Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/323830343a316532633a3a2f33322d3438203d3e20323634343132.roa
File:                     323830343a316532633a3a2f33322d3438203d3e20323634343132.roa (raw, json)
Hash identifier:          2zI6hW3zYLXPq1uXLIy9Rrq7o+lg4zmesXDh4/KtuDM=
Subject key identifier:   5F:AA:CF:90:2B:25:81:4E:37:29:64:B0:47:8F:9E:B8:91:73:1A:0E
Certificate issuer:       /CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
Certificate serial:       099A9609B4B6401AA9988E23A7B00E3FA4F90DE9
Authority key identifier: E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/323830343a316532633a3a2f33322d3438203d3e20323634343132.roa
Signing time:             Thu 04 Apr 2024 13:15:33 +0000
ROA not before:           Thu 04 Apr 2024 13:10:33 +0000
ROA not after:            Thu 03 Apr 2025 13:15:33 +0000
asID:                     264412
IP address blocks:        2804:1e2c::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl
                          rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 12:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:9a:96:09:b4:b6:40:1a:a9:98:8e:23:a7:b0:0e:3f:a4:f9:0d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B
        Validity
            Not Before: Apr  4 13:10:33 2024 GMT
            Not After : Apr  3 13:15:33 2025 GMT
        Subject: CN=5FAACF902B25814E372964B0478F9EB891731A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:5b:ef:2a:56:61:46:0a:37:05:31:03:ea:
                    c6:2f:71:c3:31:ce:03:8e:94:31:b9:14:72:dc:88:
                    d2:17:ff:99:05:05:ce:8c:55:02:f9:9c:26:50:e7:
                    a6:aa:92:bb:74:61:a6:b7:42:64:66:2e:f8:28:02:
                    ed:05:2c:fe:4a:68:72:e4:70:6b:c8:af:f5:2f:2e:
                    43:41:53:f1:2e:ad:db:a8:00:84:ae:58:3c:20:07:
                    e2:37:a2:fb:18:d6:22:b3:a7:f1:80:17:a1:dc:84:
                    d3:cd:cd:c4:1f:fa:67:e6:fd:83:9f:6b:53:0d:a7:
                    ac:72:a0:ad:10:bb:7b:ab:9e:1c:75:04:a0:6a:84:
                    42:c9:eb:3b:02:32:c2:68:ea:97:f7:c3:32:57:26:
                    55:18:93:68:0f:e6:6f:b3:a1:2e:a2:81:16:9e:af:
                    2c:d2:35:fb:05:7c:f6:74:b7:c4:79:38:fd:0a:cb:
                    9d:6a:04:64:70:07:f5:17:93:bb:55:3a:50:af:e2:
                    83:26:c0:96:9b:ee:85:02:a0:a8:fb:fa:f0:73:da:
                    b3:70:63:5a:a8:cd:8c:4d:7e:de:51:61:ed:37:b5:
                    89:0c:16:0f:b7:0b:cd:52:8e:94:99:91:c4:7a:7b:
                    05:65:e3:9b:4b:42:6a:ee:a6:dc:15:77:5a:f6:bc:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AA:CF:90:2B:25:81:4E:37:29:64:B0:47:8F:9E:B8:91:73:1A:0E
            X509v3 Authority Key Identifier:
                keyid:E4:D0:DD:D9:0D:44:49:DB:32:F8:FC:10:73:80:DD:B7:F5:D0:AB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D0DDD90D4449DB32F8FC107380DDB7F5D0AB4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/97GJpRYMBmkdULhzGsvEzFdhwshDpr5DH53rm5UPpwUh/1/323830343a316532633a3a2f33322d3438203d3e20323634343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e2c::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:da:0d:88:a6:db:c7:63:c3:50:71:80:69:09:e7:26:64:14:
         74:d6:a3:42:f8:29:11:ef:d8:01:c9:65:6a:f4:14:d9:2d:9f:
         ac:66:94:fb:d9:a7:b8:d4:c4:5e:32:a7:be:bb:c5:95:17:4d:
         79:b5:d7:08:77:84:64:a0:24:ae:f6:82:80:2d:5c:95:62:42:
         a4:03:ca:d8:bf:a1:fb:e5:a2:ca:d7:70:44:c0:42:46:3c:7b:
         b0:b0:ad:47:8d:57:35:c4:dc:29:64:da:2d:d9:38:85:03:13:
         8b:45:55:a0:46:29:bb:6f:fc:b3:2a:8e:db:da:39:14:e3:32:
         54:bb:8f:4b:ab:e1:4d:d3:65:5f:8b:f9:56:ff:db:dc:22:6a:
         da:07:91:0e:bc:08:a0:5a:40:e2:5b:23:52:7d:3a:0c:04:d5:
         7b:e6:d2:49:2a:26:9d:7b:59:36:1b:3b:2b:1a:9a:e6:9e:68:
         f5:0b:4a:b0:c2:c5:bb:95:09:6c:fa:e7:c1:6f:a8:17:6a:6b:
         9a:e0:02:79:b4:1e:f7:bc:8b:31:93:c7:e4:14:b9:f0:42:32:
         cd:dd:87:b2:26:9e:94:e8:7f:c2:3e:6b:5b:b3:f2:bb:8e:47:
         4d:06:b9:80:d1:b3:de:ba:ea:99:bf:77:f9:99:37:68:17:67:
         a3:87:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:09 2024 by rpki-client on console-fra.rpki-client.org