Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa
File:                     323830343a383833383a3a2f33322d3334203d3e20323633303237.roa (raw, json)
Hash identifier:          skdVRhznOCLvCdjcEkqbQhKNQVpakhJuh4/BvNnHrSQ=
Subject key identifier:   EC:A9:61:31:4B:81:2D:BC:4B:33:6F:D2:0F:80:A2:00:0D:38:99:B6
Certificate issuer:       /CN=D0A1149273197F052C828789EFA0AE353109D430
Certificate serial:       48CCADA3FD7DBD5C422691F1A72F2836C1DA5604
Authority key identifier: D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa
Signing time:             Thu 04 Apr 2024 05:00:44 +0000
ROA not before:           Thu 04 Apr 2024 04:55:44 +0000
ROA not after:            Thu 03 Apr 2025 05:00:44 +0000
asID:                     263027
IP address blocks:        2804:8838::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.crl
                          rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 06:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:cc:ad:a3:fd:7d:bd:5c:42:26:91:f1:a7:2f:28:36:c1:da:56:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A1149273197F052C828789EFA0AE353109D430
        Validity
            Not Before: Apr  4 04:55:44 2024 GMT
            Not After : Apr  3 05:00:44 2025 GMT
        Subject: CN=ECA961314B812DBC4B336FD20F80A2000D3899B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bb:b1:3e:29:22:b4:87:22:76:fd:4f:53:9d:
                    3b:44:ab:25:df:85:9e:dc:46:5c:0f:0d:12:b0:af:
                    bc:66:5f:e9:56:28:c7:4e:d6:67:c3:31:c2:3b:17:
                    f7:bd:89:46:d2:15:de:52:1a:da:ea:0d:14:02:17:
                    09:74:e4:d3:18:24:a9:80:f2:ab:ca:97:81:6e:8e:
                    be:5a:87:0a:55:b5:27:ef:d8:3e:b2:60:96:f5:7c:
                    01:ce:f7:2b:85:0e:79:fc:ad:32:c6:1b:94:77:e7:
                    0b:5f:e2:53:77:32:73:33:e8:b9:07:f5:5d:2b:3e:
                    7b:f9:32:5e:22:6c:87:66:88:bf:c2:a3:68:7d:1e:
                    5c:cf:d4:7b:00:c6:1d:05:2c:bb:ab:6c:bf:f2:92:
                    52:a6:35:81:ae:16:61:53:e6:2c:04:2c:05:06:1d:
                    24:d5:b6:47:ee:74:50:46:cc:01:ee:30:7b:59:98:
                    88:31:1f:57:99:dd:1f:50:fc:73:97:5a:26:f3:62:
                    9d:9d:58:ef:26:8a:60:17:35:a3:60:98:d2:98:ee:
                    3e:25:ba:6a:bd:64:1f:2a:fc:e3:4e:e7:a7:d8:8c:
                    b3:d4:6e:40:36:9c:33:e9:98:a1:76:b4:a3:61:a5:
                    c8:11:f1:af:4e:5c:3c:e3:77:97:70:5a:7e:34:87:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:61:31:4B:81:2D:BC:4B:33:6F:D2:0F:80:A2:00:0D:38:99:B6
            X509v3 Authority Key Identifier:
                keyid:D0:A1:14:92:73:19:7F:05:2C:82:87:89:EF:A0:AE:35:31:09:D4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/D0A1149273197F052C828789EFA0AE353109D430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1149273197F052C828789EFA0AE353109D430.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CvkcAZgdsAcXScvuijHgn4yZdUJ4FuTCee9WF4aRg2Cj/1/323830343a383833383a3a2f33322d3334203d3e20323633303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8838::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:c1:98:46:2c:76:92:fa:77:6b:11:ef:40:75:07:13:8b:91:
         8b:af:90:e7:00:51:d0:d6:82:09:21:42:25:27:85:88:f7:43:
         30:39:0f:c6:38:ca:8a:f8:69:85:6b:22:72:1a:c2:bc:f9:3d:
         b4:fc:dd:94:d6:6c:c9:67:77:fc:43:9b:82:a6:b0:6a:15:5d:
         71:cb:09:dc:43:7c:cd:08:58:3b:da:42:1a:d6:49:97:fe:d6:
         51:4c:d8:c2:6a:4a:4a:62:b9:67:f4:68:f2:5f:cf:5f:12:64:
         dc:93:84:65:16:61:9c:b1:8a:3e:85:3b:fa:cd:6e:5f:1f:b2:
         0e:46:d3:22:7a:a4:e8:81:86:fc:ff:1f:17:0a:ec:bc:bf:8a:
         eb:7c:fb:cd:be:97:23:b1:e1:e3:3a:3e:17:c9:23:3d:aa:8e:
         5d:f1:96:df:12:72:81:bc:bd:96:2b:11:1f:f9:f6:5a:a2:0c:
         01:2b:d9:f8:a8:ff:b7:45:31:89:76:e3:e8:3f:ff:f7:d4:6c:
         0f:5c:65:bf:21:a1:13:01:7c:8c:c6:fd:e6:6e:37:d7:c0:e3:
         64:a0:70:af:9b:70:0c:43:3e:5d:59:c8:da:79:db:8b:7e:4a:
         78:d2:74:b6:45:5b:f1:d4:eb:7f:88:17:df:c1:db:f0:a9:c9:
         92:a0:ba:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:01:02 2024 by rpki-client on console-fra.rpki-client.org