Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa
File:                     323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa (raw, json)
Hash identifier:          wqoZeNxA+6GWQj/+xRahQvLgmOguwLiY9ovP9agfqnA=
Subject key identifier:   ED:36:EB:E9:A3:AC:CE:6F:35:89:FC:98:6D:A8:14:40:F1:D2:43:C4
Certificate issuer:       /CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
Certificate serial:       4681B07A0DC1F5EA2D285706E27D4FE8AB5F41F6
Authority key identifier: 27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa
Signing time:             Mon 02 Sep 2024 12:52:33 +0000
ROA not before:           Mon 02 Sep 2024 12:47:33 +0000
ROA not after:            Mon 01 Sep 2025 12:52:33 +0000
asID:                     263541
IP address blocks:        2804:1398:3f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl
                          rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 07:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:81:b0:7a:0d:c1:f5:ea:2d:28:57:06:e2:7d:4f:e8:ab:5f:41:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27515C5E9BC6223F27332FBE1616CE57715E9CAF
        Validity
            Not Before: Sep  2 12:47:33 2024 GMT
            Not After : Sep  1 12:52:33 2025 GMT
        Subject: CN=ED36EBE9A3ACCE6F3589FC986DA81440F1D243C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:61:4f:c3:5d:98:88:5b:b5:10:92:1e:c0:4f:
                    a8:99:7d:e3:d5:b9:60:9c:3b:85:42:03:bd:09:2e:
                    d3:93:81:d1:3a:18:b8:bc:47:ef:a6:89:0d:57:38:
                    3f:ca:9b:c1:65:17:6e:48:a0:16:0b:7d:6b:16:91:
                    ad:d9:23:2e:03:96:37:ba:1c:61:4e:88:55:21:f6:
                    05:d9:6f:54:e7:3e:93:7e:9b:1c:64:86:eb:27:df:
                    75:ca:c1:07:be:bd:53:0e:60:4d:e0:c2:3c:eb:4e:
                    e6:5d:0b:05:a6:93:0d:1b:a0:e2:b8:30:bf:01:59:
                    9d:1a:ab:6f:8e:3b:22:62:74:1e:a3:40:c4:91:4c:
                    5a:5f:05:67:27:52:aa:ee:6b:d8:c2:8d:27:54:21:
                    cf:d4:13:fc:d9:f5:10:90:ed:05:89:50:1b:98:84:
                    37:b5:56:4f:0b:ca:66:fb:af:b1:5c:be:36:cd:9e:
                    cc:45:ec:17:87:d6:ce:67:16:bf:22:30:9b:3a:f0:
                    c1:4c:a7:97:4c:b8:f1:6a:27:6d:20:a8:a3:40:46:
                    1c:48:cf:9c:b0:2a:1a:a4:db:93:09:5f:96:61:72:
                    2f:92:11:59:be:7c:39:ed:52:c7:2c:d8:7f:6e:20:
                    a9:42:4f:74:39:85:72:09:3d:46:4d:ad:7f:f3:64:
                    94:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:36:EB:E9:A3:AC:CE:6F:35:89:FC:98:6D:A8:14:40:F1:D2:43:C4
            X509v3 Authority Key Identifier:
                keyid:27:51:5C:5E:9B:C6:22:3F:27:33:2F:BE:16:16:CE:57:71:5E:9C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/27515C5E9BC6223F27332FBE1616CE57715E9CAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/27515C5E9BC6223F27332FBE1616CE57715E9CAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336630303a3a2f34302d3430203d3e20323633353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1398:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:b5:dd:a3:97:d6:78:1c:71:76:4d:0d:2b:59:59:bc:0d:93:
         52:a0:0c:8f:0a:2a:b8:6a:e4:e2:ca:94:99:4b:28:8b:f6:3d:
         59:b3:cd:4c:19:02:e0:0c:b9:6e:1a:8b:d2:01:c2:38:22:c4:
         57:df:07:1d:51:4e:d9:3a:e0:af:32:49:f1:3c:65:35:e2:b6:
         ed:c6:4f:dc:b8:ab:ec:bb:a1:7a:09:bc:f5:44:81:9f:b1:ad:
         4a:b0:d4:70:99:df:e0:85:79:e6:ab:2c:b5:60:8b:ed:db:6c:
         7f:35:0c:6e:b8:11:10:43:b7:fc:9c:17:52:39:a3:0f:48:33:
         80:d1:9f:a3:1b:27:b7:4d:0a:ac:84:70:77:ab:70:dd:25:4c:
         83:b1:05:df:1f:f2:2d:98:07:80:94:05:49:fe:c0:1f:8b:3e:
         c6:af:96:5c:3d:64:29:0d:20:3d:76:4b:b8:53:11:13:bc:1d:
         64:58:fd:da:e5:21:62:03:55:79:bd:f9:94:2d:86:95:67:68:
         55:5d:87:72:c3:7e:20:4d:a4:2c:d2:ce:3d:61:a2:bf:39:ad:
         c1:01:ed:6f:8d:26:0a:13:49:a5:31:dd:7c:37:ed:b9:5e:6a:
         bc:f9:97:63:67:b4:88:cd:ef:89:33:33:3d:46:20:ef:4c:b3:
         d2:a2:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 07:01:38 2024 by rpki-client on console-ams.rpki-client.org