Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa
File:                     323830343a333861633a3a2f33322d3438203d3e20323636343933.roa (raw, json)
Hash identifier:          1pD/9fVciCWZsdeoYnQmee2MZjKX5pG1RYLGrlUYPg0=
Subject key identifier:   AB:18:DB:17:20:71:4F:CD:2D:F4:F4:4F:4D:E1:13:03:22:C6:C4:F5
Certificate issuer:       /CN=E91C1A315869758CDFD12EFEE57B881CFA756822
Certificate serial:       58FC17789DA019789C01A4898D1BA002593FA50C
Authority key identifier: E9:1C:1A:31:58:69:75:8C:DF:D1:2E:FE:E5:7B:88:1C:FA:75:68:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa
Signing time:             Thu 04 Apr 2024 16:31:21 +0000
ROA not before:           Thu 04 Apr 2024 16:26:21 +0000
ROA not after:            Thu 03 Apr 2025 16:31:21 +0000
asID:                     266493
IP address blocks:        2804:38ac::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.crl
                          rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 00:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fc:17:78:9d:a0:19:78:9c:01:a4:89:8d:1b:a0:02:59:3f:a5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91C1A315869758CDFD12EFEE57B881CFA756822
        Validity
            Not Before: Apr  4 16:26:21 2024 GMT
            Not After : Apr  3 16:31:21 2025 GMT
        Subject: CN=AB18DB1720714FCD2DF4F44F4DE1130322C6C4F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:ad:02:78:66:2f:89:af:5a:e8:08:b5:e8:
                    6e:48:5f:4d:14:a8:b6:b0:7b:48:b6:c8:2e:8e:fc:
                    5d:08:35:48:a6:a0:cf:e3:4b:78:5a:1d:92:8f:4f:
                    1f:09:7d:50:d8:e5:9f:f7:60:de:7a:f7:af:5d:8b:
                    f0:35:43:05:93:2e:24:f9:73:aa:a3:39:9c:be:f0:
                    17:18:fc:ee:e8:b6:7d:27:b7:ae:76:95:a2:29:44:
                    72:e9:42:e6:18:f3:25:4c:d8:e4:63:dc:ce:ff:ec:
                    bc:51:00:18:f8:d3:2c:ac:75:3a:2f:25:b8:18:f1:
                    97:ad:47:3c:15:6d:b7:96:f6:33:c8:49:88:cc:b8:
                    e7:d1:b1:b8:d6:9d:e2:4e:b3:1d:7d:52:43:3c:4e:
                    ab:1b:e1:98:13:47:54:65:fe:39:f8:70:be:82:34:
                    da:f2:c7:44:1f:a0:c5:cb:99:9f:ab:04:66:62:a5:
                    ec:cb:29:b4:10:c5:96:3f:e9:73:50:8d:ec:65:44:
                    15:ea:83:9f:b8:48:24:08:39:1d:ed:8f:44:c4:27:
                    06:cf:5e:38:77:d8:5b:d2:66:47:65:97:55:84:fc:
                    47:d2:6c:d6:49:31:ee:c7:4e:49:3d:aa:6e:d4:8f:
                    a6:88:e0:e1:bd:8e:ad:76:c0:69:61:1f:50:95:9a:
                    e7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:18:DB:17:20:71:4F:CD:2D:F4:F4:4F:4D:E1:13:03:22:C6:C4:F5
            X509v3 Authority Key Identifier:
                keyid:E9:1C:1A:31:58:69:75:8C:DF:D1:2E:FE:E5:7B:88:1C:FA:75:68:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/E91C1A315869758CDFD12EFEE57B881CFA756822.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E91C1A315869758CDFD12EFEE57B881CFA756822.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ASFPoznE41ueQyALgpiF8HskioVioGWe1BS8NhMCYNcD/1/323830343a333861633a3a2f33322d3438203d3e20323636343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:38ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:2b:f7:54:03:e6:89:b0:5a:0a:6f:b3:f1:39:17:a1:6e:63:
         be:db:61:66:a8:83:d4:ab:9e:a2:3c:79:58:17:01:70:e1:d7:
         b4:f2:c1:a5:40:c9:e1:fe:ab:0d:a6:e1:e8:33:5d:04:58:c9:
         21:26:21:91:14:49:48:09:95:a3:74:f4:13:9f:65:20:31:87:
         ce:1d:81:ab:2b:82:93:bc:42:74:64:6c:7e:26:79:0b:36:14:
         b4:db:30:04:54:0e:86:3b:76:39:08:99:c6:6e:27:ff:3b:ab:
         c8:ca:a7:8e:37:a0:0d:47:9c:fa:29:30:ca:b6:6a:c2:a7:df:
         7f:b5:45:96:e2:f2:cc:ae:33:56:92:92:5a:32:01:1d:92:fb:
         08:d0:98:99:95:1c:d7:af:5d:06:e1:e4:75:5b:18:4c:ab:b8:
         2b:7b:ee:fa:8b:48:24:6e:08:4f:54:e9:24:38:6b:54:d5:b9:
         d4:23:0b:53:ba:39:4b:be:40:08:ad:0a:d4:93:9a:f6:b5:86:
         c3:de:e4:62:42:17:e3:47:49:ba:cd:78:18:db:fe:76:b2:3b:
         87:ce:90:0b:8d:22:66:fe:3d:3c:9d:4c:f1:56:14:56:5d:e3:
         9f:81:bc:0f:8c:db:b6:e8:40:62:b0:d9:1b:6b:da:25:bb:0d:
         41:22:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:05:40 2024 by rpki-client on console-ams.rpki-client.org