Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa
File:                     323830343a323362303a3a2f33322d3438203d3e20323632363435.roa (raw, json)
Hash identifier:          BygCMqSZnPUAEHZD140NUGaVeVwBfTURFFUTOBeNCmE=
Subject key identifier:   AD:87:07:5C:3A:0E:4A:96:01:40:CE:AF:6F:1D:2A:29:F1:CD:92:4B
Certificate issuer:       /CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
Certificate serial:       5D75123A2B6807C22517AB096F81290AAA9D375F
Authority key identifier: E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa
Signing time:             Thu 04 Apr 2024 06:53:54 +0000
ROA not before:           Thu 04 Apr 2024 06:48:54 +0000
ROA not after:            Thu 03 Apr 2025 06:53:54 +0000
asID:                     262645
IP address blocks:        2804:23b0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl
                          rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:03:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:75:12:3a:2b:68:07:c2:25:17:ab:09:6f:81:29:0a:aa:9d:37:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E09F2B81ED12D4B02A5B104DB200DEF0A03303AD
        Validity
            Not Before: Apr  4 06:48:54 2024 GMT
            Not After : Apr  3 06:53:54 2025 GMT
        Subject: CN=AD87075C3A0E4A960140CEAF6F1D2A29F1CD924B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:21:85:2c:77:a8:8c:94:aa:f3:0f:d0:c0:
                    18:88:ad:f8:32:90:3d:21:32:9e:11:d9:e4:47:f0:
                    ce:4c:a0:46:a6:3b:24:ae:5e:e3:46:cd:a1:31:38:
                    45:94:fd:8d:44:5e:b0:b5:db:b5:4d:b9:03:ad:dd:
                    24:b5:53:5a:4d:e5:a8:63:1d:02:ca:63:eb:8f:08:
                    14:23:b4:73:9e:f9:1f:ed:8f:6e:1a:f5:4c:87:1a:
                    82:69:e7:db:8e:6c:a8:95:4a:26:08:ef:26:95:9c:
                    1c:0d:f5:f8:b8:ea:92:a1:62:5f:5f:88:ae:ba:7e:
                    cd:c1:a9:4d:95:f0:d5:8f:06:6b:e7:ce:53:bb:39:
                    fd:26:a6:b3:be:cb:b5:25:06:41:ab:62:cc:c8:30:
                    80:5f:59:f0:5a:00:38:b9:be:eb:ce:38:70:6d:1c:
                    82:2c:67:19:ee:d7:4f:e3:c2:9a:0e:2a:ea:06:f4:
                    03:ec:89:8e:ab:93:5d:1d:1d:ef:12:e3:08:9f:42:
                    18:c6:5d:e2:67:09:a3:8e:8d:c5:f3:c0:55:8c:68:
                    f0:bd:d9:89:5d:18:56:d1:3e:3b:4b:91:a2:6a:9b:
                    5b:a4:f1:5a:08:fa:0d:fa:92:08:2f:a2:f8:a7:7f:
                    01:db:fe:78:db:80:3d:6e:11:8f:54:65:51:fb:b4:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:87:07:5C:3A:0E:4A:96:01:40:CE:AF:6F:1D:2A:29:F1:CD:92:4B
            X509v3 Authority Key Identifier:
                keyid:E0:9F:2B:81:ED:12:D4:B0:2A:5B:10:4D:B2:00:DE:F0:A0:33:03:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E09F2B81ED12D4B02A5B104DB200DEF0A03303AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/1/323830343a323362303a3a2f33322d3438203d3e20323632363435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:28:9a:b8:a1:09:60:e0:5e:ca:69:4c:43:96:e5:0f:aa:24:
         d8:81:85:03:9b:7c:25:8f:da:e1:8c:cc:48:67:d4:2a:3d:a5:
         46:20:b5:81:69:cc:05:64:91:a4:26:a9:b5:68:dd:a4:35:e6:
         75:db:6d:39:38:17:61:05:ee:0a:5e:2f:29:34:6e:bd:5e:a1:
         8d:11:21:fe:c5:ac:62:87:5e:7d:0c:02:b0:ca:7d:42:7a:44:
         28:f1:d4:d8:b5:f9:c8:65:52:04:02:11:8c:a2:ea:98:24:6e:
         e1:97:41:37:21:e1:9e:b6:29:55:b3:f0:97:25:d2:34:9c:02:
         d9:75:e7:88:03:97:c6:f5:48:73:05:c9:ea:ab:4c:63:da:b3:
         95:56:34:9e:e8:94:10:3d:be:c7:79:db:31:3f:f4:8d:fa:86:
         da:c5:04:ef:42:0a:ce:21:c6:c7:f2:1a:73:b0:1b:9d:fc:6b:
         0b:0a:46:86:99:aa:ae:a0:b8:a9:2f:10:5d:be:c4:a1:46:2c:
         eb:c5:c6:b4:be:6d:2f:f0:b1:df:2d:02:52:10:ec:38:c3:a9:
         27:0c:75:20:ac:4a:ab:e1:3f:ff:0f:72:c0:55:54:60:20:d3:
         d4:b1:86:35:86:fe:a5:f7:b1:00:64:ef:39:db:98:b1:bd:7e:
         f2:f0:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:47 2024 by rpki-client on console-fra.rpki-client.org