Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa
File:                     323830343a313466303a3a2f33322d3332203d3e20323633333630.roa (raw, json)
Hash identifier:          PeI6ppUMI9v2vl7kczMfNrj24opUiWseQrB/1nvjfQk=
Subject key identifier:   8E:89:30:58:5F:F5:56:07:7A:E5:82:C3:06:89:1D:B5:C7:01:30:4F
Certificate issuer:       /CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
Certificate serial:       4AF14B7DA06A768731D31C592F225324B6C2B2EE
Authority key identifier: A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa
Signing time:             Thu 04 Apr 2024 02:25:07 +0000
ROA not before:           Thu 04 Apr 2024 02:20:07 +0000
ROA not after:            Thu 03 Apr 2025 02:25:07 +0000
asID:                     263360
IP address blocks:        2804:14f0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl
                          rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 23:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f1:4b:7d:a0:6a:76:87:31:d3:1c:59:2f:22:53:24:b6:c2:b2:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739
        Validity
            Not Before: Apr  4 02:20:07 2024 GMT
            Not After : Apr  3 02:25:07 2025 GMT
        Subject: CN=8E8930585FF556077AE582C306891DB5C701304F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:87:75:b6:11:a9:96:b9:72:44:61:55:1c:c8:
                    86:b3:dd:b3:55:be:f2:5a:b8:21:6b:96:57:43:f0:
                    eb:81:4d:04:d9:dc:a0:9f:37:1c:23:5a:c0:37:fe:
                    81:ae:a1:20:3b:49:90:0d:ea:ba:61:80:ce:7a:27:
                    16:0b:07:73:3b:52:2a:4c:5f:2b:40:41:80:9f:0e:
                    d8:76:ff:2d:52:94:c8:ce:61:7d:b7:40:aa:cc:d3:
                    dd:d4:46:f8:71:ae:10:f7:9b:16:54:a6:00:d5:96:
                    5b:f4:32:55:16:98:85:c5:68:23:ba:16:08:62:9a:
                    1f:8a:c4:d3:19:e4:20:7f:f2:c7:7b:c0:cd:78:0f:
                    b2:4d:9c:9a:b2:13:7f:e2:68:91:cd:a9:de:72:b4:
                    03:16:59:66:71:0b:b3:85:6b:96:06:f9:38:2a:a7:
                    e6:17:1c:1a:7d:f4:a8:93:c0:fa:b1:29:7a:74:ae:
                    9d:38:8f:f3:32:ad:17:51:ce:50:f7:ca:96:de:12:
                    99:35:a9:0f:34:69:e3:70:27:54:4b:7a:61:f7:4b:
                    67:70:d2:ee:e8:34:dd:d8:a0:b7:23:c3:92:f9:ca:
                    59:d0:4f:74:a2:3b:cc:6b:d3:82:95:35:e2:e3:7f:
                    73:97:02:69:53:ae:02:2f:5d:a2:85:2c:26:4a:a0:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:30:58:5F:F5:56:07:7A:E5:82:C3:06:89:1D:B5:C7:01:30:4F
            X509v3 Authority Key Identifier:
                keyid:A5:B9:54:E5:2C:A1:BB:ED:8E:8A:DF:B0:02:AA:37:9A:BF:8B:37:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5B954E52CA1BBED8E8ADFB002AA379ABF8B3739.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/1/323830343a313466303a3a2f33322d3332203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:8f:5b:33:3d:f2:95:40:e6:76:15:77:7f:b9:60:11:15:50:
         4c:01:a3:6a:46:ed:b3:c5:1a:6f:84:56:97:a1:bb:62:41:10:
         47:b2:45:93:a5:c0:86:34:b2:8d:fb:18:7a:c2:b7:2d:cd:7f:
         d6:74:1d:25:94:31:a8:a9:a3:89:63:6c:67:d0:6c:3c:28:99:
         33:5a:36:e1:c4:21:69:42:8e:53:3a:0e:44:3b:55:0d:67:6a:
         e8:af:92:22:5a:d0:02:8b:be:6d:33:08:ee:70:b1:26:7e:e7:
         34:fd:cf:d3:70:7f:2d:a6:0c:af:ff:ab:1d:61:61:70:2a:d6:
         84:ad:26:1e:52:9f:d0:b9:e4:24:df:6e:db:3a:81:2d:8f:c9:
         4f:b5:0b:fb:ea:0b:bb:73:cc:48:2d:8b:63:6b:55:db:27:84:
         cc:9d:3c:75:4d:f3:2a:a6:df:5e:e1:d6:26:e3:80:24:74:94:
         1c:e5:6b:99:85:d1:bc:26:fa:3c:c8:de:3e:4b:56:ef:7a:57:
         4f:4a:60:20:b8:d7:33:49:70:f4:45:7d:fd:2d:50:86:e3:c2:
         4e:29:f4:af:64:3c:50:ae:ff:3d:3c:20:a1:61:5e:56:da:cb:
         df:cb:3b:92:85:c1:f9:c8:a3:e5:ca:c4:35:aa:43:ca:89:91:
         61:11:e8:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:39 2024 by rpki-client on console-ams.rpki-client.org