Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
File:                     323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa (raw, json)
Hash identifier:          ete/TBbEfAdQ+KgRXttMVYJcpj3P2aIFPGzCruxm4nA=
Subject key identifier:   1E:F8:46:C3:A3:E8:CB:3B:B4:5F:E8:A2:E4:8C:2E:A4:34:94:4E:F5
Certificate issuer:       /CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
Certificate serial:       2C399AFF726C5DD152903671516AF554B014EC69
Authority key identifier: D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa
Signing time:             Tue 23 Apr 2024 19:43:44 +0000
ROA not before:           Tue 23 Apr 2024 19:38:44 +0000
ROA not after:            Tue 22 Apr 2025 19:43:44 +0000
asID:                     263995
IP address blocks:        2804:2910:8000::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl
                          rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:39:9a:ff:72:6c:5d:d1:52:90:36:71:51:6a:f5:54:b0:14:ec:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3CB0519647F9D3C145E31E81E779EA9C3D2C274
        Validity
            Not Before: Apr 23 19:38:44 2024 GMT
            Not After : Apr 22 19:43:44 2025 GMT
        Subject: CN=1EF846C3A3E8CB3BB45FE8A2E48C2EA434944EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f9:4f:e2:c2:d8:6b:fc:ba:ac:34:01:34:3a:
                    16:9d:3f:30:2b:6c:b8:c8:c3:0c:88:36:e6:37:df:
                    d3:4e:8c:5d:5f:85:6f:41:cc:2c:31:08:4f:63:fe:
                    13:36:2b:4c:85:15:7a:83:2d:8c:95:23:c7:c7:c3:
                    b7:96:a9:cf:b3:64:11:e2:62:db:a3:ae:a0:d0:c0:
                    94:be:ee:28:b4:ce:d4:98:54:56:77:60:a4:a6:ab:
                    a0:28:72:62:cf:0b:f8:c7:0d:bc:bf:a8:b6:d6:cb:
                    34:b5:81:07:ee:65:59:9d:cd:7d:f8:d2:d1:37:d6:
                    3b:49:c8:6e:7c:ba:3d:90:ad:06:49:97:ed:0b:7e:
                    92:e4:1b:7a:8e:e8:a6:75:af:6f:12:b5:20:13:e2:
                    07:17:c6:1c:66:ea:15:c4:14:83:40:21:a4:08:de:
                    e5:e8:45:c5:7e:d1:b6:be:74:4d:0f:b1:f9:eb:c4:
                    d5:57:dd:ff:eb:7e:98:2f:44:45:0e:5f:30:72:d7:
                    73:a5:2c:16:5f:2a:9c:41:a2:4e:8c:e3:fe:f8:dc:
                    b7:20:56:14:4d:ac:2a:3e:3f:1a:f3:33:b6:2f:e6:
                    8e:5d:ca:47:58:90:06:de:8d:16:e5:17:8e:b1:2a:
                    77:b1:78:8f:b5:38:0d:d1:3b:75:99:5f:aa:58:b6:
                    f9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F8:46:C3:A3:E8:CB:3B:B4:5F:E8:A2:E4:8C:2E:A4:34:94:4E:F5
            X509v3 Authority Key Identifier:
                keyid:D3:CB:05:19:64:7F:9D:3C:14:5E:31:E8:1E:77:9E:A9:C3:D2:C2:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3CB0519647F9D3C145E31E81E779EA9C3D2C274.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AFhTpGBpoWALdpFyJVqtSMoukEA9tq9HYiWwHPEjCUHS/0/323830343a323931303a383030303a3a2f34342d3434203d3e20323633393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2910:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:63:9d:46:e5:25:ec:03:0b:48:14:5e:9f:77:af:9b:fb:26:
         e9:f9:f3:c2:85:6b:21:8d:9c:16:96:b2:73:0c:ee:0c:f9:ea:
         71:4c:c6:e5:7d:5e:3a:de:2a:bc:de:f4:54:cb:aa:6c:12:e9:
         e8:7e:66:d2:5d:88:54:c6:4b:42:e4:a2:49:7d:e6:31:be:ad:
         fe:89:51:f0:06:50:b5:25:8f:d7:e9:a0:ef:2f:8e:64:f5:7f:
         c9:54:c9:fc:4b:29:7f:61:6f:a9:9f:90:70:8a:40:8d:a9:59:
         19:ab:d8:4d:99:2a:7c:10:93:05:bb:e4:6f:2e:01:22:60:4c:
         7e:f8:7a:8f:c7:12:a4:eb:ff:a2:54:da:52:16:65:4b:22:c6:
         99:f1:49:78:58:64:29:90:e1:b0:89:37:b7:a6:3c:a6:3d:aa:
         ca:08:9b:bc:e8:ac:1c:1f:03:2c:f2:0e:d1:8a:69:be:6b:59:
         27:57:1e:b4:8a:92:38:ba:8f:07:74:bb:5e:51:27:f4:8c:8b:
         75:72:13:6f:53:bb:fb:c1:ea:be:cd:40:75:eb:c4:f1:73:e2:
         b4:08:0f:47:7c:7d:53:fe:1d:a1:f0:98:6c:a6:6e:32:32:c7:
         b6:3b:10:a3:b2:dd:52:2e:0a:dd:7c:51:f2:55:7e:3d:15:37:
         bf:68:07:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:33 2024 by rpki-client on console-fra.rpki-client.org