Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/323830343a353262383a3a2f33322d313238203d3e20323638353337.roa
File:                     323830343a353262383a3a2f33322d313238203d3e20323638353337.roa (raw, json)
Hash identifier:          LGkR4NQ/D1eE2P0dTv7HorNIQ36esqQwbOwzMvuYWKA=
Subject key identifier:   B1:E9:74:D2:95:AA:A3:3B:B5:EF:7C:C9:BF:2E:27:DF:E5:6A:9F:2C
Certificate issuer:       /CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
Certificate serial:       45A23E2B137138B4AA753895C9BC24BFFD31A845
Authority key identifier: 4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/323830343a353262383a3a2f33322d313238203d3e20323638353337.roa
Signing time:             Fri 20 Sep 2024 14:14:37 +0000
ROA not before:           Fri 20 Sep 2024 14:09:37 +0000
ROA not after:            Fri 19 Sep 2025 14:14:37 +0000
asID:                     268537
IP address blocks:        2804:52b8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl
                          rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 07:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:a2:3e:2b:13:71:38:b4:aa:75:38:95:c9:bc:24:bf:fd:31:a8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1
        Validity
            Not Before: Sep 20 14:09:37 2024 GMT
            Not After : Sep 19 14:14:37 2025 GMT
        Subject: CN=B1E974D295AAA33BB5EF7CC9BF2E27DFE56A9F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cf:be:a4:9a:2e:94:33:af:ca:ed:c8:ff:e7:
                    e9:ee:0b:ee:76:d8:63:73:2d:58:01:de:92:db:25:
                    7f:76:70:f6:16:d5:78:00:60:d4:ab:3c:ef:cf:d8:
                    b4:f3:13:59:48:bc:66:f5:09:3e:a5:5b:28:1c:09:
                    79:f4:ad:c2:a2:e2:39:f2:a7:00:4b:fa:83:ad:17:
                    b5:d9:4b:3e:a9:e2:2d:da:c3:50:58:7f:b0:a2:76:
                    c2:c6:4e:de:eb:9d:a1:7b:14:65:69:a7:45:d9:f2:
                    13:ac:13:c9:57:d2:c6:0e:8e:55:26:b3:8c:cb:0d:
                    f8:73:6e:d4:c3:2a:7b:e4:cf:88:6c:66:c6:d6:c2:
                    68:07:c3:36:6e:a4:ea:48:e6:1a:fe:d4:33:df:58:
                    7f:11:72:47:d1:31:e3:cc:b2:ec:19:a1:3f:bb:48:
                    f3:a7:19:7a:ea:1e:fc:aa:a4:95:f2:29:67:21:16:
                    db:89:7b:52:df:0d:ea:5a:93:47:f4:32:b2:f9:5a:
                    9b:cf:47:0e:3e:48:ff:3d:46:22:87:c7:bc:61:e6:
                    af:08:2e:67:68:cd:9b:fa:9b:7b:c9:74:ed:3c:f9:
                    fe:14:15:ca:cf:a9:14:9d:91:a3:cd:00:f1:b5:0f:
                    91:9c:e0:5b:2a:8f:a6:d3:a3:bb:90:c6:c8:92:40:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E9:74:D2:95:AA:A3:3B:B5:EF:7C:C9:BF:2E:27:DF:E5:6A:9F:2C
            X509v3 Authority Key Identifier:
                keyid:4B:1A:A4:83:6C:83:C2:F4:21:BF:4B:5F:3A:1C:09:1E:B1:42:80:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B1AA4836C83C2F421BF4B5F3A1C091EB14280B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7eCsUsbrCURiW8QvZGMEugtGCeNthJLF4ZvDDduTGFm/0/323830343a353262383a3a2f33322d313238203d3e20323638353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:52b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:1f:7d:62:b4:a5:c7:da:6c:f0:7d:c6:0e:4c:14:67:71:b6:
         fc:65:eb:d0:22:b1:21:b1:f9:05:73:e4:18:78:b4:44:de:06:
         e2:fb:9a:20:1e:d5:fa:3f:1e:ab:22:c2:2a:bb:a5:f4:c7:e9:
         63:1e:e7:65:7c:9a:68:ab:70:06:e3:41:b3:61:26:ff:11:98:
         90:c0:a2:46:56:68:a7:ea:8b:aa:61:d4:95:b8:8f:3e:16:34:
         89:0b:78:f5:1d:df:cc:ab:bd:36:47:7e:e9:c6:65:da:c5:f9:
         3a:2d:bd:0c:44:eb:6e:7b:c7:7c:ba:9d:10:11:1e:78:93:95:
         e1:a4:5b:4e:b0:ea:f2:d9:f1:4c:cc:34:52:83:5c:45:d1:6a:
         32:df:29:bd:9b:92:d0:fb:11:26:a9:aa:29:45:02:a6:34:3a:
         82:da:a6:18:72:74:49:91:21:c3:de:01:75:9c:5e:3d:1c:cc:
         de:5e:a7:99:7a:17:83:1d:a6:b4:c3:43:74:f6:1c:2d:f7:aa:
         47:2a:6f:42:59:11:ec:71:74:3d:f4:9b:b5:9e:7e:4f:75:e7:
         80:7d:ec:93:43:52:bd:d9:29:c5:a3:3b:41:a8:37:e4:7f:af:
         fa:a8:4f:7f:12:a6:1b:26:87:dc:e0:da:36:fd:93:2c:4e:f2:
         2e:32:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 14:44:56 2024 by rpki-client on console-ams.rpki-client.org