Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/323830343a326534303a3a2f33322d313238203d3e20323632353933.roa
File:                     323830343a326534303a3a2f33322d313238203d3e20323632353933.roa (raw, json)
Hash identifier:          i4EfRsQ8pHIdJ9iHurrw0m5s1Z6OmWKA/nwuOCuZL0Q=
Subject key identifier:   3E:FC:F3:CE:52:F6:B4:CE:40:51:DA:87:F3:D8:3E:C9:08:57:61:DC
Certificate issuer:       /CN=B42C382D0432E1D64A3416918A84F0D945387A0A
Certificate serial:       5CC917CD32FEC3725F0646F00D7D05D74BFC32C9
Authority key identifier: B4:2C:38:2D:04:32:E1:D6:4A:34:16:91:8A:84:F0:D9:45:38:7A:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42C382D0432E1D64A3416918A84F0D945387A0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/323830343a326534303a3a2f33322d313238203d3e20323632353933.roa
Signing time:             Fri 01 Nov 2024 13:43:21 +0000
ROA not before:           Fri 01 Nov 2024 13:38:21 +0000
ROA not after:            Fri 31 Oct 2025 13:43:21 +0000
asID:                     262593
IP address blocks:        2804:2e40::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.crl
                          rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42C382D0432E1D64A3416918A84F0D945387A0A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 15:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:c9:17:cd:32:fe:c3:72:5f:06:46:f0:0d:7d:05:d7:4b:fc:32:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B42C382D0432E1D64A3416918A84F0D945387A0A
        Validity
            Not Before: Nov  1 13:38:21 2024 GMT
            Not After : Oct 31 13:43:21 2025 GMT
        Subject: CN=3EFCF3CE52F6B4CE4051DA87F3D83EC9085761DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f9:77:66:f4:61:30:41:80:46:39:7e:81:d1:
                    29:8f:6b:f6:da:b9:2d:2c:60:d2:a0:53:92:22:64:
                    4b:2b:66:9f:95:71:a8:7e:09:a0:12:31:1a:7b:95:
                    3f:cd:e8:e4:18:dc:29:bb:7b:10:96:9e:b8:04:f9:
                    06:03:5b:b2:62:57:f0:06:f2:c6:a0:10:cb:3c:96:
                    01:7f:0d:c7:d3:d6:cf:52:7c:d0:7f:53:c7:39:27:
                    1b:c0:49:6d:84:55:0f:10:3b:d9:f1:43:b7:bb:01:
                    ef:aa:e7:a8:ec:fc:b7:fe:33:1e:be:25:7e:25:99:
                    ad:42:4a:14:8e:6d:b0:a5:8f:f7:e9:f8:13:fd:fc:
                    5a:59:a4:4c:d7:f0:e2:2e:db:79:ff:4b:7c:ee:79:
                    37:9f:91:8a:7c:4a:fc:e0:43:00:10:46:6f:31:31:
                    21:10:37:64:44:dd:f8:ef:c3:84:f8:cc:bc:b4:1d:
                    4a:3c:91:f8:9f:b8:83:86:c0:a2:e1:01:6c:90:6d:
                    04:b5:40:60:1a:8f:e4:c6:a7:35:06:b4:8f:c5:13:
                    23:1e:ad:3a:84:4d:d8:1d:ef:5a:cd:46:c0:7f:07:
                    d9:48:ac:dd:04:df:e4:58:77:4d:84:13:5b:ef:fb:
                    00:ec:e5:72:ec:a7:b4:ba:5d:e7:64:5d:9b:9a:63:
                    95:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FC:F3:CE:52:F6:B4:CE:40:51:DA:87:F3:D8:3E:C9:08:57:61:DC
            X509v3 Authority Key Identifier:
                keyid:B4:2C:38:2D:04:32:E1:D6:4A:34:16:91:8A:84:F0:D9:45:38:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/B42C382D0432E1D64A3416918A84F0D945387A0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B42C382D0432E1D64A3416918A84F0D945387A0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tAyERo92azxxPQkJAiDoRb6kB9msamRwXUKffzoNnG6/0/323830343a326534303a3a2f33322d313238203d3e20323632353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:1a:8f:cf:d0:52:fc:77:42:66:84:3e:7f:a9:64:13:6a:
         aa:71:3f:de:f0:7a:22:8c:ad:3b:2b:a7:2e:25:09:d0:e8:f3:
         87:5e:18:07:4b:75:92:87:d7:ff:d4:f2:fb:e5:29:82:46:5f:
         8e:06:00:82:7a:c2:69:30:c6:9c:1d:ad:d6:2a:6e:14:d0:bc:
         16:ff:7f:6e:b7:a4:b3:91:f8:8a:4f:80:0b:7e:35:e4:42:ba:
         f7:e2:79:5b:c5:12:ff:50:e0:b1:98:bd:42:2c:3d:f4:a5:91:
         22:66:15:a0:79:53:bf:23:50:fe:5d:86:89:4d:a9:b5:b7:9b:
         b2:0f:34:ec:f3:ed:ef:40:12:ec:e3:07:66:80:f0:79:39:1a:
         01:26:4a:4d:fa:a8:49:ce:35:05:a4:c0:f0:c9:9c:34:28:0b:
         c7:de:da:eb:3b:70:14:3a:c7:1a:43:26:ba:ce:56:cc:59:b0:
         49:2a:3f:0a:f3:86:30:f8:b2:12:d0:40:9a:f7:dd:2b:cd:b6:
         0b:01:e6:29:cb:bc:6c:7a:b7:19:80:de:4c:17:d6:fb:6b:1c:
         e7:d6:52:06:fa:e8:12:e8:95:a7:55:ed:81:3a:0f:48:ef:1c:
         5f:a4:51:22:ba:f2:f8:82:2a:60:50:58:fa:56:47:70:85:9f:
         3e:28:27:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 16:21:09 2024 by rpki-client on console-ams.rpki-client.org