Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6464383a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6464383a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          6SlUYV0l3OC79RhPo9VU93B+k1PyNS4M7Tu+4KY6ag0=
Subject key identifier:   AA:44:96:88:CA:B2:25:59:E6:D4:12:7E:D3:C8:99:C1:46:2A:64:0A
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       17DEC24914EB3D153DB993A0513EDE028BA776DB
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6464383a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:25 +0000
ROA not before:           Thu 16 May 2024 11:33:25 +0000
ROA not after:            Thu 15 May 2025 11:38:25 +0000
asID:                     263338
IP address blocks:        2804:1494:dd8::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:de:c2:49:14:eb:3d:15:3d:b9:93:a0:51:3e:de:02:8b:a7:76:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:25 2024 GMT
            Not After : May 15 11:38:25 2025 GMT
        Subject: CN=AA449688CAB22559E6D4127ED3C899C1462A640A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bd:a8:26:38:93:3f:82:5c:ec:84:9c:0d:b5:
                    d7:aa:5a:d5:c6:1e:f2:b9:bb:02:b9:00:da:be:9a:
                    9c:fd:02:07:df:c6:30:3a:81:a6:2b:26:c1:15:1f:
                    d2:ed:27:c2:12:9b:5f:03:63:2b:59:dc:3f:6b:a3:
                    29:62:5d:06:b7:48:fb:e2:c5:45:d4:f5:ad:db:98:
                    7f:a0:c4:04:94:c0:f3:29:48:c8:61:2e:60:30:9d:
                    79:30:d5:1f:02:7d:77:bb:a4:23:58:67:f2:6d:c8:
                    6f:ea:af:a6:d1:6c:84:c3:7f:6a:c1:fc:03:92:10:
                    04:ec:68:66:0d:40:a7:7d:54:1b:e4:b7:b5:f9:3a:
                    51:fd:49:43:d3:ab:8e:df:84:a0:37:97:bc:04:40:
                    ba:88:8d:d3:2a:9a:e7:ec:51:c0:be:d1:db:ca:b0:
                    30:fb:f9:c5:83:af:5b:79:0a:96:bd:2e:70:05:4b:
                    44:76:4d:f8:44:45:ea:2e:29:7f:cb:22:68:ad:95:
                    8b:3c:c8:13:5e:fb:81:f9:2e:75:89:44:28:14:ad:
                    80:14:16:a7:64:a2:2b:37:cf:e2:94:02:59:4a:79:
                    67:e6:3e:e3:4a:b9:2f:6e:d5:45:d2:c8:19:a9:a1:
                    f1:6b:e4:66:0c:f0:bc:ea:75:0b:0b:2e:25:cb:5e:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:44:96:88:CA:B2:25:59:E6:D4:12:7E:D3:C8:99:C1:46:2A:64:0A
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6464383a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:dd8::/45

    Signature Algorithm: sha256WithRSAEncryption
         6d:03:fe:95:cc:9e:87:21:5b:52:52:61:8b:97:27:06:ec:3f:
         9c:c1:9f:ad:f0:16:86:d0:4d:45:71:d0:2e:3d:a3:df:b2:56:
         09:35:7a:0a:47:a5:a4:95:f4:7f:f6:37:44:2b:4c:7f:16:8d:
         11:84:a0:cf:66:d8:3d:ff:d2:dc:78:46:18:c3:e1:a7:19:4c:
         4b:42:4c:3d:8d:0f:d9:e8:34:ae:0d:ab:ce:5c:f9:2b:a0:97:
         b1:5d:d2:6f:09:f1:3e:d4:7b:33:d7:20:eb:c3:95:e2:b6:48:
         a6:67:e2:3b:a4:40:a7:87:95:8a:88:11:ec:1d:56:56:f8:6d:
         27:eb:b8:ab:51:01:a2:85:ff:42:2e:d8:c9:8f:fd:42:9d:52:
         a3:42:98:e5:d0:2b:42:5d:58:4f:ca:2a:8b:3a:c0:a6:87:88:
         72:11:f1:b9:0c:94:29:f9:be:2c:02:58:ec:e4:13:36:31:ed:
         76:26:60:63:ba:f8:d2:dc:dd:c6:63:f8:f0:6c:98:d4:8a:5e:
         48:ec:5b:fc:f1:f5:f5:62:84:2f:9f:0e:25:56:35:68:c4:12:
         ac:dc:50:ca:9e:bd:93:b8:58:69:1b:cf:07:b8:72:7c:52:3b:
         19:b1:31:2e:90:68:a9:74:fd:df:c2:17:c0:e7:5f:7b:f2:1b:
         6e:84:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:26 2024 by rpki-client on console-ams.rpki-client.org