Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/323830343a326535303a3a2f33322d313238203d3e20323635333338.roa
File:                     323830343a326535303a3a2f33322d313238203d3e20323635333338.roa (raw, json)
Hash identifier:          c/3TJuBNwUa0q/vPeXLXCQpfCH945qnv6Jk5PqqpgEM=
Subject key identifier:   08:81:BD:08:7E:B6:E4:FC:9D:72:03:EC:21:67:44:81:6A:30:72:E0
Certificate issuer:       /CN=54246B97AAFA16155E3EF41BE71027C68641702A
Certificate serial:       4698FF344204D34ED9B19DEB227444FD08BF01AC
Authority key identifier: 54:24:6B:97:AA:FA:16:15:5E:3E:F4:1B:E7:10:27:C6:86:41:70:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54246B97AAFA16155E3EF41BE71027C68641702A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/323830343a326535303a3a2f33322d313238203d3e20323635333338.roa
Signing time:             Thu 25 Jul 2024 17:52:03 +0000
ROA not before:           Thu 25 Jul 2024 17:47:03 +0000
ROA not after:            Thu 24 Jul 2025 17:52:03 +0000
asID:                     265338
IP address blocks:        2804:2e50::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/54246B97AAFA16155E3EF41BE71027C68641702A.crl
                          rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/54246B97AAFA16155E3EF41BE71027C68641702A.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54246B97AAFA16155E3EF41BE71027C68641702A.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 02:56:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:98:ff:34:42:04:d3:4e:d9:b1:9d:eb:22:74:44:fd:08:bf:01:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54246B97AAFA16155E3EF41BE71027C68641702A
        Validity
            Not Before: Jul 25 17:47:03 2024 GMT
            Not After : Jul 24 17:52:03 2025 GMT
        Subject: CN=0881BD087EB6E4FC9D7203EC216744816A3072E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:c7:1b:59:2d:09:06:05:ba:74:d9:01:23:
                    42:77:23:bc:63:0e:76:cb:b2:5c:8b:30:b9:c5:ad:
                    37:e3:b7:40:9a:80:38:d5:74:e1:bd:73:ab:dc:4a:
                    34:9f:d1:a1:5c:db:e1:cb:ad:27:30:ea:79:fc:0e:
                    78:9f:ad:b5:ae:c4:ee:e7:54:37:c3:3c:32:06:da:
                    35:0e:00:8d:cf:5e:04:c2:d7:e7:c9:e6:4a:5a:43:
                    1d:a2:d1:7d:25:5f:f3:c2:be:62:f7:e9:07:84:de:
                    9b:cd:c0:38:9e:7f:cd:d1:ef:3e:1f:85:7d:e2:28:
                    e5:60:a8:d7:a1:5e:a9:19:99:17:5f:bf:58:45:3a:
                    c7:fc:ae:16:d9:92:6e:15:11:87:2a:87:4d:a1:24:
                    e1:8a:1b:8f:3c:2e:b2:9e:10:ce:12:e5:7e:e6:cf:
                    00:e4:14:9a:64:39:67:c5:91:07:32:5e:3c:95:eb:
                    2c:5c:41:8a:06:5d:e7:f3:92:11:04:5f:96:90:e3:
                    12:f7:b7:c6:44:00:b6:3d:97:ed:3d:29:d8:ca:a4:
                    6b:9e:5c:68:9e:b9:19:68:9a:ea:2d:d1:99:c4:10:
                    e5:aa:a2:f7:fc:b8:01:d9:0e:af:33:12:51:88:31:
                    48:46:fa:d0:d1:aa:94:17:7d:0d:27:42:5e:1f:87:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:81:BD:08:7E:B6:E4:FC:9D:72:03:EC:21:67:44:81:6A:30:72:E0
            X509v3 Authority Key Identifier:
                keyid:54:24:6B:97:AA:FA:16:15:5E:3E:F4:1B:E7:10:27:C6:86:41:70:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/54246B97AAFA16155E3EF41BE71027C68641702A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/54246B97AAFA16155E3EF41BE71027C68641702A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CP4k4rnKkJRJP9Rje3QT3iGyKSWpUP8p6W7ViztoeYBX/0/323830343a326535303a3a2f33322d313238203d3e20323635333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e50::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:a0:3a:d8:1b:b1:74:dc:88:e0:db:e4:7e:e2:3e:48:50:88:
         ec:eb:54:46:e3:8a:c3:08:ac:8c:53:2f:d7:7f:ec:a4:8a:20:
         7e:3b:dd:80:d5:25:6f:31:fc:e5:9a:a0:ed:39:ad:30:75:86:
         3e:d4:14:d5:f2:6e:54:aa:50:50:b4:df:a9:ec:07:53:3a:69:
         8b:84:d6:d7:1f:6c:93:04:95:78:d0:01:50:b8:cf:9e:a6:5f:
         ed:bf:87:85:bd:f7:2a:21:13:3a:20:4c:05:a9:6e:5d:0e:82:
         99:d1:e4:57:84:f6:9d:c6:60:f9:76:48:c2:6f:04:2e:2e:a1:
         1f:0e:7b:20:e0:9a:d0:bd:55:5c:86:f0:a6:57:44:5e:bf:ac:
         57:5b:46:aa:aa:a2:5a:ce:70:4d:86:1e:23:40:48:78:ef:34:
         a6:8d:43:05:11:bb:52:ee:19:8e:a4:5c:73:a6:b2:7e:7e:7d:
         b6:37:1c:99:59:fd:c0:c1:f3:34:d8:7e:de:7e:53:ba:9b:18:
         5d:62:3c:c4:53:0b:c2:8d:ee:0f:47:49:a1:57:b6:55:41:18:
         1f:ee:d4:13:c7:ab:82:a8:eb:86:1a:0b:72:04:88:88:d6:db:
         b0:ce:c6:ed:44:3f:5d:bf:fd:80:ba:42:c4:0b:a9:f2:b9:01:
         a6:cb:d9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:15:52 2024 by rpki-client on console-fra.rpki-client.org