Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
File:                     323830343a343331633a3a2f33322d313238203d3e20323637353439.roa (raw, json)
Hash identifier:          JFwDxbQdrrQzihnq13wfmQugkwmK8IxZ6UjDgi3OEYY=
Subject key identifier:   2A:4C:14:C8:56:3A:AD:7F:C4:7B:E6:D5:25:E9:09:65:4C:8F:65:34
Certificate issuer:       /CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
Certificate serial:       458151A0C53167B5A3528B051B551FDE92C5CE11
Authority key identifier: 94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa
Signing time:             Fri 05 Apr 2024 01:23:06 +0000
ROA not before:           Fri 05 Apr 2024 01:18:06 +0000
ROA not after:            Fri 04 Apr 2025 01:23:06 +0000
asID:                     267549
IP address blocks:        2804:431c::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl
                          rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 15:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:81:51:a0:c5:31:67:b5:a3:52:8b:05:1b:55:1f:de:92:c5:ce:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942F2D5AE55B7215DFCCA79C552D223D29B71DFF
        Validity
            Not Before: Apr  5 01:18:06 2024 GMT
            Not After : Apr  4 01:23:06 2025 GMT
        Subject: CN=2A4C14C8563AAD7FC47BE6D525E909654C8F6534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:ed:80:1f:e3:8e:d5:5a:2f:24:17:31:22:
                    20:10:46:02:02:64:ca:89:0a:ee:2d:cf:26:c5:e5:
                    ca:9b:3a:53:71:44:03:0d:88:a8:44:a1:84:a2:39:
                    0f:ae:85:98:43:ed:59:71:1b:79:61:9e:00:cb:9b:
                    b7:7d:dc:91:e5:a4:56:86:92:10:97:02:21:9c:67:
                    ea:4e:0c:45:da:cb:0a:96:4f:6d:b2:9a:19:99:10:
                    a7:e9:68:8d:31:5d:cf:3d:a0:df:58:95:ee:be:28:
                    6a:38:66:d3:e6:74:15:6b:da:e8:48:11:57:5f:19:
                    03:ae:56:79:f4:ee:64:c5:cd:d9:05:15:92:3c:b0:
                    95:95:2f:cf:d7:01:42:95:92:6d:2c:e5:a3:e8:1f:
                    ac:3a:2b:c1:d7:70:d4:25:31:ed:aa:60:7a:eb:83:
                    fd:39:30:5e:9f:d1:86:4b:33:a1:e9:b7:ac:18:0e:
                    e0:47:70:57:e8:d8:91:c6:8e:50:1e:b3:8e:26:6a:
                    ba:2a:9f:99:19:03:d8:18:c5:4e:86:22:27:51:eb:
                    ba:ad:98:2b:68:f9:c4:3f:12:5a:7e:88:31:47:a2:
                    70:09:58:bc:98:ae:28:0b:f2:da:d0:60:4f:2c:c5:
                    0c:d3:9c:00:31:50:7d:9f:66:e5:af:25:6d:a3:fa:
                    0d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4C:14:C8:56:3A:AD:7F:C4:7B:E6:D5:25:E9:09:65:4C:8F:65:34
            X509v3 Authority Key Identifier:
                keyid:94:2F:2D:5A:E5:5B:72:15:DF:CC:A7:9C:55:2D:22:3D:29:B7:1D:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/942F2D5AE55B7215DFCCA79C552D223D29B71DFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/1/323830343a343331633a3a2f33322d313238203d3e20323637353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:431c::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:11:30:34:0d:09:67:d7:cc:57:0b:d0:64:cf:e2:08:26:46:
         50:d6:de:ab:80:1f:7b:b6:10:9d:f5:60:fc:e9:cf:f9:10:f3:
         72:53:03:76:15:75:c7:25:9c:f8:02:de:56:f2:54:49:ae:95:
         ff:c0:41:bc:29:88:0b:87:60:04:4a:69:d1:c6:18:00:dc:64:
         fa:e8:13:4c:63:5d:b2:8a:c5:80:5d:65:ec:d6:54:5d:50:61:
         36:ca:8c:ef:8e:13:e3:99:9b:04:7f:2e:ac:72:2f:0b:84:05:
         3f:3c:e6:88:aa:2e:0f:e9:94:19:ef:e2:a4:d4:d5:47:a6:0d:
         44:a5:1b:27:69:1b:96:e4:c6:2f:68:43:4f:0e:6d:0d:7c:f2:
         36:d4:24:06:2c:69:85:da:5e:71:43:60:63:7f:c4:6d:eb:36:
         a2:c9:90:e0:42:af:2a:5b:00:2a:82:7c:c1:a9:e6:4b:f7:51:
         54:eb:01:73:1c:e2:05:bc:1f:97:8d:50:42:50:ed:9f:75:0f:
         42:12:01:3a:b9:8e:61:c3:14:a4:38:81:25:a8:40:34:48:37:
         7f:a6:26:ab:d5:73:87:9f:a0:60:6e:35:6d:77:b2:52:04:1d:
         bb:2e:53:51:3f:dd:0b:bf:44:a9:ff:92:42:a6:79:db:fa:bc:
         00:41:02:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:42 2024 by rpki-client on console-fra.rpki-client.org