Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa
File:                     323830343a3835383a3a2f33322d3438203d3e20323632333635.roa (raw, json)
Hash identifier:          Ztnf65SGuxUhDM0vOSbEtTwf7XQK0aedX6bG4k+ShWA=
Subject key identifier:   29:BF:94:40:F3:31:A3:73:C4:BC:3E:08:C3:AC:89:4E:4D:70:04:98
Certificate issuer:       /CN=267CFD31CE3D98329F42489671A8D3C987CB2774
Certificate serial:       40A51466103369AF9AFF669BC4174A828CDED029
Authority key identifier: 26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa
Signing time:             Thu 04 Apr 2024 13:39:19 +0000
ROA not before:           Thu 04 Apr 2024 13:34:19 +0000
ROA not after:            Thu 03 Apr 2025 13:39:19 +0000
asID:                     262365
IP address blocks:        2804:858::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.crl
                          rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 16:54:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a5:14:66:10:33:69:af:9a:ff:66:9b:c4:17:4a:82:8c:de:d0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=267CFD31CE3D98329F42489671A8D3C987CB2774
        Validity
            Not Before: Apr  4 13:34:19 2024 GMT
            Not After : Apr  3 13:39:19 2025 GMT
        Subject: CN=29BF9440F331A373C4BC3E08C3AC894E4D700498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:d5:d6:8c:8a:55:77:6a:98:f9:3f:86:4b:
                    1f:77:72:d0:ae:f1:b0:5d:3c:4f:23:34:a8:06:54:
                    04:8e:9b:7d:3f:4a:cd:0f:3d:29:88:21:06:2a:7a:
                    9e:4c:fa:b9:14:de:71:c9:87:39:e8:9d:13:ca:b3:
                    8d:29:33:d3:78:bd:08:51:37:76:60:34:47:21:40:
                    4e:f9:3c:0c:fb:e9:43:63:61:dc:85:76:b1:27:9b:
                    22:53:ef:99:38:b7:76:d5:b0:cd:a4:21:0e:c3:72:
                    5d:43:8a:cc:c6:fb:cf:4f:1b:0c:11:c2:f2:2d:79:
                    11:f5:54:57:88:14:3e:65:dc:40:f4:2c:5a:26:8f:
                    ca:47:71:49:f0:a4:18:d8:e4:b5:f0:3b:c3:b9:93:
                    08:e8:02:7a:60:b5:49:c2:8e:29:b5:f1:d1:a8:13:
                    14:14:3d:7c:fb:85:5b:7c:d9:a4:9d:9c:44:23:fc:
                    ab:74:9e:54:ec:06:7a:0d:cf:d1:8e:77:4c:53:4b:
                    7e:23:fc:7e:7c:33:45:f3:12:eb:11:ef:9c:b8:e7:
                    5e:cf:c4:b1:9b:60:ed:40:27:8c:0e:6f:d7:7e:3d:
                    36:b0:f8:74:1a:d1:29:6d:23:3e:dc:8a:fe:92:e8:
                    8c:7d:fb:0a:8d:11:3f:0a:b5:d3:b7:b8:bb:4c:ea:
                    f9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:BF:94:40:F3:31:A3:73:C4:BC:3E:08:C3:AC:89:4E:4D:70:04:98
            X509v3 Authority Key Identifier:
                keyid:26:7C:FD:31:CE:3D:98:32:9F:42:48:96:71:A8:D3:C9:87:CB:27:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/267CFD31CE3D98329F42489671A8D3C987CB2774.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/267CFD31CE3D98329F42489671A8D3C987CB2774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CiLRDdtgpLjBPbxqjYKbYewZSayYtRQPGn87PU36TpyS/1/323830343a3835383a3a2f33322d3438203d3e20323632333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:858::/32

    Signature Algorithm: sha256WithRSAEncryption
         e5:72:fa:e2:b7:f7:f7:53:d9:ac:17:86:6b:d4:7d:7e:ce:f0:
         55:de:7e:46:68:dc:de:2f:c3:7f:fc:7c:1a:cc:eb:d3:92:26:
         32:a6:cb:9b:f9:7a:84:93:36:66:23:cb:ce:2d:96:df:03:56:
         56:00:e6:c7:56:2c:04:b9:92:ef:ac:9b:b7:73:75:31:e0:23:
         76:1b:01:88:1b:6f:c6:17:e8:3f:73:7a:fa:95:42:be:c3:8a:
         43:d8:d0:45:2a:96:9d:47:74:ee:51:af:3b:84:08:6c:42:ce:
         b9:e7:9c:e5:5e:c2:99:f9:3e:eb:9a:e2:00:c5:49:ef:6a:d8:
         16:17:14:3a:72:f7:06:be:ff:c5:5b:ab:6e:ba:d5:56:ca:b3:
         07:df:a4:a8:45:88:36:3e:c9:90:27:40:89:25:9c:c9:e8:2d:
         9f:f1:c2:52:cf:03:ec:df:ad:ee:8f:54:7b:d8:34:e1:ab:b5:
         a2:0e:2c:00:1b:2e:ad:3f:4b:08:c9:86:33:74:3f:c0:cf:60:
         c7:e7:9f:e8:39:ec:35:90:2d:2f:25:4e:46:e6:3f:7d:3c:6a:
         9e:94:03:0a:44:72:97:37:d2:eb:4e:28:82:01:b6:24:df:7a:
         e8:5f:ab:6a:23:d3:4e:6c:5e:a0:e2:71:07:54:1b:61:e2:bd:
         58:0f:ed:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:08 2024 by rpki-client on console-fra.rpki-client.org