Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/323830343a323731633a3a2f33322d313238203d3e20323633383737.roa
File:                     323830343a323731633a3a2f33322d313238203d3e20323633383737.roa (raw, json)
Hash identifier:          PYy3aNYn3oA4KXvd9gYJrlZXwxDcNSXPgyThkmNW89c=
Subject key identifier:   5C:D0:1A:60:ED:24:EC:ED:45:F8:4B:45:7C:9D:D4:EC:42:F0:6E:CA
Certificate issuer:       /CN=849A24446B9E3C80503AA50B35CDFE864B50F299
Certificate serial:       7A44B99D22D36636AED03472B1E6AC75079000DE
Authority key identifier: 84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/323830343a323731633a3a2f33322d313238203d3e20323633383737.roa
Signing time:             Thu 04 Apr 2024 09:25:21 +0000
ROA not before:           Thu 04 Apr 2024 09:20:21 +0000
ROA not after:            Thu 03 Apr 2025 09:25:21 +0000
asID:                     263877
IP address blocks:        2804:271c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl
                          rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 19:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:44:b9:9d:22:d3:66:36:ae:d0:34:72:b1:e6:ac:75:07:90:00:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849A24446B9E3C80503AA50B35CDFE864B50F299
        Validity
            Not Before: Apr  4 09:20:21 2024 GMT
            Not After : Apr  3 09:25:21 2025 GMT
        Subject: CN=5CD01A60ED24ECED45F84B457C9DD4EC42F06ECA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:f6:40:9f:33:4e:b7:a1:ef:cc:46:c1:ea:
                    b5:98:5a:9e:6a:5b:b0:72:3b:6d:0a:65:e5:ba:4c:
                    ea:f0:e6:5c:00:3e:91:a1:fc:87:4d:49:4d:7c:1d:
                    9c:b3:e3:0d:87:6b:84:ea:44:bf:82:c1:32:ef:ec:
                    c7:04:85:84:2d:35:ad:c0:e4:14:02:81:ac:16:15:
                    19:c1:6d:50:0f:7c:a1:40:2f:88:04:9d:97:89:9f:
                    ac:de:a8:60:14:75:f1:19:7d:6f:73:cf:7c:70:b2:
                    8b:38:c9:01:32:c4:c2:af:0c:57:04:ab:a7:e4:2d:
                    7f:2d:6e:60:09:8b:58:0d:66:0b:19:65:11:5c:ae:
                    d9:9a:2f:f4:20:36:4b:62:e7:c7:53:ca:43:dd:49:
                    0d:f2:81:92:ef:3a:9f:df:1c:90:36:18:3e:0d:57:
                    13:fb:5d:f6:db:91:b0:11:55:95:45:bd:01:ea:f5:
                    d9:47:ed:0a:2c:30:e7:df:ba:e7:c5:7d:53:71:0c:
                    61:3b:bc:49:b7:b5:74:8b:56:e8:4f:44:ea:cd:1a:
                    85:b7:16:cd:ac:ce:12:00:e6:5e:09:36:86:a0:fb:
                    96:b0:a8:2a:97:00:ca:93:74:13:7c:a3:61:d5:69:
                    0d:ce:8d:71:e4:0e:70:9a:1f:96:5c:02:a2:ca:5e:
                    51:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:D0:1A:60:ED:24:EC:ED:45:F8:4B:45:7C:9D:D4:EC:42:F0:6E:CA
            X509v3 Authority Key Identifier:
                keyid:84:9A:24:44:6B:9E:3C:80:50:3A:A5:0B:35:CD:FE:86:4B:50:F2:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/849A24446B9E3C80503AA50B35CDFE864B50F299.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/849A24446B9E3C80503AA50B35CDFE864B50F299.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8uDet3fkaPhb1F5tGf188urY9BDNkxoDiJDgU8BA1rc9/1/323830343a323731633a3a2f33322d313238203d3e20323633383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:271c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:56:f0:cd:c2:a9:74:1c:d2:e5:34:0c:92:1d:4b:11:d6:44:
         36:df:c1:2e:de:5e:18:3e:00:61:ee:f4:24:06:44:73:9e:7d:
         be:c7:2b:5a:85:28:93:91:18:35:ba:9f:71:62:42:c8:35:5b:
         c3:7c:49:e0:34:d9:a2:cd:85:5b:b0:8b:26:a9:f6:94:b5:a5:
         89:81:8b:41:59:67:72:14:4a:8a:c8:e6:77:25:16:25:10:d2:
         4e:46:cb:0d:3b:e3:e8:c0:df:d2:69:f1:5e:7b:94:32:03:22:
         b2:c2:e7:fa:e3:93:48:ec:36:4e:ad:ca:de:b9:25:d9:12:54:
         a0:ee:7e:bd:74:b6:ab:2d:5a:bd:4a:5c:8e:c0:6d:ab:d6:3b:
         97:18:3d:0b:67:37:09:e4:f1:fa:51:d6:e9:a4:54:f2:ae:5e:
         c0:ff:42:81:7e:6e:b0:43:8f:84:d8:b9:2f:14:c2:8e:c6:05:
         db:31:04:05:91:a7:16:ad:55:2f:6d:86:22:dc:2c:85:ec:5b:
         14:b9:fe:1d:a4:f0:94:20:d3:26:4f:c6:01:9e:d4:03:01:1f:
         f3:c1:20:0a:0c:93:ba:2f:2d:ea:fd:20:b6:5e:be:e0:b3:0b:
         54:89:2a:dd:cc:cd:c8:da:47:77:21:ff:53:1f:30:f3:2c:a7:
         40:5e:c5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:42:17 2024 by rpki-client on console-fra.rpki-client.org