Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/323830343a343739303a3a2f33322d313238203d3e20323637303632.roa
File:                     323830343a343739303a3a2f33322d313238203d3e20323637303632.roa (raw, json)
Hash identifier:          jIFXQa3ZOxh83eOTc8itH5RAfVoEjNDgcF6QVDO7d1k=
Subject key identifier:   4E:05:CB:63:10:E2:EE:61:69:1D:9D:B4:35:A2:F4:C3:36:95:79:BC
Certificate issuer:       /CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
Certificate serial:       09C4702B281DE58553209A5C9A0A002263CB5F7E
Authority key identifier: 8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/323830343a343739303a3a2f33322d313238203d3e20323637303632.roa
Signing time:             Thu 04 Apr 2024 10:37:17 +0000
ROA not before:           Thu 04 Apr 2024 10:32:17 +0000
ROA not after:            Thu 03 Apr 2025 10:37:17 +0000
asID:                     267062
IP address blocks:        2804:4790::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.crl
                          rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 02:22:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:c4:70:2b:28:1d:e5:85:53:20:9a:5c:9a:0a:00:22:63:cb:5f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5
        Validity
            Not Before: Apr  4 10:32:17 2024 GMT
            Not After : Apr  3 10:37:17 2025 GMT
        Subject: CN=4E05CB6310E2EE61691D9DB435A2F4C3369579BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5f:62:13:9e:6c:6b:e2:d2:be:40:ca:e1:94:
                    ba:67:28:47:86:90:39:3d:72:6a:83:c0:6a:42:9f:
                    90:98:46:dd:51:e3:fc:25:74:1f:40:c9:64:04:29:
                    95:a4:54:6c:c4:6c:f0:2c:0b:d4:fc:71:e3:17:7a:
                    1d:dd:0b:1f:3c:36:88:9f:f6:00:b5:6a:05:06:6e:
                    3b:86:13:df:c6:c9:5a:93:3f:a5:82:7a:2f:b8:84:
                    60:96:90:75:a7:1f:3d:c2:25:12:c1:a5:cc:6e:5d:
                    6e:58:73:ae:a1:61:45:21:3a:c7:25:b9:93:89:21:
                    27:23:e2:ae:39:17:f6:fd:11:84:d0:0a:23:58:01:
                    94:fc:e2:13:31:86:79:71:f1:be:6a:fe:8b:a9:e7:
                    f3:fd:60:54:0d:2e:a3:71:af:48:7b:00:c7:fc:3d:
                    7f:fa:bb:be:4f:2f:57:58:ce:4c:b8:94:0f:3e:fb:
                    da:89:5f:7b:c7:a7:a6:c1:fb:d4:13:c5:ae:24:34:
                    b8:bb:4e:36:17:9a:41:62:9a:09:4b:73:fa:fe:0a:
                    d5:98:cd:39:f1:ca:82:fe:85:13:0c:86:18:24:0e:
                    cd:13:6c:2e:98:6e:ba:9a:cf:33:2d:f9:eb:16:ab:
                    9b:9a:cc:ad:65:60:d2:b8:87:dc:0b:94:47:9b:66:
                    4f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:CB:63:10:E2:EE:61:69:1D:9D:B4:35:A2:F4:C3:36:95:79:BC
            X509v3 Authority Key Identifier:
                keyid:8D:1A:F9:C9:91:F2:66:97:CD:C4:A1:CD:B5:E5:34:2B:F9:C8:E1:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D1AF9C991F26697CDC4A1CDB5E5342BF9C8E1C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B38JVmzAZPbtnHax1ECvCk5eYgBgkGS1qYgBXZdPVzUv/1/323830343a343739303a3a2f33322d313238203d3e20323637303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4790::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:d4:d5:2c:23:c6:a2:4a:ad:2b:2e:38:85:6c:4b:19:18:47:
         86:03:66:86:1c:44:8d:f0:b3:d9:4d:80:4c:70:fd:02:6f:03:
         04:1e:c2:6c:b1:65:87:6b:55:7e:7e:38:43:c8:e6:9f:0c:64:
         fa:5e:87:37:1e:91:94:d3:51:46:ce:f6:ef:8a:c6:ca:ce:5d:
         83:eb:f6:e7:47:75:c8:81:8c:f0:c4:72:af:57:c9:d6:86:b3:
         5d:f4:10:c7:a8:a8:66:48:da:89:1f:e1:a2:9e:3f:61:7b:f0:
         24:29:45:0a:ae:b1:50:0e:71:be:8f:7a:24:97:3f:53:1c:64:
         7b:5d:f5:10:90:d7:4c:d2:25:03:b3:37:20:5d:72:9b:6c:98:
         6d:49:eb:72:38:df:18:3d:ce:2a:e7:b5:d4:bb:cc:91:46:db:
         4e:c0:ab:84:9a:43:a6:fb:bc:36:81:76:c2:d7:75:2a:17:aa:
         26:3a:57:d2:44:9c:7c:3a:0a:3a:bc:86:78:b8:70:c9:db:80:
         87:4e:81:27:00:97:3f:6e:cf:b2:f6:6f:8f:ff:cb:ef:34:57:
         e5:01:5a:62:0a:86:fb:51:97:4e:08:94:46:4e:3c:06:d6:1c:
         fa:b8:3f:e1:a3:7e:4a:76:a8:0c:e4:b5:e5:95:d8:ab:b2:9e:
         ca:a1:db:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 03:28:43 2024 by rpki-client on console-ams.rpki-client.org