Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/323830343a363934303a3a2f33322d313238203d3e20323730323538.roa
File:                     323830343a363934303a3a2f33322d313238203d3e20323730323538.roa (raw, json)
Hash identifier:          0s8eIx6gi1Zb7jnYy5djWwdMcep15IdlVoLAHl5MmzY=
Subject key identifier:   18:B2:13:E5:D9:2E:A8:DB:33:E6:78:CB:0B:6B:1B:FF:CA:6B:1F:37
Certificate issuer:       /CN=458D008CBA36E5598B2ECD5B0DF5A059D8272B93
Certificate serial:       47A876B5D561032DF02F7D433288A5FEB05577BC
Authority key identifier: 45:8D:00:8C:BA:36:E5:59:8B:2E:CD:5B:0D:F5:A0:59:D8:27:2B:93
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/323830343a363934303a3a2f33322d313238203d3e20323730323538.roa
Signing time:             Thu 04 Apr 2024 13:24:12 +0000
ROA not before:           Thu 04 Apr 2024 13:19:12 +0000
ROA not after:            Thu 03 Apr 2025 13:24:12 +0000
asID:                     270258
IP address blocks:        2804:6940::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.crl
                          rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 20:15:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:a8:76:b5:d5:61:03:2d:f0:2f:7d:43:32:88:a5:fe:b0:55:77:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458D008CBA36E5598B2ECD5B0DF5A059D8272B93
        Validity
            Not Before: Apr  4 13:19:12 2024 GMT
            Not After : Apr  3 13:24:12 2025 GMT
        Subject: CN=18B213E5D92EA8DB33E678CB0B6B1BFFCA6B1F37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7e:18:33:0e:46:c2:2d:1e:af:42:4e:76:91:
                    9c:33:88:9a:39:10:a8:f4:e9:1a:14:5f:3c:4a:f6:
                    25:9e:7e:7b:73:24:09:1e:31:47:f1:cd:b5:f3:9c:
                    26:c6:0c:98:fb:3d:44:4b:fe:8e:61:5a:75:2e:0a:
                    f7:2c:2f:2d:c7:a6:6a:85:94:23:7a:de:c0:da:72:
                    77:40:c3:7b:48:6d:df:31:4b:1e:05:e5:f8:f1:d4:
                    03:53:3e:ca:42:1e:8b:bf:dd:9d:9c:98:d4:30:9c:
                    64:92:03:8b:53:2a:91:d7:02:76:30:d6:40:b4:8f:
                    fe:30:62:16:f6:18:e8:6b:06:b6:1a:cb:2f:ff:64:
                    93:29:96:4e:08:dd:1f:37:f8:f6:93:36:60:4d:68:
                    6d:c5:43:fa:30:71:de:bc:93:8b:9d:11:c4:3b:bb:
                    f7:62:75:c0:29:bf:56:48:4d:bb:db:73:8a:59:76:
                    39:52:6c:14:10:96:7d:57:0f:70:37:32:fb:47:45:
                    48:e6:e4:2a:08:8b:3b:fe:ac:72:7c:20:2d:17:58:
                    54:ed:55:39:4f:01:16:a3:d9:24:34:34:08:62:fb:
                    d6:e7:06:e9:c8:dd:2f:d8:28:8c:36:4d:02:41:a6:
                    f9:26:fe:3d:76:7d:83:c0:5e:1a:5f:41:7d:be:5d:
                    14:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B2:13:E5:D9:2E:A8:DB:33:E6:78:CB:0B:6B:1B:FF:CA:6B:1F:37
            X509v3 Authority Key Identifier:
                keyid:45:8D:00:8C:BA:36:E5:59:8B:2E:CD:5B:0D:F5:A0:59:D8:27:2B:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/458D008CBA36E5598B2ECD5B0DF5A059D8272B93.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BSQTFhFKpQ5UHss8sPDTeUhZNwWA9DvVEeYcHu4FDEds/1/323830343a363934303a3a2f33322d313238203d3e20323730323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6940::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:c0:80:3f:e0:90:2b:43:67:6d:d7:46:26:2b:cf:14:7a:25:
         54:54:a1:ad:a0:94:51:bf:d0:61:96:c1:16:52:fb:ac:a2:01:
         4c:e0:54:c9:61:3d:98:34:84:0e:be:81:85:3a:f1:0a:09:e2:
         bf:d7:d9:d6:f7:e9:ff:d1:4b:d3:91:e4:b3:ad:ea:ef:ec:1f:
         ea:a9:71:1b:fa:43:40:d3:55:57:1d:68:24:a9:b0:3a:5b:d1:
         45:56:4f:3b:75:34:d8:45:6c:79:14:2a:56:96:fd:16:fd:01:
         62:86:bf:63:6f:32:d4:7e:d3:ae:11:e0:30:62:97:7c:c0:e8:
         7d:83:40:1b:74:80:1b:5d:9c:ae:b8:41:86:09:b2:d4:b1:f2:
         38:0c:55:80:77:5e:16:13:1e:e0:0f:20:8e:11:70:e5:8e:12:
         d1:61:84:b3:d3:46:09:c1:1c:b4:52:8d:87:a0:44:03:f2:8e:
         64:0c:5b:5b:a7:59:51:5e:a2:de:af:a0:ac:08:33:d3:65:92:
         8f:f6:cd:8e:42:50:67:3a:4e:e7:92:22:cf:2f:82:9b:02:1a:
         6e:cf:d2:ae:cb:b0:45:28:87:85:e7:dc:e6:bd:84:df:ed:28:
         ca:4d:c4:9f:6e:46:16:87:f4:28:4b:96:5a:2c:d7:cd:d8:8b:
         da:fd:45:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 21:05:16 2024 by rpki-client on console-ams.rpki-client.org