Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a343233303a3a2f33322d3438203d3e20323637343834.roa
File:                     323830343a343233303a3a2f33322d3438203d3e20323637343834.roa (raw, json)
Hash identifier:          uP8qcLaQ03G8ppcJMbLLDQOFoyyGAGJK7Y6/DuXE2C8=
Subject key identifier:   BB:31:CC:18:C2:A9:BB:DA:04:EB:11:68:D7:04:31:FC:4B:89:5C:1F
Certificate issuer:       /CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
Certificate serial:       31E4E8C6346DA99C55D06B799E42EB0FD05D6E0D
Authority key identifier: 0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a343233303a3a2f33322d3438203d3e20323637343834.roa
Signing time:             Mon 08 Jul 2024 19:43:05 +0000
ROA not before:           Mon 08 Jul 2024 19:38:05 +0000
ROA not after:            Mon 07 Jul 2025 19:43:05 +0000
asID:                     267484
IP address blocks:        2804:4230::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl
                          rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 16 Nov 2024 21:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e4:e8:c6:34:6d:a9:9c:55:d0:6b:79:9e:42:eb:0f:d0:5d:6e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98
        Validity
            Not Before: Jul  8 19:38:05 2024 GMT
            Not After : Jul  7 19:43:05 2025 GMT
        Subject: CN=BB31CC18C2A9BBDA04EB1168D70431FC4B895C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:b8:45:d3:6e:77:fa:58:8a:07:9e:2c:fb:
                    29:af:8d:e4:6a:bb:a0:d6:bc:d8:4a:8a:06:5f:65:
                    7e:91:b3:9f:3c:8d:64:2e:0c:6c:9c:a1:d3:b3:67:
                    af:8e:b4:b7:74:1d:7a:d5:42:76:da:3b:bd:2b:26:
                    2a:80:3c:9d:d4:2a:1d:c6:06:4d:49:db:07:06:0f:
                    96:a6:0d:de:cd:c1:82:d4:56:bf:c9:ff:6d:a1:d9:
                    51:55:c2:a0:b0:67:23:dc:8e:5f:80:59:f7:20:8d:
                    a2:1e:65:b2:62:bb:8b:22:fd:79:9e:71:c4:09:c5:
                    2b:f4:85:78:59:7b:20:84:a7:7b:fc:16:b3:e3:76:
                    a6:16:50:5b:7e:58:53:f2:5c:20:af:fc:75:72:b1:
                    f7:2d:2a:0a:be:29:53:3a:a5:dc:80:a8:a5:ec:fb:
                    c4:44:84:0f:1f:b8:90:24:91:48:cb:3d:86:25:2f:
                    63:06:ba:06:4b:02:1d:df:49:32:81:60:7b:c0:c3:
                    e3:27:1d:c6:94:2c:09:67:ce:e8:94:24:df:34:f5:
                    65:a0:7f:2d:88:63:6d:b8:c4:57:f0:93:64:52:63:
                    0e:47:05:82:97:ed:f0:73:d4:32:24:3d:bb:59:60:
                    12:00:34:3c:45:de:03:93:ce:31:0d:2d:c6:e6:6a:
                    41:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:CC:18:C2:A9:BB:DA:04:EB:11:68:D7:04:31:FC:4B:89:5C:1F
            X509v3 Authority Key Identifier:
                keyid:0D:EB:92:F3:30:7B:0E:94:CC:70:D9:B2:1B:50:F6:FE:21:35:CD:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DEB92F3307B0E94CC70D9B21B50F6FE2135CD98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ai5uYxS6717N57VeFxhY7WHRwS5NhfL6LL8ty4MTZp5J/2/323830343a343233303a3a2f33322d3438203d3e20323637343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4230::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:9e:fe:d7:d3:3c:5a:fe:67:7b:66:7e:a3:55:dc:88:9f:4e:
         5a:f4:61:0f:83:87:18:b1:fa:6f:a5:ac:7c:7d:e2:13:f7:1a:
         06:6a:53:be:71:87:a6:c6:a3:a7:73:39:e2:21:5d:66:38:42:
         69:58:53:ae:8c:4f:cf:87:c1:5f:6a:9b:6c:e4:a4:55:78:69:
         a0:af:c9:18:11:69:a7:fc:e5:ad:f5:29:9a:0b:b9:fe:7c:00:
         b7:bb:43:42:14:dd:54:28:60:75:c4:d2:a3:38:ed:e7:cb:61:
         3b:a4:50:9f:b6:6c:64:c5:10:cc:99:88:6f:22:2d:0c:5b:13:
         b8:68:1c:9e:34:ae:1d:09:0b:e2:13:e3:6f:f6:f5:ef:9e:1e:
         5f:67:4f:a4:a3:eb:1e:fc:c7:ea:79:34:c9:d8:87:10:18:3f:
         09:4b:64:ff:22:2a:b5:fb:ad:a3:5b:55:50:2d:bb:7d:f0:07:
         a2:b9:a7:a3:a3:6f:62:4b:6f:49:5f:4d:05:5c:89:dc:4c:45:
         83:f7:18:a0:60:be:4d:91:7b:c0:c2:ab:62:cc:95:b4:5a:d8:
         c6:3f:e2:43:ca:94:fd:1e:f4:90:54:26:c2:4b:d3:1b:b3:4e:
         5c:e1:cb:da:ba:3e:9f:dd:f3:93:96:89:21:1f:9f:dd:70:e4:
         74:03:6a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 02:55:59 2024 by rpki-client on console-ams.rpki-client.org