Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6438303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6438303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          sl6NOLnrKkO/uG7+YttSa9wO/7pyu2KgQEc/Gzp7N9w=
Subject key identifier:   F7:79:87:B0:C3:46:DC:D9:0E:B8:3B:B4:BF:A9:7C:6A:7C:2F:C4:27
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       45B61893340C127C6169146D350B9EEB840A6B32
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6438303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:26 +0000
ROA not before:           Thu 16 May 2024 11:33:26 +0000
ROA not after:            Thu 15 May 2025 11:38:26 +0000
asID:                     263338
IP address blocks:        2804:1494:d80::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b6:18:93:34:0c:12:7c:61:69:14:6d:35:0b:9e:eb:84:0a:6b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:26 2024 GMT
            Not After : May 15 11:38:26 2025 GMT
        Subject: CN=F77987B0C346DCD90EB83BB4BFA97C6A7C2FC427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:d8:e2:18:33:c7:e9:e4:f6:82:c8:01:43:
                    f3:43:78:25:91:0a:6e:ac:1d:88:f5:24:a3:49:f1:
                    44:46:71:2b:43:d4:81:fe:32:43:d4:12:f2:e9:c1:
                    21:72:3e:53:d4:be:5e:df:a8:b7:a2:0d:57:a8:01:
                    93:82:c5:4b:54:21:19:07:ac:19:38:bc:38:46:90:
                    0d:cb:aa:0f:cd:69:c7:2b:da:34:2a:be:30:87:3e:
                    0e:d6:3c:e6:ca:98:78:ac:42:a6:d1:4e:d2:6f:4b:
                    8a:4e:d3:31:59:6a:26:a6:33:56:e8:be:e6:ba:eb:
                    42:d9:ef:62:b2:7b:16:d4:7b:83:ae:64:dc:70:c3:
                    92:df:de:b1:92:b9:b4:2b:7c:bb:d5:96:4c:8d:d7:
                    21:b5:5e:40:26:88:80:0b:89:6c:a9:b0:d1:c6:57:
                    5e:f7:b4:cc:42:a1:71:79:7a:c9:7d:aa:28:bf:ac:
                    24:c8:71:db:5d:a4:69:60:bb:63:e8:0f:e3:1b:ae:
                    f1:8f:10:cc:1e:09:84:c0:13:b5:24:97:43:3c:de:
                    b6:25:46:fe:9e:1c:85:6c:b3:ad:22:92:15:a2:21:
                    84:cd:e1:a1:cc:3d:cc:fe:01:4f:78:9d:c3:04:ba:
                    4e:84:11:a3:76:24:40:80:cc:d0:39:b4:4a:48:d7:
                    22:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:87:B0:C3:46:DC:D9:0E:B8:3B:B4:BF:A9:7C:6A:7C:2F:C4:27
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6438303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:d80::/45

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:dd:67:c2:1e:d8:e7:39:f7:6f:c8:ec:3f:68:0d:16:ce:
         cb:81:ae:1f:27:9e:5f:86:7a:d2:fb:64:57:49:ae:30:c7:f5:
         0b:8d:9b:85:cd:61:16:9b:3e:d5:c9:9b:82:bf:3a:65:74:e8:
         76:fb:7d:18:d8:54:df:99:f4:1f:10:e4:08:64:55:bf:a1:f7:
         4a:81:ef:cf:3f:90:7d:4f:ad:bd:9f:b9:14:45:9d:6c:2a:5b:
         97:f5:4c:c5:6b:8b:58:9e:14:4d:38:4b:bc:16:76:2b:b8:89:
         df:bf:2d:e1:4d:35:37:bc:4a:0f:28:a2:ea:1a:b4:e0:f2:08:
         5e:5e:9f:95:f7:fb:e2:82:58:03:98:1d:59:55:d1:ff:20:f0:
         8a:e2:28:0f:51:49:0d:35:be:ce:88:07:3b:27:84:43:ee:29:
         53:9d:0d:4e:03:05:37:b5:d1:52:c2:43:27:ac:2c:8e:48:fb:
         33:9c:2e:60:d1:eb:a8:53:3d:d0:04:78:d5:e3:fc:c3:1a:b3:
         0b:3b:62:03:4f:6f:96:e3:4d:7a:38:56:d4:60:15:73:76:97:
         0b:ed:c3:b3:ca:8f:43:02:7b:0e:7c:41:d0:3a:1b:59:60:d6:
         2c:91:22:64:65:38:cc:16:e9:ba:0d:42:e5:74:3b:9f:d7:b2:
         28:ea:62:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org