Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/323830343a316564633a3a2f33322d3334203d3e20323634343530.roa
File:                     323830343a316564633a3a2f33322d3334203d3e20323634343530.roa (raw, json)
Hash identifier:          X60wzERoYo8cZ38241ffZy+6CbcqQL4SyTLj66H59Ac=
Subject key identifier:   9A:7F:62:97:C0:32:71:2F:82:D3:98:BC:51:3B:A4:0F:C0:1C:0D:12
Certificate issuer:       /CN=E48F797567B9CA8F99E372027B386B7DD7DBB414
Certificate serial:       6DFD5ED9BDA3058ED70BA474D3ABF11745FD2F57
Authority key identifier: E4:8F:79:75:67:B9:CA:8F:99:E3:72:02:7B:38:6B:7D:D7:DB:B4:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/323830343a316564633a3a2f33322d3334203d3e20323634343530.roa
Signing time:             Thu 04 Apr 2024 07:36:02 +0000
ROA not before:           Thu 04 Apr 2024 07:31:02 +0000
ROA not after:            Thu 03 Apr 2025 07:36:02 +0000
asID:                     264450
IP address blocks:        2804:1edc::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.crl
                          rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:fd:5e:d9:bd:a3:05:8e:d7:0b:a4:74:d3:ab:f1:17:45:fd:2f:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E48F797567B9CA8F99E372027B386B7DD7DBB414
        Validity
            Not Before: Apr  4 07:31:02 2024 GMT
            Not After : Apr  3 07:36:02 2025 GMT
        Subject: CN=9A7F6297C032712F82D398BC513BA40FC01C0D12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:43:bb:3d:ef:a0:88:77:e6:73:0b:7e:48:
                    62:50:3a:ad:2b:3a:c7:55:78:fb:8b:c6:fc:ec:a3:
                    eb:a5:57:fa:d5:a8:6d:cb:96:81:c5:b1:fe:cd:61:
                    87:33:cc:6c:9c:52:c7:a1:48:7e:8e:51:55:6f:36:
                    0a:8f:21:af:08:73:3c:fd:f2:cc:b2:47:64:cd:c1:
                    51:bf:58:08:09:fa:33:f2:ff:5f:4a:de:05:25:b7:
                    9b:cf:a0:4d:21:3c:ea:3f:8e:6c:04:ec:d3:bb:15:
                    df:a3:bc:0a:89:47:a1:a8:58:e6:39:72:83:43:06:
                    9e:de:69:bd:97:62:9a:17:2f:b2:8c:19:49:68:59:
                    0a:89:0f:b6:0a:d7:f0:2b:1f:a5:a4:94:3c:83:01:
                    4c:9a:eb:05:5b:00:f7:94:7c:04:34:e5:38:48:31:
                    16:67:78:1a:5f:2d:04:df:36:d1:48:49:2e:af:04:
                    4f:4c:4b:03:fe:8d:f0:68:76:cb:43:a3:94:00:41:
                    4c:ef:43:15:c3:46:34:a7:97:b0:11:2b:25:b0:26:
                    e6:46:b3:11:f2:a0:a8:69:5b:8e:e9:b8:a8:09:f9:
                    ed:02:69:5e:b5:3d:99:e7:2b:f6:41:8d:4d:51:61:
                    42:de:bb:c5:0e:04:9d:a2:40:4a:0b:c5:ae:54:4b:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7F:62:97:C0:32:71:2F:82:D3:98:BC:51:3B:A4:0F:C0:1C:0D:12
            X509v3 Authority Key Identifier:
                keyid:E4:8F:79:75:67:B9:CA:8F:99:E3:72:02:7B:38:6B:7D:D7:DB:B4:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E48F797567B9CA8F99E372027B386B7DD7DBB414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZU7ssz2qqQbvSyVBW7Grns6cJEWMJLyyEzEg3PC5UoY/1/323830343a316564633a3a2f33322d3334203d3e20323634343530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1edc::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:3b:ef:5f:ba:f3:5d:84:51:0a:7f:4f:23:47:84:e6:02:
         d9:ac:f6:fe:92:a0:05:32:66:a3:ad:55:7d:30:84:60:82:bc:
         c0:46:e3:d9:70:ea:2e:34:84:12:53:48:82:b5:2a:9c:c9:d5:
         c5:02:2d:62:17:2a:de:40:8a:5a:06:f0:14:29:26:96:cf:74:
         57:8c:2e:6c:1d:39:fe:cc:be:13:0d:8b:b7:9a:f9:6d:03:ad:
         4f:a3:35:c1:90:12:38:7e:30:5b:b3:b8:85:06:08:49:2b:2b:
         ab:c4:d9:be:fa:a0:b4:6d:ee:04:30:58:2a:96:ea:88:b4:66:
         ab:79:b3:e2:40:8b:2f:4f:70:c5:d7:89:e5:2d:3a:7a:74:a7:
         5a:76:44:34:fb:ec:55:09:35:0b:c1:49:51:f9:2c:cd:c6:c2:
         c3:90:d0:96:04:5d:4d:cb:4e:f7:8f:b2:4b:93:8d:6a:26:c0:
         ba:37:85:fd:21:53:22:93:80:41:e4:57:a9:f2:4c:1f:9b:1f:
         7f:38:5c:6a:fc:ee:dd:5a:ba:96:6f:13:c3:c5:c3:d3:30:6d:
         92:a6:8c:40:d1:98:94:cd:33:1f:8d:97:e4:67:71:4e:76:95:
         b1:9f:ba:be:ae:6f:8e:7e:17:75:e8:68:a5:c9:b3:7b:1c:b8:
         9f:c7:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:10:11 2024 by rpki-client on console-ams.rpki-client.org