Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6438383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6438383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          x77W9mt+tMGaBYR3ff2xNyOsaNmVFZ6CdvufaC7d5gc=
Subject key identifier:   54:36:CB:53:B5:06:2C:D0:09:8B:1A:6B:F3:64:0F:FF:C0:B0:63:7F
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       226FEED28145AC70EEC3298AD2A73CEAB395642B
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6438383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:22 +0000
ROA not before:           Thu 16 May 2024 11:33:22 +0000
ROA not after:            Thu 15 May 2025 11:38:22 +0000
asID:                     263338
IP address blocks:        2804:1494:d88::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6f:ee:d2:81:45:ac:70:ee:c3:29:8a:d2:a7:3c:ea:b3:95:64:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:22 2024 GMT
            Not After : May 15 11:38:22 2025 GMT
        Subject: CN=5436CB53B5062CD0098B1A6BF3640FFFC0B0637F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7a:2a:4d:9a:42:53:46:bb:27:dc:3e:9c:74:
                    a2:e0:15:f7:63:ff:2a:c4:61:2c:01:22:fa:92:62:
                    70:7e:0e:8e:ed:79:ef:6b:6d:ea:34:83:71:28:d2:
                    12:5e:7d:58:e7:61:54:60:b2:fb:be:cf:04:d2:c9:
                    03:3b:82:fb:68:db:48:c9:94:e8:b8:04:46:b3:2e:
                    29:88:09:9d:10:de:2e:1c:07:78:d1:88:02:13:0a:
                    4b:b4:da:91:0e:2e:8f:82:71:82:29:b8:58:93:ab:
                    41:cd:2c:e9:d1:5b:db:29:d0:0b:dd:a4:33:d8:b5:
                    99:f0:b2:6f:51:31:1f:5b:df:3c:7b:64:3a:99:fb:
                    68:81:47:dc:7e:f7:d7:d9:bc:73:de:f5:8e:77:cd:
                    36:de:49:0c:d2:fa:bb:d0:69:b5:f2:bb:ce:fb:09:
                    c6:70:35:6b:76:d5:fc:ac:3a:f8:08:3c:c0:bd:1d:
                    20:71:2b:6f:f0:55:7a:c2:2d:19:d3:12:0d:a4:0f:
                    89:5c:da:02:a5:74:08:e8:b3:45:5d:6b:c7:b9:0c:
                    ee:bc:8f:84:be:0a:ed:09:87:6e:4b:15:09:39:7b:
                    48:0e:88:33:76:d3:a5:67:fa:9b:86:ca:e8:38:c1:
                    9b:25:9a:c9:70:64:c4:a2:01:ac:30:c7:40:6e:ca:
                    8c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:36:CB:53:B5:06:2C:D0:09:8B:1A:6B:F3:64:0F:FF:C0:B0:63:7F
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6438383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:d88::/45

    Signature Algorithm: sha256WithRSAEncryption
         48:02:00:db:65:5e:66:c1:90:52:e6:68:9d:9d:9e:fe:bb:1b:
         08:97:5c:cf:bf:a6:75:eb:68:34:ed:d0:d9:26:fd:02:97:06:
         62:88:ea:9d:0d:40:f9:31:33:21:66:5b:70:3e:d0:6e:7b:af:
         52:4b:40:03:b8:83:53:4e:70:c2:8d:33:d9:da:df:d5:83:46:
         65:8f:36:4c:f1:ca:cc:d8:80:07:36:16:cd:b0:1c:10:da:f4:
         1a:a0:28:25:aa:87:1d:f1:9b:cc:dd:22:95:9d:37:8e:d2:61:
         5e:0c:cd:1c:b3:d8:26:70:f7:1f:9c:74:4e:42:1f:ad:5a:6c:
         64:2d:4e:40:b5:91:8a:3e:64:b1:6b:de:86:a6:86:26:37:e1:
         73:9c:d0:2f:1f:32:e5:03:af:34:c5:ca:e5:84:36:63:26:48:
         89:69:89:f6:05:d4:89:23:6d:e6:03:84:6e:11:f1:55:85:2c:
         33:5e:ae:b5:4a:a7:ee:eb:ec:cd:39:9c:8d:34:4c:94:bd:21:
         db:38:c9:54:11:09:33:f8:c3:c5:63:41:a4:f9:c0:c6:e1:aa:
         2c:cb:06:47:1b:4e:7a:85:be:8e:1b:c2:16:fe:f5:93:da:d5:
         dc:b6:ce:d1:9a:ce:9e:34:f6:33:29:a7:ba:07:25:13:28:0b:
         37:9c:98:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org