Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6465303a3a2f34352d3435203d3e20323633333338.roa
File:                     323830343a313439343a6465303a3a2f34352d3435203d3e20323633333338.roa (raw, json)
Hash identifier:          aAcJCdp4niwSwEHR0xKsoDKAVVm4jfOWxGiLaPHFoOc=
Subject key identifier:   92:60:06:2A:70:C4:6E:FA:38:C7:54:92:3B:67:84:EA:EB:19:4E:EB
Certificate issuer:       /CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
Certificate serial:       77D3D06D5E4B4CE904249E2D5727C05BFD24B4D7
Authority key identifier: 7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6465303a3a2f34352d3435203d3e20323633333338.roa
Signing time:             Thu 16 May 2024 11:38:28 +0000
ROA not before:           Thu 16 May 2024 11:33:28 +0000
ROA not after:            Thu 15 May 2025 11:38:28 +0000
asID:                     263338
IP address blocks:        2804:1494:de0::/45 maxlen: 45

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl
                          rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 02:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:d3:d0:6d:5e:4b:4c:e9:04:24:9e:2d:57:27:c0:5b:fd:24:b4:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B463853EA4AC012BD9F3194CFA33AF32591DF0B
        Validity
            Not Before: May 16 11:33:28 2024 GMT
            Not After : May 15 11:38:28 2025 GMT
        Subject: CN=9260062A70C46EFA38C754923B6784EAEB194EEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:d5:70:a5:db:6f:3c:f0:6c:98:fb:ae:46:
                    12:04:62:33:c4:78:71:16:56:1d:12:0e:32:19:17:
                    72:75:37:bf:ee:61:d6:fa:ff:b3:91:50:50:fb:21:
                    26:18:25:4f:76:68:71:69:78:8c:ca:11:2d:ea:ca:
                    40:1d:69:8e:e6:a5:6e:6d:0c:a8:ec:7e:ae:02:c3:
                    46:bc:42:0e:2c:52:3d:d4:b7:39:fc:37:23:54:66:
                    43:e0:e9:e0:db:91:b7:34:89:04:f2:21:7e:13:3e:
                    94:b9:c2:8d:6f:fe:ae:43:78:13:0d:15:53:8a:3d:
                    87:83:06:23:19:bd:ce:ec:2b:57:32:d1:26:91:47:
                    5f:cc:0f:69:dd:ee:8e:1d:58:d6:49:86:81:78:60:
                    6f:6b:f8:44:32:f7:2e:2e:a7:2d:13:a7:bc:9f:73:
                    96:58:bb:e8:f3:9f:af:95:ad:c7:a0:80:4f:e4:5d:
                    20:e2:bd:d5:2a:a9:f9:25:6d:fb:82:cb:92:46:41:
                    7f:a5:12:06:b7:c5:e3:57:92:10:48:39:d0:6c:b4:
                    77:cd:8a:8a:d4:3d:33:3c:cb:08:bd:b1:c4:e0:18:
                    f7:b9:c7:c1:8f:cc:64:d6:65:8f:35:23:f5:b1:d2:
                    f2:2a:df:2a:65:eb:e0:25:84:07:8e:1f:42:c0:cf:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:60:06:2A:70:C4:6E:FA:38:C7:54:92:3B:67:84:EA:EB:19:4E:EB
            X509v3 Authority Key Identifier:
                keyid:7B:46:38:53:EA:4A:C0:12:BD:9F:31:94:CF:A3:3A:F3:25:91:DF:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B463853EA4AC012BD9F3194CFA33AF32591DF0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Avp9w8ghYcbVeDefvMDCChbYTGoepuXEnkYMqeQZP1PD/0/323830343a313439343a6465303a3a2f34352d3435203d3e20323633333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1494:de0::/45

    Signature Algorithm: sha256WithRSAEncryption
         6b:96:5e:27:bf:9d:5a:87:15:19:32:34:bf:9f:e2:48:99:2f:
         83:87:34:e5:fb:8e:8d:14:3a:4d:f3:94:47:5a:60:8d:52:44:
         ca:0c:70:80:17:f1:d8:83:2a:01:9b:58:2f:0b:bb:5e:64:52:
         c3:64:06:5c:22:59:47:4a:ae:f2:fc:09:9e:fd:30:00:09:61:
         07:29:92:00:e4:7b:ce:bc:93:14:52:88:5d:71:24:50:76:76:
         7d:72:30:a8:51:18:df:2a:a6:a5:9e:44:6f:ca:99:d1:ca:8d:
         35:18:5e:ee:d0:44:84:67:46:2e:91:61:21:44:9b:84:ed:3a:
         ee:b3:61:2a:93:e1:e5:5a:01:de:94:77:61:d2:ff:81:37:f7:
         ca:21:26:76:2c:4d:6d:5b:d1:8b:74:bf:3b:64:18:b6:0e:13:
         d3:6c:07:9a:09:df:8d:28:c8:f4:8d:17:be:a2:e1:a3:99:0b:
         d5:95:67:80:c8:5f:c6:0d:36:56:ce:07:73:f2:6b:df:eb:df:
         b5:f2:d7:03:0e:af:ad:bc:43:db:3a:e1:a7:c2:02:5e:a5:75:
         9b:80:29:3b:3f:65:fe:9a:c4:65:9a:cf:3a:2c:37:f5:be:99:
         88:0b:65:f6:7f:c9:84:f8:7a:09:17:38:59:c9:64:18:21:e2:
         65:45:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:20 2024 by rpki-client on console-fra.rpki-client.org