Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6462383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6462383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          Vjl7IxwIes3vbXj8jsL4FFRQfvZbiU4FrsDcYyAgcQY=
Subject key identifier:   82:45:8C:7E:44:76:5E:09:96:8B:FB:F3:3D:9F:14:4A:B5:2E:23:07
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       3A873A14908DB2CB6CDC424C4114E758BABE0010
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6462383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:29 +0000
ROA not before:           Thu 16 May 2024 11:33:29 +0000
ROA not after:            Thu 15 May 2025 11:38:29 +0000
asID:                     263338
IP address blocks:        2804:1494:db8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 19:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:87:3a:14:90:8d:b2:cb:6c:dc:42:4c:41:14:e7:58:ba:be:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:29 2024 GMT
            Not After : May 15 11:38:29 2025 GMT
        Subject: CN=82458C7E44765E09968BFBF33D9F144AB52E2307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:82:03:12:e9:17:be:9c:a1:63:2a:64:32:
                    7d:5f:d6:17:94:fa:c5:42:eb:14:4a:bd:4d:86:c0:
                    fc:d6:1a:2c:ee:7b:92:75:96:f6:0c:1d:8d:99:87:
                    f5:4c:87:8f:7c:70:4e:5b:14:51:81:87:33:3b:1a:
                    cb:38:b8:6d:35:28:4a:52:95:7c:c6:d7:c3:47:20:
                    36:95:ed:29:66:8e:a5:2a:ce:6d:70:0d:7d:62:7c:
                    51:1b:9d:6b:02:a3:b6:82:65:62:80:ba:9d:89:16:
                    82:8f:d4:68:28:54:03:be:a6:68:ad:cc:7e:3e:d9:
                    c4:f2:db:65:bd:7e:af:2b:47:bd:4a:d1:8e:d0:55:
                    06:5e:96:01:ff:3f:30:74:2f:a0:a1:db:ed:38:69:
                    31:fd:04:ef:a8:67:05:69:2d:c3:ad:1d:d4:cf:9a:
                    23:63:dc:9b:74:61:00:d0:93:16:10:73:be:74:87:
                    ae:9f:5b:cc:39:08:6d:1f:99:16:90:40:96:35:61:
                    2e:25:83:b2:83:db:9d:7f:a6:31:16:ec:3f:8a:4a:
                    c4:a4:57:8f:48:da:d2:6f:bc:e1:56:0c:ba:35:04:
                    6b:b4:0c:03:e4:7a:6d:dc:1a:75:36:f4:3a:14:75:
                    a5:54:33:2c:0f:fc:a6:02:e0:89:c1:00:dd:da:94:
                    79:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:45:8C:7E:44:76:5E:09:96:8B:FB:F3:3D:9F:14:4A:B5:2E:23:07
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6462383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:db8::/45

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:38:ed:f7:4e:eb:c5:3d:e8:13:e0:ea:92:6c:f5:79:ce:
         a3:89:e7:c9:38:22:d8:f4:92:cc:65:14:90:8a:9b:78:cf:c7:
         1a:8e:c0:b0:3b:2d:52:30:52:e1:f4:ab:67:a4:10:9b:6d:cb:
         7e:4c:c6:3c:76:c3:fd:c2:20:7b:48:78:85:11:53:4a:bc:5e:
         d5:a1:b3:7b:d0:8c:d6:f0:9a:d8:f7:c2:92:f2:d5:53:7b:c0:
         a3:9d:1b:d5:6d:79:7c:00:8a:cd:90:bc:5b:4b:53:9c:1c:7f:
         99:a8:9e:29:1e:99:5c:e5:9f:31:5e:26:32:f0:65:b5:8e:33:
         e1:ff:57:f6:6f:99:f0:8d:c6:60:d4:4b:d2:05:6c:cd:ca:1e:
         bf:4e:d5:59:d9:4e:53:4a:0c:9f:a5:fc:d8:40:b7:66:f9:09:
         b0:7d:52:31:c1:31:a1:f7:92:0e:87:a2:21:73:02:8e:7e:a6:
         2f:67:8c:43:25:82:88:2c:a2:95:cb:c2:97:99:f5:b3:6c:f8:
         7b:51:a2:4b:3e:83:5f:32:f2:fe:9f:0d:6f:6a:92:19:fb:04:
         b7:30:1d:8e:67:da:b1:ed:7d:a5:6a:96:1d:1b:08:68:88:24:
         d6:fb:e8:93:67:91:02:65:e4:87:90:62:1c:05:2b:ea:c5:33:
         d2:b9:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:17 2024 by rpki-client on console-ams.rpki-client.org