Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa
File:                     323830343a333762633a3a2f33322d3332203d3e20323636343333.roa (raw, json)
Hash identifier:          T0v9VCDeLdLJVwrgnn2LjVWM9w3e95fFBisjWyt0UDY=
Subject key identifier:   E2:46:F0:7D:04:80:3B:87:7B:CA:EA:88:80:F7:95:1F:19:A1:82:96
Certificate issuer:       /CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
Certificate serial:       75AF979B9BD20166D2ACFAD75AA78771CAD1144E
Authority key identifier: E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa
Signing time:             Mon 08 Jul 2024 18:44:18 +0000
ROA not before:           Mon 08 Jul 2024 18:39:18 +0000
ROA not after:            Mon 07 Jul 2025 18:44:18 +0000
asID:                     266433
IP address blocks:        2804:37bc::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl
                          rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 01:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:af:97:9b:9b:d2:01:66:d2:ac:fa:d7:5a:a7:87:71:ca:d1:14:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B0FA124B3B7D199E6A099F05777631A9F2C102
        Validity
            Not Before: Jul  8 18:39:18 2024 GMT
            Not After : Jul  7 18:44:18 2025 GMT
        Subject: CN=E246F07D04803B877BCAEA8880F7951F19A18296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:29:a1:1b:e9:af:c3:7c:a9:b3:2b:d6:a1:5a:
                    4e:96:17:c4:a0:5d:1a:0a:91:18:fa:46:10:47:37:
                    af:93:31:1a:65:27:cb:0f:aa:54:0e:a6:bf:60:2f:
                    98:da:d8:1a:c1:9f:26:db:9d:56:e2:ab:20:55:d6:
                    12:08:0d:bf:e2:64:8f:85:88:c8:39:43:19:3d:de:
                    cf:4a:2e:31:4f:3a:3c:95:4e:51:82:c6:74:61:a6:
                    54:74:ce:cc:c5:be:46:c7:6a:c3:32:55:31:7f:67:
                    89:84:11:7d:a3:95:e1:c7:83:db:0d:2f:0f:b5:ba:
                    de:3c:03:9e:34:37:78:d1:5b:f0:01:1f:6c:df:38:
                    6e:17:5b:6b:4f:01:05:82:43:a3:3f:67:bf:55:45:
                    39:15:f0:36:7c:49:3d:50:c2:fe:2b:85:9b:e8:7a:
                    bc:0a:ac:76:f9:8b:22:1b:7d:1a:40:ce:c9:62:ff:
                    5e:45:1c:e7:23:6b:28:93:af:a3:1e:12:03:35:e6:
                    85:fd:c8:ff:a0:23:e6:31:90:5b:dd:54:7f:1d:c5:
                    80:67:de:54:45:00:38:71:43:cc:cd:c2:a7:0a:d6:
                    5d:37:65:58:f6:e0:42:77:36:a9:ee:04:98:02:19:
                    4a:0c:b9:58:04:73:8d:05:59:7b:f1:c6:55:ea:00:
                    d2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:F0:7D:04:80:3B:87:7B:CA:EA:88:80:F7:95:1F:19:A1:82:96
            X509v3 Authority Key Identifier:
                keyid:E4:B0:FA:12:4B:3B:7D:19:9E:6A:09:9F:05:77:76:31:A9:F2:C1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/E4B0FA124B3B7D199E6A099F05777631A9F2C102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4B0FA124B3B7D199E6A099F05777631A9F2C102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/323830343a333762633a3a2f33322d3332203d3e20323636343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:65:f0:76:ef:2e:73:73:9c:51:62:f9:6c:37:7c:73:12:f3:
         08:fd:c0:8f:7f:12:22:66:e8:fd:3f:f5:30:e9:1c:9d:60:c0:
         37:9f:45:da:9a:60:67:b8:29:01:fe:62:f2:b0:a0:65:d8:4a:
         2a:aa:36:db:dc:04:81:d2:3b:07:3d:b9:8e:ec:a3:71:ab:33:
         61:1a:b5:e4:f0:ce:99:0c:fd:20:60:78:69:71:4f:80:0f:a6:
         1a:88:3c:5d:77:d5:49:1a:75:1d:c1:e6:b7:32:cb:f1:00:92:
         7e:0d:48:51:aa:42:5e:48:c5:e5:d1:f4:00:b2:7a:d2:2c:5d:
         ab:98:8f:95:94:48:95:2b:bc:1e:cd:d0:f3:20:32:36:62:42:
         a8:51:73:60:77:c4:43:9f:4e:86:e8:2f:e3:3a:86:0e:35:b3:
         c0:79:6d:1f:84:f6:9f:dd:a2:e4:cf:4f:a3:04:db:7f:b0:e8:
         6a:1d:70:62:7f:83:fa:45:a8:19:0d:06:d2:05:57:28:5a:0d:
         42:e9:44:39:b4:8b:b7:44:d0:ad:45:17:0b:71:2e:7d:67:5c:
         b7:80:c5:ac:c8:a9:56:0a:94:d4:ed:a6:60:94:24:a5:81:d6:
         5c:1e:ca:3e:7f:b1:ae:e8:6d:a0:e0:3b:cd:eb:a8:29:c3:d9:
         df:33:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 00:59:43 2024 by rpki-client on console-ams.rpki-client.org