Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/323830343a386164633a3a2f33322d3332203d3e20323733363937.roa
File:                     323830343a386164633a3a2f33322d3332203d3e20323733363937.roa (raw, json)
Hash identifier:          MFeJJKtbpJDre0n2NjYMRkBeX5HFo+rGrd4xk7cEA+Q=
Subject key identifier:   3B:35:FC:6B:87:B0:F2:FE:A7:1E:7D:D4:CA:0A:81:34:02:5F:92:0E
Certificate issuer:       /CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
Certificate serial:       0CF48592A025D9837A6C87826155167AC802C0C9
Authority key identifier: 48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/323830343a386164633a3a2f33322d3332203d3e20323733363937.roa
Signing time:             Thu 04 Apr 2024 23:17:48 +0000
ROA not before:           Thu 04 Apr 2024 23:12:48 +0000
ROA not after:            Thu 03 Apr 2025 23:17:48 +0000
asID:                     273697
IP address blocks:        2804:8adc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl
                          rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 14:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f4:85:92:a0:25:d9:83:7a:6c:87:82:61:55:16:7a:c8:02:c0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=482AD40343E85C6AC88E301FC9B0A3EF73A3B81F
        Validity
            Not Before: Apr  4 23:12:48 2024 GMT
            Not After : Apr  3 23:17:48 2025 GMT
        Subject: CN=3B35FC6B87B0F2FEA71E7DD4CA0A8134025F920E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:0e:3d:15:8d:e3:c4:57:af:34:1d:f7:e6:
                    cf:ce:95:bf:9b:e6:bc:14:46:53:85:e8:02:7f:02:
                    01:9b:71:73:45:26:f4:cd:0b:81:22:6d:4e:d7:af:
                    f1:3b:1e:bc:4b:b9:8e:2a:21:9a:b8:3c:b9:d3:b7:
                    8b:4d:9a:d8:ab:80:ac:80:de:88:8d:78:16:94:b1:
                    7c:e5:cf:29:97:d4:31:dd:b1:44:30:ce:64:1b:57:
                    c5:8a:bb:6f:e7:92:94:f2:0a:6e:e0:3b:a4:28:47:
                    87:18:b4:b9:c2:c5:45:3a:ff:62:bb:88:de:7c:bf:
                    ca:e4:0f:12:ec:8a:cb:3e:fa:4b:89:d3:21:e1:ca:
                    bd:06:22:a9:f3:7a:15:86:a8:33:08:24:03:18:3b:
                    c5:5c:e6:7f:33:e0:07:39:4d:25:90:6f:f5:39:a6:
                    5c:42:d8:2e:a7:8b:dd:f2:a6:df:2d:a5:4f:69:71:
                    43:ea:61:ea:04:2f:76:7a:9e:c2:88:c0:a2:f5:76:
                    9c:e1:0d:4d:7b:5d:20:83:7b:6a:82:6b:51:00:9b:
                    25:90:c9:a8:a1:34:37:a0:fc:c8:a8:e6:fc:22:79:
                    94:92:4a:30:c4:c5:eb:d8:83:51:20:6f:37:23:0c:
                    f1:5e:fc:b2:bc:50:36:71:2c:6b:01:08:6d:f8:79:
                    f3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:35:FC:6B:87:B0:F2:FE:A7:1E:7D:D4:CA:0A:81:34:02:5F:92:0E
            X509v3 Authority Key Identifier:
                keyid:48:2A:D4:03:43:E8:5C:6A:C8:8E:30:1F:C9:B0:A3:EF:73:A3:B8:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/482AD40343E85C6AC88E301FC9B0A3EF73A3B81F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8nMGo88R8ePaAjUH5mDFtd5P8HUBmnwt7WS1NKBwiwKL/1/323830343a386164633a3a2f33322d3332203d3e20323733363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8adc::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:60:0a:88:fa:c1:55:aa:98:08:47:7d:f8:49:1b:48:f2:b6:
         cb:ac:d0:8a:a0:3d:37:24:38:ba:e6:da:c0:20:3d:d1:a3:c5:
         dc:85:1f:02:12:e4:69:9f:9e:12:4f:f7:17:d2:b2:32:57:f4:
         53:70:7c:56:98:b8:50:3f:8d:d7:ef:61:a2:81:5b:56:21:d6:
         8f:bf:44:15:f9:f9:07:31:d7:7e:96:ee:57:4f:e0:1b:77:54:
         4c:dd:bf:35:c0:ca:d6:d8:14:df:76:84:c1:eb:25:d8:07:f0:
         0b:86:57:d5:d8:35:e5:e2:e1:02:e0:5b:56:c2:3d:e9:64:58:
         db:cc:5e:2f:da:56:ad:51:ed:99:3d:92:58:41:1a:1d:1f:83:
         46:db:29:a6:5f:02:a2:0b:2b:4e:98:6e:41:ca:a6:01:4a:2a:
         33:51:22:44:18:be:6f:a4:96:d6:77:15:97:d5:74:06:d9:7f:
         20:cc:43:9a:99:17:61:a9:62:ae:b9:c1:18:86:73:8b:e6:1f:
         9d:69:d7:36:df:0c:d0:65:fa:2c:12:73:11:08:86:da:ca:c2:
         62:a5:e8:84:99:32:18:70:d4:3b:f5:8e:8f:f3:c3:d0:b2:74:
         0b:d7:3d:5b:25:02:3b:59:b1:25:33:22:3c:0f:af:b6:a6:c5:
         0e:51:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:54 2024 by rpki-client on console-fra.rpki-client.org