Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/323830343a353138383a3a2f33322d3334203d3e20323638343538.roa
File:                     323830343a353138383a3a2f33322d3334203d3e20323638343538.roa (raw, json)
Hash identifier:          NQHdEu0oSnKs/M68G+dizeKPBuQS6W/kuKh/3oh6mZI=
Subject key identifier:   F8:4C:BE:5D:CB:61:9E:AE:87:6E:54:83:E1:B5:09:8B:B1:A8:62:14
Certificate issuer:       /CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28
Certificate serial:       6A582DBF5E2EBA664194B9083153F270BDD747A5
Authority key identifier: AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/323830343a353138383a3a2f33322d3334203d3e20323638343538.roa
Signing time:             Thu 04 Apr 2024 22:45:16 +0000
ROA not before:           Thu 04 Apr 2024 22:40:16 +0000
ROA not after:            Thu 03 Apr 2025 22:45:16 +0000
asID:                     268458
IP address blocks:        2804:5188::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl
                          rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:58:2d:bf:5e:2e:ba:66:41:94:b9:08:31:53:f2:70:bd:d7:47:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC469298E4E56983439AA441B4B6CAFBB04F8F28
        Validity
            Not Before: Apr  4 22:40:16 2024 GMT
            Not After : Apr  3 22:45:16 2025 GMT
        Subject: CN=F84CBE5DCB619EAE876E5483E1B5098BB1A86214
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:60:fd:af:a6:dc:65:bd:f3:54:1e:06:69:
                    a7:2f:80:ac:4c:1d:89:65:ee:5f:b9:37:56:64:4b:
                    8f:2b:03:c5:35:5a:40:f7:2d:af:27:12:f3:c6:b1:
                    47:c0:65:8f:b3:9f:ed:1f:24:46:5a:21:d3:2f:ca:
                    10:fb:27:03:f0:57:a0:d4:5c:de:7b:8a:38:cf:c5:
                    fa:8f:da:cd:b9:3f:28:56:18:5c:2b:ed:b9:a2:0e:
                    91:64:50:21:47:0d:b0:12:69:b7:a0:ea:5b:0d:5d:
                    0e:78:15:5c:57:cc:23:8b:c3:81:38:6e:b1:d1:36:
                    93:01:07:9a:e2:16:a7:9e:53:2a:77:65:64:65:57:
                    81:39:45:5d:49:23:f2:2f:80:25:b9:37:a8:76:6a:
                    00:7d:5c:a0:bb:67:f8:c5:ce:33:f2:55:69:a9:f6:
                    aa:cc:44:62:b3:70:d5:29:93:8b:6b:21:44:f4:90:
                    92:ad:14:3a:f8:c0:5d:6c:ba:3a:52:26:7c:58:bd:
                    dd:bc:62:04:07:4b:a1:41:18:33:4f:17:d3:62:ad:
                    53:83:4b:b7:c1:54:7f:42:36:d3:f8:43:d3:91:b0:
                    f7:1e:08:46:3e:9d:ce:e4:fe:8e:dc:72:2c:7d:da:
                    89:54:7d:93:06:3f:2f:87:2e:4b:21:98:a7:2e:6c:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:BE:5D:CB:61:9E:AE:87:6E:54:83:E1:B5:09:8B:B1:A8:62:14
            X509v3 Authority Key Identifier:
                keyid:AC:46:92:98:E4:E5:69:83:43:9A:A4:41:B4:B6:CA:FB:B0:4F:8F:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC469298E4E56983439AA441B4B6CAFBB04F8F28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qrPwjKeUsW1dy4XDBZMdY7WSL7Q3N3tnHxm91TctYBC/1/323830343a353138383a3a2f33322d3334203d3e20323638343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5188::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:b4:a9:22:e4:90:92:bc:08:f8:38:42:e3:1f:ca:66:70:4c:
         9e:27:73:d3:e0:56:8d:88:6f:ed:8e:3e:7b:8b:f3:16:0a:22:
         8d:83:1a:ae:d2:a9:fe:83:23:a9:11:58:cf:5f:df:98:55:8b:
         f9:17:27:94:c2:53:3b:b5:66:d1:63:1d:da:65:fd:25:2b:6e:
         3f:b0:0b:c7:fa:50:dd:e3:18:82:a2:de:a6:d6:1e:aa:ca:c4:
         f5:64:e8:63:e0:65:77:c1:d8:ee:9f:fe:49:3c:fa:89:6b:16:
         84:94:66:ab:12:90:f1:02:53:ac:86:3a:df:bf:90:02:ee:c7:
         01:2a:77:86:88:22:69:db:08:ef:dd:a3:c5:3e:80:9c:08:d2:
         76:2e:be:3f:bc:fd:18:f0:1a:38:a3:d3:81:3a:31:35:07:62:
         ac:70:e2:1d:6e:83:44:8d:54:67:44:17:65:cb:79:34:50:94:
         3d:b2:20:b7:4c:0e:c5:5a:10:8e:a7:a5:83:9a:27:07:c6:be:
         58:5b:a7:6d:55:c7:cd:36:a0:69:91:e6:70:d8:28:b0:b1:53:
         59:7c:5d:58:60:63:21:ed:eb:38:ee:0e:31:25:8b:c3:b9:ba:
         d0:5d:9a:f3:97:a9:61:a8:ed:b5:cd:cd:5e:f3:65:87:ea:95:
         cf:fe:c3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:22:36 2024 by rpki-client on console-fra.rpki-client.org