Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa
File:                     323830343a333131383a3a2f33322d3438203d3e20323634393932.roa (raw, json)
Hash identifier:          kmDAeYfaBZWwMgMPYnb1+G48HzLFnrdOh+S91w6mHac=
Subject key identifier:   EE:62:C2:A1:6B:03:15:15:D9:9A:71:9D:61:79:D5:E9:D2:14:9E:FC
Certificate issuer:       /CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
Certificate serial:       0C63E60A87290FED204A004AEF952866FE0452AA
Authority key identifier: DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa
Signing time:             Thu 04 Apr 2024 03:01:18 +0000
ROA not before:           Thu 04 Apr 2024 02:56:18 +0000
ROA not after:            Thu 03 Apr 2025 03:01:18 +0000
asID:                     264992
IP address blocks:        2804:3118::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl
                          rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 20:56:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:63:e6:0a:87:29:0f:ed:20:4a:00:4a:ef:95:28:66:fe:04:52:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F
        Validity
            Not Before: Apr  4 02:56:18 2024 GMT
            Not After : Apr  3 03:01:18 2025 GMT
        Subject: CN=EE62C2A16B031515D99A719D6179D5E9D2149EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:9e:7b:d8:c3:24:1c:0a:d3:ad:4d:4b:4a:
                    e3:8f:e2:39:c3:37:b6:7f:9a:84:53:8c:06:bd:39:
                    dd:d5:27:00:e3:e7:58:e9:c6:0c:e5:d0:ff:eb:af:
                    23:db:85:fa:be:07:58:99:8a:cd:22:76:db:9b:89:
                    23:d8:a0:77:e5:05:c5:fb:cc:7c:f1:96:d9:7d:bb:
                    dc:aa:c7:11:e6:43:76:72:32:68:17:dd:ce:5d:28:
                    6d:be:2b:6b:1e:2e:1e:fe:eb:6b:a2:66:c6:89:32:
                    d6:2f:b1:55:b7:c8:cb:7f:64:3c:87:f3:a4:36:ab:
                    e8:ca:4d:0a:62:1d:3b:44:a1:42:c8:96:36:0c:2e:
                    bb:29:57:bf:68:82:ad:cf:d7:9a:cc:a5:cc:75:42:
                    c6:b3:a0:ea:15:19:37:0d:cc:57:94:4c:e9:12:d8:
                    eb:35:3e:de:55:21:2d:c0:1b:67:41:f2:76:09:b2:
                    42:75:17:27:a2:91:11:28:4f:d4:e8:9f:b1:50:bf:
                    50:3b:6a:46:d9:e4:9d:df:08:9a:e4:bb:e8:40:a6:
                    15:fe:4f:52:24:e3:98:64:0d:81:0c:9d:9a:84:f8:
                    0a:f5:96:3f:ad:05:bc:37:4c:4d:39:ea:1b:f1:54:
                    e7:cf:35:73:27:2c:20:ae:12:23:29:eb:ae:b5:3c:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:62:C2:A1:6B:03:15:15:D9:9A:71:9D:61:79:D5:E9:D2:14:9E:FC
            X509v3 Authority Key Identifier:
                keyid:DA:48:CA:C1:AD:92:76:8B:5C:BC:61:21:9D:BA:6F:EB:CD:8A:22:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DA48CAC1AD92768B5CBC61219DBA6FEBCD8A223F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B4Nos3KpnfZjRgiqdjsBvFCr39jfK2vKiemW1PxHZhNX/1/323830343a333131383a3a2f33322d3438203d3e20323634393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3118::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:4a:03:e9:03:81:a1:56:6a:b6:a3:8b:6d:d6:30:f3:02:f9:
         5a:ad:15:b2:5a:cf:44:a5:d6:d3:25:5b:ee:65:8d:43:34:85:
         6e:b7:56:ec:27:3d:0b:06:ac:a3:64:14:c5:bd:bb:df:9c:11:
         8b:fd:09:0a:3b:8a:ca:5c:1d:1f:3f:eb:d6:ea:d0:3d:aa:11:
         8d:c3:61:a6:0a:6a:bc:3f:6e:31:4e:c4:9b:87:52:d0:1b:8c:
         fd:db:84:ca:c7:1d:2d:96:ec:62:21:03:e9:79:78:33:40:03:
         d1:c5:dc:5b:25:30:dd:b1:d0:9b:6a:92:f5:a4:71:0b:73:7b:
         e6:ba:1f:3a:c0:4b:78:eb:84:ad:76:a4:95:90:40:e3:ce:de:
         d2:c6:a3:c3:05:36:c3:57:1e:ac:bc:b6:07:cc:94:84:c0:40:
         15:ea:71:ea:81:f8:76:96:a9:da:cf:45:9f:44:80:d3:0c:59:
         a5:86:58:35:28:2a:f9:b4:14:cf:73:b2:ce:90:ef:f7:f6:e7:
         3c:ea:bf:a0:2b:1b:d0:a5:93:7b:4c:fc:d4:aa:bf:c2:de:4b:
         fc:46:0a:49:d4:70:25:65:cf:ae:f8:52:dd:b2:6c:b0:88:8c:
         f0:f6:4b:d8:82:28:83:c8:05:9d:94:2f:98:fc:a9:d0:41:87:
         a7:99:51:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:07 2024 by rpki-client on console-ams.rpki-client.org