Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/323830343a373432633a3a2f33322d3634203d3e20323730393633.roa
File:                     323830343a373432633a3a2f33322d3634203d3e20323730393633.roa (raw, json)
Hash identifier:          w8CJaE7gaDbzBCT8ropGa9IskRF9DKDOXVD1xjPoDHo=
Subject key identifier:   49:83:D3:AF:B5:3C:F8:BE:9F:08:A6:F2:41:88:AD:4C:FE:B6:2E:B7
Certificate issuer:       /CN=B8BF37906635F24C2D247EFC8F28584994678276
Certificate serial:       4B8F52DECFAD64BEC5032CBD1C56180811D56AC3
Authority key identifier: B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/323830343a373432633a3a2f33322d3634203d3e20323730393633.roa
Signing time:             Thu 04 Apr 2024 23:06:40 +0000
ROA not before:           Thu 04 Apr 2024 23:01:40 +0000
ROA not after:            Thu 03 Apr 2025 23:06:40 +0000
asID:                     270963
IP address blocks:        2804:742c::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.crl
                          rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8f:52:de:cf:ad:64:be:c5:03:2c:bd:1c:56:18:08:11:d5:6a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8BF37906635F24C2D247EFC8F28584994678276
        Validity
            Not Before: Apr  4 23:01:40 2024 GMT
            Not After : Apr  3 23:06:40 2025 GMT
        Subject: CN=4983D3AFB53CF8BE9F08A6F24188AD4CFEB62EB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bf:88:f1:4f:8f:30:d3:5c:1c:d1:9c:30:5f:
                    14:b0:d8:3c:d3:bd:4e:22:2c:09:a9:5b:17:c8:99:
                    a2:fd:b2:d2:c5:d6:54:f9:1e:ea:8f:15:2d:9f:4e:
                    43:20:52:fc:58:d6:bc:84:dc:b2:b0:5f:cb:fe:2e:
                    ae:71:d5:1e:7e:38:bc:a9:07:a8:25:62:2e:82:43:
                    d3:c5:22:6d:f3:e7:ad:2d:44:3f:ea:0b:ab:3d:e0:
                    cd:08:93:99:41:06:20:a3:a1:05:4b:54:c3:b6:e8:
                    f7:a7:14:da:7d:74:16:25:d1:0c:1c:0b:37:2d:61:
                    f0:90:a3:ec:14:9e:d8:00:35:26:31:9e:cc:9e:b3:
                    f0:76:c5:98:5e:67:38:13:1a:61:a4:8f:7a:50:17:
                    39:2b:1c:24:11:4a:e1:4e:65:bb:7d:77:5d:5f:39:
                    db:10:4f:e8:4b:71:f9:27:a2:84:e7:0c:f0:c9:19:
                    11:8a:8e:68:1a:9c:a6:b3:39:6f:23:89:60:40:71:
                    a4:72:4a:af:2c:a6:09:f6:b5:c4:29:34:ad:7d:14:
                    1d:0f:e8:21:8d:02:d5:7c:21:f5:ff:e2:eb:c4:c7:
                    74:90:5b:de:38:38:9b:5a:dc:1e:62:eb:d0:d2:c1:
                    10:65:a1:44:2a:10:50:d2:92:f6:9d:e2:e5:3c:21:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:83:D3:AF:B5:3C:F8:BE:9F:08:A6:F2:41:88:AD:4C:FE:B6:2E:B7
            X509v3 Authority Key Identifier:
                keyid:B8:BF:37:90:66:35:F2:4C:2D:24:7E:FC:8F:28:58:49:94:67:82:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/B8BF37906635F24C2D247EFC8F28584994678276.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8BF37906635F24C2D247EFC8F28584994678276.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jozdfbq1YVPQif9s1bij6UQuv1F5jFo1Mn2DBeDECYt/2/323830343a373432633a3a2f33322d3634203d3e20323730393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:742c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:1e:d7:0f:b9:5b:4d:ac:4e:4d:10:b4:2a:8d:4a:33:3e:eb:
         77:9f:d9:89:8e:21:7e:7d:29:dd:2d:b3:03:75:ee:06:66:ce:
         df:e4:74:c0:13:5d:2a:ba:28:d7:40:dd:07:6a:29:a6:6c:fc:
         d1:ac:a2:0c:37:9b:82:8d:dd:97:a0:c3:11:57:66:68:a4:19:
         6b:be:86:96:02:37:50:23:10:95:48:aa:fd:6e:43:ff:00:6e:
         b8:b0:9a:9d:21:24:f6:dc:89:7a:0e:db:72:f3:1b:23:f2:df:
         79:b3:ab:50:24:16:8a:98:7a:df:2e:e0:26:ed:aa:d2:00:2d:
         86:60:91:9f:73:75:0e:26:e4:ee:e9:a7:86:9b:cc:97:03:d6:
         10:75:09:23:7c:7a:4e:7e:41:3f:b0:84:7f:45:28:49:1e:16:
         00:d1:4d:92:09:a8:ff:1d:e4:f0:f1:0b:a9:f4:94:75:fb:db:
         36:bc:93:d4:9b:6b:53:96:46:ec:b7:b2:05:9d:b8:41:30:e9:
         ae:11:11:6e:be:81:3d:ff:79:f2:b7:be:6c:93:80:a2:f9:ed:
         6b:44:47:30:a2:6a:1e:dc:77:02:3e:6d:e8:61:71:42:68:3d:
         b4:b1:a3:7a:11:5d:4c:e3:4a:d2:2e:53:be:f7:5e:f7:e7:bc:
         c5:ec:25:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:04 2024 by rpki-client on console-ams.rpki-client.org