Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
File:                     323830343a383034303a3a2f33322d3332203d3e20323731373339.roa (raw, json)
Hash identifier:          zZNLSnEfNsJB2ArITbGiibc0l1aCmxLVgaMZrY0zF3g=
Subject key identifier:   39:29:0F:C6:6B:C8:8C:70:22:23:D5:2A:92:E2:46:FC:10:CA:74:69
Certificate issuer:       /CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
Certificate serial:       18BC4BA988CBC0D4FF5A032B15C5874782C43182
Authority key identifier: 48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa
Signing time:             Thu 04 Apr 2024 08:35:18 +0000
ROA not before:           Thu 04 Apr 2024 08:30:18 +0000
ROA not after:            Thu 03 Apr 2025 08:35:18 +0000
asID:                     271739
IP address blocks:        2804:8040::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl
                          rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 15:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:bc:4b:a9:88:cb:c0:d4:ff:5a:03:2b:15:c5:87:47:82:c4:31:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=484CAFED17D02C4555E5D45869F30ECAA7E1E5E3
        Validity
            Not Before: Apr  4 08:30:18 2024 GMT
            Not After : Apr  3 08:35:18 2025 GMT
        Subject: CN=39290FC66BC88C702223D52A92E246FC10CA7469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:bc:a9:86:92:cb:da:06:6f:75:73:63:c0:65:
                    8f:68:78:ce:46:1d:71:25:70:50:a0:6b:b9:b0:ba:
                    6d:64:9e:36:f8:0e:f1:27:3c:cf:7f:59:83:47:03:
                    e6:31:67:ab:4b:0f:75:4a:14:f9:5a:f3:b6:5f:84:
                    36:35:bb:cb:25:11:1f:68:5f:81:7f:c0:e8:6f:c7:
                    c3:cf:70:bd:18:94:7a:7e:e9:dc:0c:fc:29:5d:29:
                    7d:8f:55:10:d4:c9:08:e2:4f:01:34:65:97:ac:aa:
                    66:ee:4a:5d:d1:6b:bb:65:8c:cb:e8:2b:1f:6a:8c:
                    02:d1:e3:e8:32:56:13:d1:90:73:dd:83:9b:42:1d:
                    01:16:f4:e2:a6:f5:e9:7a:71:ea:35:c9:da:71:56:
                    d7:67:f0:bf:1d:dd:d4:91:9f:c5:2e:0d:5c:b8:3b:
                    2b:b9:33:ea:c4:09:fd:4f:f5:19:74:40:0d:9d:70:
                    10:12:b0:56:b1:3a:29:e8:1b:f8:6e:68:b9:e8:21:
                    bf:86:d6:65:e3:24:c7:37:ee:1b:a1:bc:83:13:50:
                    b3:3c:bf:8d:91:64:b3:a3:06:fb:05:b1:05:cd:27:
                    66:aa:d1:7e:58:03:3e:cc:63:66:70:fe:02:f5:8e:
                    f8:82:3f:51:22:77:a6:73:28:7d:df:b1:e5:84:64:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:29:0F:C6:6B:C8:8C:70:22:23:D5:2A:92:E2:46:FC:10:CA:74:69
            X509v3 Authority Key Identifier:
                keyid:48:4C:AF:ED:17:D0:2C:45:55:E5:D4:58:69:F3:0E:CA:A7:E1:E5:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/484CAFED17D02C4555E5D45869F30ECAA7E1E5E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hTyZmhMBpCvMBuDHNVfsJWoRtytNZR8PYCPQNvfKoKG/1/323830343a383034303a3a2f33322d3332203d3e20323731373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:a4:15:aa:95:ab:c9:ce:34:92:62:52:2e:d3:15:92:26:11:
         c3:dd:1e:89:d7:3f:69:55:23:a0:c3:85:a6:cf:bc:92:2f:ca:
         c2:0b:ca:78:09:a5:6b:69:26:da:a6:1f:44:52:8a:1b:ef:0a:
         6f:f3:20:e4:5b:f9:6e:e7:27:f8:67:5c:7c:4e:a6:59:d2:47:
         d8:52:d5:56:88:e0:59:b4:45:9f:04:f2:b2:40:85:f8:e5:3e:
         a5:9c:4d:5a:8f:18:d4:a7:4d:72:16:29:4f:1b:c0:cb:41:9a:
         d9:e1:8f:d8:a2:c9:6a:1e:61:57:76:f3:48:b6:cd:38:f7:a9:
         49:a6:31:9b:bb:dc:92:6a:d2:8e:b0:4b:50:d2:34:f0:9d:24:
         8a:b1:b0:81:37:3b:05:44:43:dc:64:8c:dc:41:1e:ef:6d:4f:
         69:9e:5c:cf:b3:fc:34:4a:8a:56:86:17:7d:73:1e:69:8e:83:
         65:78:1a:6a:bc:38:28:6f:c5:75:11:bd:1a:54:44:59:05:01:
         6b:bc:a1:01:66:17:9b:0c:67:5e:73:8f:a2:e8:6a:0b:27:57:
         8d:f5:89:0b:5d:f1:f0:84:36:51:d1:33:39:7b:94:80:76:ba:
         de:91:6a:80:6e:69:2e:92:ad:2f:12:7e:9f:c2:7d:32:97:6e:
         58:58:43:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:16:53 2024 by rpki-client on console-ams.rpki-client.org