Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6439383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6439383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          g+VifvuQ+kzfxdHwnkS+aCj9OapNEJFJvDbAsqDfoig=
Subject key identifier:   23:C9:74:BC:3A:36:18:81:0C:3F:4D:8A:21:81:75:35:1B:26:F2:48
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       04E2B336EE30F2A14CD0A4DA083E3D15EE475E09
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6439383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:21 +0000
ROA not before:           Thu 16 May 2024 11:33:21 +0000
ROA not after:            Thu 15 May 2025 11:38:21 +0000
asID:                     263338
IP address blocks:        2804:1494:d98::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:e2:b3:36:ee:30:f2:a1:4c:d0:a4:da:08:3e:3d:15:ee:47:5e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:21 2024 GMT
            Not After : May 15 11:38:21 2025 GMT
        Subject: CN=23C974BC3A3618810C3F4D8A218175351B26F248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:e8:d7:f4:dc:d2:dc:7e:4b:d7:d4:09:16:
                    44:6b:fc:a2:f3:73:7c:0a:a9:85:be:05:92:a0:dc:
                    b5:0c:09:5a:25:7f:dc:b0:05:3f:c3:50:a0:b2:53:
                    21:79:00:fb:54:46:51:39:da:d4:9c:89:aa:d9:22:
                    32:89:88:44:5a:20:23:c1:5c:b3:32:77:d4:4f:ab:
                    42:10:5e:a3:a8:85:91:21:6c:6c:da:c2:08:e0:52:
                    e3:01:83:e8:77:e8:44:ec:84:ff:9b:f2:ae:2a:44:
                    46:89:68:0a:05:52:c8:49:f7:98:24:14:96:88:de:
                    2b:d0:38:8c:91:0a:9a:81:ff:a7:c0:41:67:87:21:
                    33:60:d1:0f:ab:00:a9:34:d3:61:91:ca:26:d1:a5:
                    5b:39:e2:72:af:b9:69:b5:2e:c9:c4:73:85:0b:12:
                    af:1d:39:ae:94:95:67:b2:e8:f9:21:e2:03:7a:83:
                    23:41:6c:5b:0e:74:c1:ee:e1:ef:ce:92:09:45:ea:
                    45:e7:b4:eb:17:e8:fb:5b:4d:26:7e:df:e4:72:4b:
                    8f:c1:f7:eb:3b:c5:73:c5:37:dc:c2:e5:dd:c9:d0:
                    79:ce:eb:94:ef:f7:26:3d:f0:ad:b5:fa:a8:5c:c3:
                    08:c0:5d:a7:5d:8d:93:94:54:33:50:ea:e6:07:a4:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C9:74:BC:3A:36:18:81:0C:3F:4D:8A:21:81:75:35:1B:26:F2:48
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6439383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:d98::/45

    Signature Algorithm: sha256WithRSAEncryption
         35:23:d0:10:c5:63:c7:4a:d4:dd:51:cd:a4:a8:20:54:40:58:
         ba:18:8b:89:09:a9:bb:78:12:34:96:14:c0:a1:53:a8:47:9d:
         3a:57:cb:e8:3f:ab:29:6c:89:3c:42:94:c9:1b:42:e3:62:02:
         d2:c0:8e:6c:97:2e:42:05:15:d2:ba:64:c5:1a:0e:24:d5:56:
         45:cf:dd:eb:e3:94:c8:69:0c:c5:13:fd:e7:ff:a1:41:5e:e2:
         68:28:57:c8:1f:fd:3d:88:64:d7:c2:c3:ae:0e:de:65:ad:93:
         88:17:68:98:44:57:0e:0d:43:ac:ad:85:5f:63:42:8a:5f:60:
         38:b3:40:e4:6a:51:aa:85:8e:5b:52:ae:20:71:a2:b9:73:f6:
         be:8b:75:be:78:d4:95:6b:1b:24:8c:bd:d6:c1:30:d9:25:88:
         4f:02:62:53:36:35:ac:36:b1:60:b1:d1:db:4c:d3:ad:0b:f7:
         81:60:05:e9:38:b5:c5:af:42:ea:25:da:9b:6b:f1:9d:d9:8d:
         74:29:15:9f:23:02:8f:ea:23:de:c8:fd:7d:44:99:dd:3c:5c:
         23:88:2b:f1:1f:d2:08:0f:77:9d:c7:09:cd:a0:e0:d3:f6:00:
         b3:6a:6a:8d:9a:4e:eb:9b:bc:fe:63:73:a2:aa:1b:4a:59:3a:
         00:d8:5f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org