Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa
File:                     323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa (raw, json)
Hash identifier:          IQjgrxLuCvw1lc2YVrkS0jIlj2BPDxTsDioZE93pG+A=
Subject key identifier:   54:50:E4:1D:C2:D5:6A:E3:72:1B:CD:DC:74:B5:F4:49:A3:67:0F:CF
Certificate issuer:       /CN=582517B9105955B7B839FB60DC59AE677C6B4DED
Certificate serial:       142780E45AF975853CDB8FD3E90784997E3C1BE7
Authority key identifier: 58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa
Signing time:             Fri 05 Apr 2024 03:18:10 +0000
ROA not before:           Fri 05 Apr 2024 03:13:10 +0000
ROA not after:            Fri 04 Apr 2025 03:18:10 +0000
asID:                     269417
IP address blocks:        2804:6444:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl
                          rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:20:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:80:e4:5a:f9:75:85:3c:db:8f:d3:e9:07:84:99:7e:3c:1b:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582517B9105955B7B839FB60DC59AE677C6B4DED
        Validity
            Not Before: Apr  5 03:13:10 2024 GMT
            Not After : Apr  4 03:18:10 2025 GMT
        Subject: CN=5450E41DC2D56AE3721BCDDC74B5F449A3670FCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8c:c9:19:00:4b:e2:b0:f5:5c:2e:7b:3d:fd:
                    f9:cf:19:e6:b7:ee:c7:62:f3:5e:8d:52:76:49:ef:
                    01:e9:c2:86:a7:72:ae:a7:f2:08:8b:4e:56:2d:37:
                    59:33:54:c3:37:93:e3:9a:6b:89:b5:ef:92:18:4d:
                    46:8f:44:c7:39:d1:f5:76:7a:c8:87:df:98:64:fc:
                    09:70:08:83:f3:d1:b8:a7:7c:28:a9:6c:81:90:e6:
                    fe:44:e3:26:0a:05:a9:eb:98:34:39:22:8e:1e:f8:
                    9e:17:a4:5d:24:c1:d2:df:2c:78:17:7e:14:42:66:
                    be:5d:ad:18:20:6a:ab:dc:96:d4:fc:52:58:ea:ee:
                    02:57:fa:06:cb:25:08:bd:15:83:bc:71:a5:b4:cc:
                    8b:d7:42:f4:13:23:d5:ad:5d:89:2e:6a:a5:96:a0:
                    04:0a:c5:12:a5:c0:8a:87:58:47:75:1e:67:c2:6e:
                    95:bf:0f:5d:fe:6a:28:ec:cb:97:d3:8c:02:06:5d:
                    62:99:2a:af:fd:b5:e9:c9:55:20:93:cf:2a:fd:39:
                    aa:2d:75:63:7a:b1:eb:dd:c2:d5:18:c9:fa:11:a9:
                    cc:3c:3b:3d:b9:37:e5:f1:43:db:d7:5e:25:53:60:
                    07:66:b1:9a:a8:6b:05:09:8b:13:b5:bd:df:61:78:
                    c6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:50:E4:1D:C2:D5:6A:E3:72:1B:CD:DC:74:B5:F4:49:A3:67:0F:CF
            X509v3 Authority Key Identifier:
                keyid:58:25:17:B9:10:59:55:B7:B8:39:FB:60:DC:59:AE:67:7C:6B:4D:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/582517B9105955B7B839FB60DC59AE677C6B4DED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/582517B9105955B7B839FB60DC59AE677C6B4DED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rP5GWGJS5hFQK7f5vQSHVdQZbNaiJ4WkWpAxmbbeq5D/1/323830343a363434343a313030303a3a2f34302d3430203d3e20323639343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6444:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:1e:d5:9c:89:63:c2:ac:70:8f:88:4e:5d:11:24:e8:6a:f7:
         21:4c:7b:24:bb:11:ee:ae:c9:fa:c7:d4:c2:f1:c4:9c:f1:da:
         f8:16:c8:7e:05:26:a4:25:48:d9:43:d8:86:08:15:7c:2e:55:
         e6:c9:b9:0d:fe:33:01:bd:67:9c:22:6f:02:c0:a5:e1:f6:05:
         aa:67:bd:ca:a5:44:aa:20:02:d7:5e:fe:a2:30:59:95:47:09:
         c2:ea:da:9b:b9:11:aa:10:a7:00:9f:16:86:7f:2c:87:0e:88:
         b7:20:0a:37:5d:e9:8d:72:21:cb:0d:99:81:27:bb:4e:fd:34:
         3c:89:1e:a4:40:44:13:41:ee:0b:9b:bb:cd:03:df:e3:a2:5d:
         3c:f4:e9:8a:c7:ad:f1:58:43:f6:1d:13:47:70:01:2f:52:01:
         7c:41:2e:46:38:65:96:b9:a5:68:85:27:d7:16:8b:d1:3e:51:
         4b:d0:ee:1d:ff:b3:03:c0:8e:96:6e:d6:16:27:2c:b9:8d:ac:
         db:a5:67:e8:30:e0:cf:d6:1d:09:26:7b:94:c4:a7:11:db:f9:
         ff:09:dc:80:d0:f9:8f:5a:47:5f:c0:a6:03:07:89:a4:0c:cf:
         e8:42:f8:4e:bf:f0:ab:08:5a:17:83:dd:12:4a:3e:ae:6e:0f:
         58:d7:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:05 2024 by rpki-client on console-ams.rpki-client.org