a4:ed:95:de:
                    0e:53:69:7d:86:ff:cb:f7:09:88:1f:be:f8:61:cd:
                    78:70:c5:50:66:ec:9f:ff:b1:c0:69:14:cb:17:41:
                    15:b8:c3:6b:af:53:6c:75:90:c5:6f:dc:83:d3:40:
                    11:78:62:55:31:d3:e3:b5:6f:47:6c:97:ac:3a:b9:
                    f4:f9:cc:dc:bb:68:56:4b:7a:84:51:9e:17:78:73:
                    2d:27:ea:8a:09:47:5f:b3:2f:4c:7a:48:9d:8a:e6:
                    47:5e:30:6d:b4:a4:ce:7d:0f:fa:e4:35:05:ab:2d:
                    0b:89:2b:9b:6e:c7:59:28:17:52:73:60:b2:e9:1c:
                    6b:2f:73:96:f0:96:8d:b5:bc:93:7c:71:7e:48:1a:
                    bb:e3:9b:eb:2f:26:de:9a:d6:e4:f8:2f:0b:26:0a:
                    21:4e:9e:58:93:42:60:8a:9b:5b:fa:00:2c:82:fe:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:17:55:1E:0C:FD:76:ED:B2:E5:22:F5:8A:CB:ED:19:26:17:D9:C2
            X509v3 Authority Key Identifier:
                keyid:2C:42:52:57:AE:7B:63:52:9E:B8:81:08:AC:7D:EA:60:64:8B:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2C425257AE7B63529EB88108AC7DEA60648B43E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8diNmZKdvPAGrGqhr5uZ7mfATgiznFyPnnssYLpfXdrL/1/323830343a383466383a313130303a3a2f34302d3430203d3e20323732353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:84f8:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:60:2d:be:6f:a7:69:91:53:4b:6e:57:90:f8:5b:75:c9:e7:
         86:ba:16:0d:fa:54:a9:f4:5c:18:e0:83:f2:bf:26:8b:d4:21:
         55:b3:02:39:36:3b:3c:30:d3:19:35:9d:33:a4:db:6a:20:50:
         d9:a6:71:c2:a1:bd:fb:bf:a3:66:cf:63:fb:12:a7:49:de:71:
         5d:28:1b:35:02:83:d5:22:d6:fe:c2:9c:f8:52:31:5d:05:0f:
         7e:30:60:46:7b:7c:93:0a:66:86:ad:ff:6a:c2:36:c0:26:fe:
         01:ba:fb:e0:16:57:eb:3a:7f:e1:d1:1a:fe:8e:ec:fc:2d:77:
         45:80:6e:8e:55:2f:66:d3:5f:0a:32:5f:05:ec:d7:20:dd:db:
         10:71:19:b9:be:11:6f:48:97:f6:2c:fd:15:93:a4:45:10:2e:
         2d:f0:c2:cf:42:0f:1a:20:cb:b5:96:72:2f:83:fe:17:22:3f:
         cd:da:c5:76:e2:e1:24:05:17:d0:64:c3:6b:39:c5:91:4a:ce:
         3a:40:35:42:34:d4:69:72:08:e3:13:ef:3c:0f:27:23:e8:ff:
         ba:a3:c7:6a:8e:1d:64:35:2c:ec:d3:c7:07:7c:3a:f6:ba:df:
         74:92:7e:df:99:0a:e9:c9:5e:08:9a:4d:54:ac:81:b9:1e:c1:
         ad:44:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:20 2024 by rpki-client on console-ams.rpki-client.org