Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa
File:                     323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (raw, json)
Hash identifier:          DnufiHJs9Jkz/lU5F9Lld3LDPp9sPbSXwLkLPOSp+hs=
Subject key identifier:   9F:36:C1:B0:69:27:CE:4C:18:FC:86:3B:95:5A:B0:C1:CF:A9:A6:1D
Certificate issuer:       /CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
Certificate serial:       2F455E8324B2373886B3BF5BF707C20F6A2DAF58
Authority key identifier: 4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa
Signing time:             Thu 04 Apr 2024 02:47:54 +0000
ROA not before:           Thu 04 Apr 2024 02:42:54 +0000
ROA not after:            Thu 03 Apr 2025 02:47:54 +0000
asID:                     262496
IP address blocks:        2804:520::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl
                          rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 21:58:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:45:5e:83:24:b2:37:38:86:b3:bf:5b:f7:07:c2:0f:6a:2d:af:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD
        Validity
            Not Before: Apr  4 02:42:54 2024 GMT
            Not After : Apr  3 02:47:54 2025 GMT
        Subject: CN=9F36C1B06927CE4C18FC863B955AB0C1CFA9A61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:49:28:5a:d1:9d:42:4d:b9:59:b2:4c:f6:
                    db:27:26:14:e8:6a:cd:8b:a7:47:c5:bd:08:b7:ad:
                    92:57:96:0d:00:8d:2f:0c:27:38:ac:3a:4a:8f:3a:
                    ce:d1:2c:f2:bc:c1:c8:a5:67:7c:12:00:89:f1:48:
                    7b:65:6e:77:70:48:6d:9a:c3:77:23:ea:0e:68:1d:
                    ca:2c:d2:90:e4:10:03:f7:3a:c3:98:f4:12:9f:56:
                    ab:98:9b:15:2e:92:d7:e0:84:70:54:b6:67:c0:a4:
                    26:e3:e1:86:46:e1:f2:60:91:ce:8f:1d:93:bc:3d:
                    48:bf:fe:f3:31:ca:8f:ff:37:4c:fb:18:7f:6d:48:
                    c7:85:f5:cb:4b:65:53:81:21:eb:b1:2e:0b:14:ba:
                    eb:b8:b7:c0:b6:73:eb:4e:09:dd:29:ad:1c:71:f3:
                    14:51:4d:58:56:66:8c:6b:40:f9:f0:01:1a:1b:f8:
                    70:87:77:43:de:a4:2c:cf:8a:ae:22:6d:e4:24:52:
                    73:4c:ad:c3:17:00:ae:3b:3a:d7:04:f9:2b:61:39:
                    c7:b7:26:73:7a:02:22:c5:59:c2:89:ef:3e:9d:a5:
                    77:40:d4:bf:ae:af:94:aa:9e:a5:f2:06:6b:ba:ae:
                    91:8d:fd:d1:d8:69:7c:88:c3:70:81:5d:c3:6d:ad:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:36:C1:B0:69:27:CE:4C:18:FC:86:3B:95:5A:B0:C1:CF:A9:A6:1D
            X509v3 Authority Key Identifier:
                keyid:4E:4C:2C:4C:FA:13:78:55:EA:25:A4:FE:C4:39:1B:70:C2:1A:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E4C2C4CFA137855EA25A4FEC4391B70C21A5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/1/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:520::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:0f:48:e2:ee:7d:2d:11:f1:72:98:01:a7:9d:0d:04:7d:16:
         52:3f:ba:23:dc:37:74:a7:04:a0:a5:98:5c:be:d5:11:61:a0:
         af:56:05:cc:59:f4:3f:32:a3:1a:b8:20:85:fb:63:03:72:ec:
         41:c1:d7:89:14:46:e2:2d:59:dc:c6:ed:43:9e:50:d1:54:f3:
         b0:e4:86:a5:05:3d:83:c2:fb:12:4f:b6:a0:9a:6d:6e:84:54:
         c4:ca:5b:49:ba:74:37:6e:3e:91:b1:9c:92:6b:2f:30:21:7b:
         c7:58:8c:43:f3:a6:00:0c:14:3a:06:ce:6c:c3:05:6f:2a:a4:
         9e:37:20:82:8f:bd:9d:c4:8d:a1:c4:fb:7b:4c:63:61:00:bd:
         16:fc:69:c8:d4:20:28:3d:44:9c:e2:38:f6:9d:d0:43:d4:51:
         6b:ec:e2:d4:67:4d:0f:c6:42:f3:d0:5b:9e:39:dd:02:58:fe:
         fe:59:df:ec:85:ed:37:84:42:8d:25:eb:d8:1b:40:75:6a:75:
         42:19:71:9b:f9:11:e5:bb:f4:61:9c:dd:46:01:8f:1c:57:96:
         0f:f2:60:ba:dd:da:5a:d1:c5:cf:24:9f:70:cf:6d:81:f2:16:
         da:0b:de:f6:8c:3a:b0:f7:26:34:80:eb:9c:ed:2b:a3:60:8a:
         46:a1:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:09 2024 by rpki-client on console-fra.rpki-client.org