Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa
File:                     323830343a363032343a3a2f33322d3438203d3e20323639313438.roa (raw, json)
Hash identifier:          HqBk/PAm5JYrv9KD6yP0DVCuajDmUtUmhEpAQ9z771g=
Subject key identifier:   45:85:34:74:BD:DB:44:E6:39:1A:28:DA:37:AF:4E:95:0E:78:19:89
Certificate issuer:       /CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
Certificate serial:       14D4C6FDA950A252FBC06B8AC4B8C7E20FB97703
Authority key identifier: 1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa
Signing time:             Thu 04 Apr 2024 16:17:51 +0000
ROA not before:           Thu 04 Apr 2024 16:12:51 +0000
ROA not after:            Thu 03 Apr 2025 16:17:51 +0000
asID:                     269148
IP address blocks:        2804:6024::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.crl
                          rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 18:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d4:c6:fd:a9:50:a2:52:fb:c0:6b:8a:c4:b8:c7:e2:0f:b9:77:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D3829E5A9073F7F5614BCF961CF641519A58E94
        Validity
            Not Before: Apr  4 16:12:51 2024 GMT
            Not After : Apr  3 16:17:51 2025 GMT
        Subject: CN=45853474BDDB44E6391A28DA37AF4E950E781989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:60:19:3c:31:98:e1:4a:58:94:32:0f:ca:dd:
                    21:38:7f:4e:5d:89:63:84:30:09:72:9f:57:ad:24:
                    45:25:00:5b:1a:a7:b0:8c:75:f2:6c:60:c7:78:48:
                    84:99:f3:b8:41:f2:1b:aa:fd:e4:72:f5:38:51:87:
                    fa:ba:37:10:33:80:46:23:d7:f8:9f:0d:c6:80:0f:
                    8d:d7:83:48:7f:8e:ad:ee:82:82:6e:88:dc:c7:2c:
                    8a:05:8d:e9:74:fe:6b:7b:a6:cc:63:9a:ee:42:40:
                    49:82:0e:e6:19:a3:b3:c5:c3:0e:84:aa:9e:0e:6e:
                    61:eb:b1:a8:4e:bd:31:13:f6:b7:8a:ad:b0:30:0e:
                    e6:10:e5:ea:e6:6a:62:53:a0:72:8e:4b:74:dd:43:
                    1a:db:c3:b0:15:8f:14:24:37:f1:32:63:04:bf:ff:
                    59:19:c5:e5:2b:56:c6:fb:9d:b3:a6:95:09:dc:39:
                    a8:5b:51:63:50:c6:86:d5:19:6f:12:81:67:5c:c1:
                    6c:9e:56:3a:71:e7:ad:21:bc:44:45:83:db:ba:8d:
                    a1:25:13:e4:4e:90:1f:a8:a6:87:da:98:2d:0f:58:
                    a0:40:0e:75:1e:aa:79:5e:af:18:af:d8:4a:3e:97:
                    79:41:18:a0:43:2f:ce:49:8d:d4:11:3a:b2:c7:de:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:85:34:74:BD:DB:44:E6:39:1A:28:DA:37:AF:4E:95:0E:78:19:89
            X509v3 Authority Key Identifier:
                keyid:1D:38:29:E5:A9:07:3F:7F:56:14:BC:F9:61:CF:64:15:19:A5:8E:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/1D3829E5A9073F7F5614BCF961CF641519A58E94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D3829E5A9073F7F5614BCF961CF641519A58E94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/92RcaRZuJsUfeCFJnxACF6eDiRfyz66sbAhS1QjfB3Mi/2/323830343a363032343a3a2f33322d3438203d3e20323639313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6024::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:42:94:b1:1e:72:c4:03:23:34:68:4e:50:f9:10:58:44:d6:
         0f:81:c4:57:83:f7:f2:e8:ba:ef:69:15:c3:1f:00:14:c0:6c:
         a3:f2:2d:80:ef:a1:49:f4:25:2b:1a:15:55:67:af:3d:20:31:
         23:8b:65:eb:5d:a1:27:c6:cf:cc:99:a8:ab:26:5b:7f:8a:22:
         7c:15:0f:d2:56:d7:41:91:ac:9e:b4:8b:4e:15:cb:7c:46:67:
         0c:57:49:f6:d9:06:f2:8f:f6:06:2d:6f:45:86:87:8d:f8:dd:
         52:b4:a8:34:59:05:43:3e:b4:9e:fa:cc:4a:2b:38:54:b8:fc:
         a2:a6:c6:ac:0d:1f:d9:bd:eb:00:09:5e:0f:7e:22:1c:02:83:
         82:ec:ba:b0:6d:9c:bf:eb:7f:67:88:fa:3a:cf:d3:70:0a:d6:
         8b:f6:4f:f5:e6:52:3c:cc:83:21:80:4f:be:1e:31:ff:e9:8e:
         5a:03:44:9d:d7:4a:f9:83:51:9e:5b:97:78:0a:a5:f7:69:dc:
         8b:69:c0:34:53:41:9d:39:53:89:0d:ae:1c:bb:a6:74:6a:b8:
         0f:e2:01:2b:06:31:f3:56:b3:ec:2f:11:70:6b:f4:93:7d:ba:
         94:25:a9:fe:f4:f6:39:f2:de:e3:2c:60:39:03:d5:07:a5:41:
         70:85:62:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:15 2024 by rpki-client on console-ams.rpki-client.org