Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/323830343a3434383a3a2f33322d3438203d3e20323632343237.roa
File:                     323830343a3434383a3a2f33322d3438203d3e20323632343237.roa (raw, json)
Hash identifier:          8djdXBsuIynMHZvCX2od5o2vvbFmKBTwEwcr+meeNxs=
Subject key identifier:   5A:13:0D:3A:53:11:31:9F:28:94:42:0A:C5:06:D6:CD:50:0E:6D:C5
Certificate issuer:       /CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
Certificate serial:       4D82B7AE202F400DE392DE7933DF4F548D2866C6
Authority key identifier: A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/323830343a3434383a3a2f33322d3438203d3e20323632343237.roa
Signing time:             Thu 04 Apr 2024 04:44:48 +0000
ROA not before:           Thu 04 Apr 2024 04:39:48 +0000
ROA not after:            Thu 03 Apr 2025 04:44:48 +0000
asID:                     262427
IP address blocks:        2804:448::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl
                          rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 13:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:82:b7:ae:20:2f:40:0d:e3:92:de:79:33:df:4f:54:8d:28:66:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A94C261E7F54FD8F9132D7CC65876A9FCCB22B44
        Validity
            Not Before: Apr  4 04:39:48 2024 GMT
            Not After : Apr  3 04:44:48 2025 GMT
        Subject: CN=5A130D3A5311319F2894420AC506D6CD500E6DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:d9:ae:31:03:b4:42:e2:14:6c:87:25:07:
                    a2:09:0a:29:60:68:76:12:e5:90:0f:07:07:6f:eb:
                    81:53:b8:d7:32:a7:4d:80:ad:97:f8:99:8a:88:29:
                    23:a3:86:5f:d4:ce:73:ca:ba:1d:fa:03:0b:6f:c3:
                    88:e6:cd:9a:0b:92:42:86:65:9f:40:e4:0b:c6:14:
                    c7:80:a1:08:cb:7e:86:50:67:99:6f:44:f4:a2:f3:
                    b0:de:4c:23:a5:d8:31:cd:88:b2:b8:66:1e:3a:b5:
                    98:0e:3d:e2:b5:8b:d8:84:01:93:38:bb:79:13:5b:
                    51:8d:58:b9:33:df:a7:23:e2:b0:9d:53:cb:8a:ef:
                    12:d2:33:0f:8f:aa:e4:5c:b0:a6:d4:c7:93:6d:79:
                    c5:53:92:3e:15:55:88:10:91:19:4e:b4:e9:7d:6a:
                    50:cb:7a:f1:26:a4:6a:c8:f3:11:c9:48:8f:b6:3c:
                    40:f3:d3:23:ec:7a:67:f4:b8:aa:96:b8:2a:91:2c:
                    f6:2f:5d:ac:62:a8:ee:49:c2:d9:85:d9:a5:cb:eb:
                    67:71:54:4a:6a:3c:88:ae:c6:47:18:8d:11:dd:24:
                    b0:d8:cf:a0:0e:32:6a:f0:6c:70:f9:4d:04:59:3a:
                    3f:46:c1:59:c3:87:97:b2:d2:d8:1b:09:ea:ae:09:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:13:0D:3A:53:11:31:9F:28:94:42:0A:C5:06:D6:CD:50:0E:6D:C5
            X509v3 Authority Key Identifier:
                keyid:A9:4C:26:1E:7F:54:FD:8F:91:32:D7:CC:65:87:6A:9F:CC:B2:2B:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A94C261E7F54FD8F9132D7CC65876A9FCCB22B44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DRCEXsE9Lq6bVLUc5pfcEW1CkWAWejjQczhhubvpacff/1/323830343a3434383a3a2f33322d3438203d3e20323632343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:448::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:d9:52:42:64:13:0c:8e:d5:1b:25:25:23:05:79:c7:7b:3b:
         7b:d1:41:87:5a:53:bc:52:1e:7c:65:3d:98:1d:1c:e2:d1:cb:
         10:55:dd:90:c2:21:93:4d:9b:27:d9:db:16:b3:2c:8e:b9:ba:
         d4:f3:17:5c:53:57:31:fd:1a:a7:74:38:2b:0f:3a:6a:63:10:
         78:0b:8c:ff:18:9a:06:6e:e3:45:c4:9b:8a:67:63:c2:ea:38:
         dd:f8:0a:b9:09:98:74:e9:1b:61:67:a2:f1:ed:ab:c9:6a:cd:
         73:4d:02:4a:a2:1a:b5:d8:b2:55:09:39:00:bb:4f:f3:c2:a9:
         37:62:a5:df:18:e3:75:17:53:2b:b3:ca:35:19:7f:33:91:f5:
         09:ba:52:67:43:1b:d8:97:4c:51:7d:f8:dd:a2:a7:2f:1e:1c:
         7f:a6:51:83:d0:14:2a:5a:35:e6:fc:94:cd:77:1c:31:63:8e:
         37:fa:7c:ec:0e:66:7b:17:da:c3:89:59:2c:e4:c2:97:b9:50:
         65:f3:01:d5:87:10:3a:a1:64:70:60:28:e7:14:8d:bd:4d:40:
         64:0d:56:e5:09:ed:20:69:29:86:47:0f:49:1e:e9:fe:83:66:
         1e:05:0d:7f:c8:d2:e7:c6:fb:bf:70:b5:ba:8a:60:4d:63:0b:
         4b:02:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:27:09 2024 by rpki-client on console-fra.rpki-client.org